# Apify

Apify declares [4 subprocessors](https://thirdpartyindex.com/vendors/apify#subprocessors) in [its subprocessor list](https://trust.apify.com/subprocessors), which we last checked on 2026-11-11 ([evidence](https://thirdpartyindex.com/evidence/123911)). They include [Amazon Web Services](https://thirdpartyindex.com/vendors/amazon-web-services), [Snowflake](https://thirdpartyindex.com/vendors/snowflake) and [MongoDB](https://thirdpartyindex.com/vendors/mongodb). No published changes since we first read it on 2026-09-22. [7 tracked vendors](https://thirdpartyindex.com/vendors/apify#used-by) name Apify as a subprocessor, including [Yousign](https://thirdpartyindex.com/vendors/yousign), [swan](https://thirdpartyindex.com/vendors/swan) and [Chat Aid](https://thirdpartyindex.com/vendors/chat-aid).

Apify (apify.com): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/apify
- Documents last verified: 2026-11-11
- Transparency rating: 100/100 (how much it publishes, not how secure it is): Subprocessor list 30/30; Processing locations 8/8; Purposes 7/7; Data processing addendum 12/12; Trust center 8/8; Privacy policy 6/6; security.txt 6/6; Security page 5/5; Status page 5/5; Vulnerability disclosure 5/5; Pages still reachable 8/8
- Supply chain: relies on 4 tracked vendors directly, 21 within two hops, 137 within three; 7 tracked vendors rely on it directly, 11 within two hops, 93 within three
- Cite as: Apify, Third Party Index, https://thirdpartyindex.com/vendors/apify (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Trust center | https://trust.apify.com/ | 2026-11-11 | 2026-11-11 |
| Subprocessor list | https://trust.apify.com/subprocessors | 2026-11-11 | 2026-10-19 |
| Data processing addendum | https://docs.apify.com/legal/data-processing-addendum | 2026-11-11 | 2026-09-22 |
| Privacy policy | https://docs.apify.com/legal/privacy-policy | 2026-11-11 | 2026-10-26 |
| Terms | https://docs.apify.com/legal/general-terms-and-conditions | 2026-11-11 | 2026-10-21 |
| Security page | https://docs.apify.com/security | 2026-11-11 | 2026-11-04 |
| security.txt | https://apify.com/.well-known/security.txt | 2026-11-11 | 2026-10-14 |
| Status page | https://status.apify.com/ | 2026-11-11 | 2026-11-11 |
| Security advisories | https://docs.apify.com/security/vulnerability-disclosure | 2026-11-11 | 2026-09-22 |

## Subprocessors (4)

As its own list states them.

| Subprocessor | Purpose | Location | Listed since |
|---|---|---|---|
| [Amazon Web Services](https://thirdpartyindex.com/vendors/amazon-web-services.md) | AWS is the main cloud provider for Apify platform providing networking, compute, and various storage types.; Cloud provider | US | 2026-09-28 |
| [Mezmo (ex-LogDNA)](https://thirdpartyindex.com/vendors/mezmo.md) | LogDNA is used for centralized log collection, search, and alerts based on them. | US | 2026-09-28 |
| [MongoDB Atlas](https://thirdpartyindex.com/vendors/mongodb.md) | Data storage and processing; MongoDB Atlas is managed solution for MongoDB used as primary database for all the user metadata. | US | 2026-09-28 |
| [Snowflake](https://thirdpartyindex.com/vendors/snowflake.md) | A cloud-based data warehouse for data storage and analytics.; Data storage and processing | US | 2026-09-28 |

Read from ([evidence](https://thirdpartyindex.com/evidence/13849)). CSV: https://thirdpartyindex.com/vendors/apify/subprocessors.csv

## Compliance

As its trust center lists them.

- Audited: SOC 2 ([evidence](https://thirdpartyindex.com/evidence/78248))
- Claimed: SOC 2 Type II, GDPR, CCPA/CPRA ([evidence](https://thirdpartyindex.com/evidence/78248))

## Web Technologies

Apify's homepage made 358 requests to 32 domains, and 15 services controlled by another company. Loaded on 2026-11-04 by a browser that accepted nothing; other visits may load more or less. What a page loads is not a list of who receives customer data.

15 third parties by category: Analytics 6 (HubSpot, TikTok, LinkedIn, Leadfeeder, Quora, TikTok); Advertising 5 (Google Cloud, Microsoft, X Corp., OpenAI, Reddit, Inc.); Live chat 1 (reviewed: Intercom); Cookie compliance 1 (OneTrust); Affiliate programs 1 (FirstPromoter); Issue trackers 1 (usually detected as Issue trackers: Sentry). Each company that appears controlled by another organization is counted once, under the main category of the technologies detected from it on this homepage or, when none was, the category recorded from the company's own page (marked reviewed) or else the one it is usually detected as on other published homepages (marked as such); unclassified: none of these.

### Third parties (15)

- Google Cloud: 25 requests to google.com, doubleclick.net, googletagmanager.com, googleadservices.com; DoubleClick Floodlight, Google Analytics, Google Tag Manager
- Microsoft: 11 requests to clarity.ms, bing.com, bing.net; Microsoft Advertising
- OneTrust: 11 requests to cookiepro.com, onetrust.com; OneTrust
- HubSpot: 9 requests to hs-scripts.com, hubspot.com, hs-analytics.net, hs-banner.com, hsforms.com; HubSpot, HubSpot Analytics
- TikTok: 6 requests to tiktok.com; TikTok Pixel
- Intercom: 5 requests to intercom.io, intercomcdn.com
- X Corp.: 4 requests to twitter.com, ads-twitter.com, t.co; Twitter Ads
- LinkedIn: 3 requests to linkedin.com, licdn.com; Linkedin Insight Tag
- OpenAI: 3 requests to openai.com; ChatGPT Ads Measurement Pixel
- Reddit, Inc.: 3 requests to reddit.com, redditstatic.com; Reddit Ads
- Leadfeeder: 2 requests to lfeeder.com; Leadfeeder
- Quora: 2 requests to quora.com; Quora Pixel
- Sentry: 2 requests to sentry.io
- FirstPromoter: 1 request to firstpromoter.com; FirstPromoter
- TikTok: 1 request to tiktokw.us; TikTok Pixel

### First party (1)

- Apify: 270 requests to apify.com, apifyusercontent.com; Amazon CloudFront, Amazon Web Services, GrowthBook 2.0.0, HSTS, HTTP/3, Intercom, Microsoft Clarity, Next.js 16.4.3, Next.js App Router, Open Graph, Priority Hints, Prism, React, Sentry, Turbopack, Webpack, styled-components 6.6.0

10 tracked companies loaded by the homepage are not in Apify's subprocessor list. A website can use a service without it processing customer data.

## Subprocessor of (7)

Tracked vendors whose own subprocessor lists name it, and what they say they use it for.

- [Chat Aid](https://thirdpartyindex.com/vendors/chat-aid.md): Website crawling to collect data from connected websites
- [Civic Roundtable](https://thirdpartyindex.com/vendors/civic-roundtable.md): Powers external search of connected websites.; Search
- [Letter AI](https://thirdpartyindex.com/vendors/letter-ai.md): Web scraping
- [My AskAI](https://thirdpartyindex.com/vendors/my-askai.md): A web scraping and automation platform used to extract data from websites and automate web tasks.
- [swan](https://thirdpartyindex.com/vendors/swan.md): Web scraping / data collection
- [Type](https://thirdpartyindex.com/vendors/type.md)
- [Yousign](https://thirdpartyindex.com/vendors/yousign.md): Services for database acquisition and enrichment

## Service status

Incidents it reported on its own status page.

- Last 90 days: 3 reported incidents (1 major or critical, 1 minor, 1 with no impact stated)
- Typical time to resolve: 2 h 8 min
- Status page last read: 2026-11-12
- Its status page says now: Minor Service Outage (affected: API (api.apify.com): partial outage, Actors: partial outage)
- Under way: Security incident (minor), since 2026-11-11 19:46 UTC
- 2026-11-11: Security incident (minor)
- 2026-09-22: Elevated errors in Actor runs (major)
- 2026-08-20: Degraded Actor performance (no impact stated)
- 2026-08-13: Degraded performance of SHADER proxy group (minor)
- 2026-08-07: Degraded performance of Google SERP Proxy (minor)
- 2026-08-03: Degraded performance of Google SERP Proxy (major)
- 2026-07-26: Increased error rate on Actor Standby endpoints (minor)
- 2026-07-21: Degraded performance of API operations due to slow database operations (critical)

## Incidents reported by Apify's subprocessors

Incidents reported in the last 30 days on their own status pages by 2 vendors Apify lists as subprocessors. A subprocessor list names a company, not the service an incident touched.

- 2026-11-12: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which Apify lists as a subprocessor, reported INC20000347 (minor)
- 2026-11-07: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which Apify lists as a subprocessor, reported INC20000337 (minor)
- 2026-11-06: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which Apify lists as a subprocessor, reported INC20000336 (minor)
- 2026-10-30: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which Apify lists as a subprocessor, reported INC20000321 (minor)
- 2026-10-29: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which Apify lists as a subprocessor, reported INC20000319 (minor)
- 2026-10-21: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which Apify lists as a subprocessor, reported INC20000301 (critical)
- 2026-10-21: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which Apify lists as a subprocessor, reported INC20000299 (minor)
- 2026-10-20: [MongoDB](https://thirdpartyindex.com/vendors/mongodb#status), which Apify lists as a subprocessor, reported GCP Availability Zone europe-west2-b connectivity issues (minor)
- 2026-10-20: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which Apify lists as a subprocessor, reported INC20000294 (critical)
- 2026-10-19: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which Apify lists as a subprocessor, reported INC20000290 (minor)
- 2026-10-16: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which Apify lists as a subprocessor, reported INC20000287 (critical)
- 2026-10-13: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which Apify lists as a subprocessor, reported INC20000277 (minor)

## Recent changes

Changes to its documents and subprocessor list since monitoring began.

- 2026-10-19: Added certification: CCPA/CPRA ([evidence](https://thirdpartyindex.com/evidence/124148))

Feed: https://thirdpartyindex.com/vendors/apify/changes.atom

The subprocessor list as we read it on any date: https://thirdpartyindex.com/labs/time-machine/apify

## Security contact

From its security.txt (https://apify.com/.well-known/security.txt) ([evidence](https://thirdpartyindex.com/evidence/98574)):

- Contact: mailto:security@apify.com
- Disclosure policy: https://docs.apify.com/security/vulnerability-disclosure
- Security jobs: https://apify.com/jobs
- Languages: en
- Valid until 2035-01-01

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api
