# apiphani

apiphani declares [12 subprocessors](https://thirdpartyindex.com/vendors/apiphani#subprocessors) in [its subprocessor list](https://trust.apiphani.com/subprocessors), which we last checked on 2026-10-26 ([evidence](https://thirdpartyindex.com/evidence/97305)). They include [Amazon Web Services](https://thirdpartyindex.com/vendors/amazon-web-services), [Google Cloud](https://thirdpartyindex.com/vendors/google-cloud) and [Microsoft](https://thirdpartyindex.com/vendors/microsoft). No published changes since we first read it on 2026-10-14.

apiphani (apiphani.io): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/apiphani
- Documents last verified: 2026-10-26
- Transparency rating: 66/100 (how much it publishes, not how secure it is): Subprocessor list 30/30; Processing locations 8/8; Purposes 6/7 (partial); Data processing addendum 0/12 (not found); Trust center 8/8; Privacy policy 6/6; security.txt 0/6 (not found); Security page 0/5 (not found); Status page 0/5 (not found); Vulnerability disclosure 0/5 (not found); Pages still reachable 8/8
- Supply chain: relies on 11 tracked vendors directly, 110 within two hops, 387 within three; 0 tracked vendors rely on it directly, 0 within two hops, 0 within three
- Cite as: apiphani, Third Party Index, https://thirdpartyindex.com/vendors/apiphani (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Trust center | https://trust.apiphani.com/ | 2026-10-26 | 2026-10-26 |
| Subprocessor list | https://trust.apiphani.com/subprocessors | 2026-10-26 | 2026-10-14 |
| Privacy policy | https://www.apiphani.io/apiphani-privacy-policy/ | 2026-10-26 | 2026-10-13 |
| Terms | https://www.apiphani.io/terms/ | 2026-10-26 | 2026-10-13 |

## Subprocessors (12)

As its own list states them.

| Subprocessor | Purpose | Location | Listed since |
|---|---|---|---|
| [Amazon Web Services](https://thirdpartyindex.com/vendors/amazon-web-services.md) (AI model provider: Amazon Bedrock) | Application hosting, infrastructure, storage, and LLM inference (Bedrock). AWS GovCloud is used for FedRAMP-bound environments where applicable.; Hosting & infrastructure | United States | 2026-10-14 |
| [Better Stack](https://thirdpartyindex.com/vendors/better-stack.md) | Application log aggregation | Engineering | 2026-10-14 |
| [Dynatrace](https://thirdpartyindex.com/vendors/dynatrace.md) | — | Monitoring of infrastructure and applications | 2026-10-14 |
| Frill | Customer feedback and feature request submissions | Customer support | 2026-10-14 |
| [Google Cloud](https://thirdpartyindex.com/vendors/google-cloud.md) | Sign in with Google (OAuth) | Identity provider | 2026-10-14 |
| [Intercom](https://thirdpartyindex.com/vendors/intercom.md) | Customer support conversations | Customer support | 2026-10-14 |
| [LangSmith](https://thirdpartyindex.com/vendors/langchain.md) | LLM trace and prompt monitoring for LuumenAI features | Engineering | 2026-10-14 |
| [Microsoft Azure](https://thirdpartyindex.com/vendors/microsoft.md) | IAM in support of MS365 applications.; Identity & authentication | United Stated | 2026-10-14 |
| [PostHog](https://thirdpartyindex.com/vendors/posthog.md) | Data analytics; Product analytics on the Luumen application | United States | 2026-10-14 |
| [Stripe](https://thirdpartyindex.com/vendors/stripe.md) | Self-service billing and payment processing | Finance and payments | 2026-10-14 |
| [Vanta](https://thirdpartyindex.com/vendors/vanta.md) | Continuous security and compliance monitoring; Governance, Risk Management, Compliance | United States | 2026-10-14 |
| [WorkOS](https://thirdpartyindex.com/vendors/workos.md) | Authentication and identity layer — OAuth, enterprise SSO (SAML/OIDC), and directory sync (SCIM); Engineering | United States | 2026-10-14 |

Read from ([evidence](https://thirdpartyindex.com/evidence/97305)). CSV: https://thirdpartyindex.com/vendors/apiphani/subprocessors.csv

AI model providers (or a cloud provider's AI model service) among these entries: 1. All vendors that list one: https://thirdpartyindex.com/ai

## Compliance

As its trust center lists them.

- Audited: SOC 2, ISO/IEC 27001, CSA STAR ([evidence](https://thirdpartyindex.com/evidence/97306))
- Claimed: SOC 2 Type II ([evidence](https://thirdpartyindex.com/evidence/97306))

## Web Technologies

apiphani's homepage made 88 requests to 7 domains, and 2 services controlled by another company. Loaded on 2026-10-14 by a browser that accepted nothing; other visits may load more or less. What a page loads is not a list of who receives customer data.

2 third parties by category: Analytics 1 (usually detected as Analytics: HubSpot); Tag managers 1 (Google Cloud). Each company that appears controlled by another organization is counted once, under the main category of the technologies detected from it on this homepage or, when none was, the category recorded from the company's own page (marked reviewed) or else the one it is usually detected as on other published homepages (marked as such); unclassified: none of these.

### Third parties (2)

- Google Cloud: 21 requests to gstatic.com, google.com, fonts.googleapis.com, googletagmanager.com; Google Tag Manager, reCAPTCHA (its subprocessor list names it too)
- HubSpot: 5 requests to hsforms.com, hsforms.net

### First party (1)

- apiphani: 62 requests to apiphani.io; Autoptimize 3.1.16, Cloudflare, Complianz 7.6.6, Contact Form 7 6.2.1, HTTP/3, HubSpot, HubSpot Analytics, HubSpot WordPress plugin 11.3.75, LazySizes, Lightbox, MySQL, Open Graph, PHP, Priority Hints, RankMath SEO, Slick, Speculative Loading 1.7.0, WP Engine, WordPress, WordPress Block Editor, jQuery 3.7.1, jQuery Migrate 3.4.1

1 tracked company loaded by the homepage is not in apiphani's subprocessor list. A website can use a service without it processing customer data.

## Subprocessor of (0)

No tracked vendor lists it.

## Incidents reported by apiphani's subprocessors

Incidents reported in the last 30 days on their own status pages by 6 vendors apiphani lists as subprocessors. A subprocessor list names a company, not the service an incident touched.

- 2026-10-24: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which apiphani lists as a subprocessor, reported Elevated Blik errors (no impact stated)
- 2026-10-23: [WorkOS](https://thirdpartyindex.com/vendors/workos#status), which apiphani lists as a subprocessor, reported Elevated errors across SSO and AuthKit (major)
- 2026-10-22: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which apiphani lists as a subprocessor, reported Elevated Bancontact errors (no impact stated)
- 2026-10-22: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which apiphani lists as a subprocessor, reported Elevated Bancontact errors (no impact stated)
- 2026-10-21: [Better Stack](https://thirdpartyindex.com/vendors/better-stack#status), which apiphani lists as a subprocessor, reported Incorrectly sent out downtime notifications to single-region monitors due to intermittent Internet backbone issue (minor)
- 2026-10-21: [Vanta](https://thirdpartyindex.com/vendors/vanta#status), which apiphani lists as a subprocessor, reported Stale data for CloudflareDomainInventory and CloudflareZoneRule (major)
- 2026-10-20: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which apiphani lists as a subprocessor, reported Spike in cancellations and expired errors with PayByBank payments (no impact stated)
- 2026-10-20: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which apiphani lists as a subprocessor, reported Elevated Revolut Pay errors (no impact stated)
- 2026-10-19: [WorkOS](https://thirdpartyindex.com/vendors/workos#status), which apiphani lists as a subprocessor, reported Elevated AuthKit Error Rates (major)
- 2026-10-15: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which apiphani lists as a subprocessor, reported Elevated declines on Mastercard (no impact stated)
- 2026-10-15: [WorkOS](https://thirdpartyindex.com/vendors/workos#status), which apiphani lists as a subprocessor, reported Radar SMS challenge failures for phone numbers in mainland China (+86) (major)
- 2026-10-15: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which apiphani lists as a subprocessor, reported Elevated declines on Visa (no impact stated)
- 2026-10-15: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which apiphani lists as a subprocessor, reported Elevated Amazon Pay errors (no impact stated)
- 2026-10-14: [LangChain](https://thirdpartyindex.com/vendors/langchain#status), which apiphani lists as a subprocessor, reported Sandbox Performance Degraded (minor)
- 2026-10-14: [Intercom](https://thirdpartyindex.com/vendors/intercom#status), which apiphani lists as a subprocessor, reported Customer contact details showing up as "Redacted" in the Intercom Inbox (minor)
- 2026-10-12: [LangChain](https://thirdpartyindex.com/vendors/langchain#status), which apiphani lists as a subprocessor, reported APAC Region Querying is down (major)
- 2026-10-12: [LangChain](https://thirdpartyindex.com/vendors/langchain#status), which apiphani lists as a subprocessor, reported Seeing some issues logging into the application (major)
- 2026-10-09: [WorkOS](https://thirdpartyindex.com/vendors/workos#status), which apiphani lists as a subprocessor, reported Elevated errors across SSO and AuthKit sign-in (no impact stated)
- 2026-10-08: [LangChain](https://thirdpartyindex.com/vendors/langchain#status), which apiphani lists as a subprocessor, reported LLM Gateway service interruption (critical)
- 2026-10-08: [LangChain](https://thirdpartyindex.com/vendors/langchain#status), which apiphani lists as a subprocessor, reported Increased latency in Run Query V1 APIs (minor)
- 2026-10-06: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which apiphani lists as a subprocessor, reported Elevated Swish errors (no impact stated)
- 2026-10-05: [Intercom](https://thirdpartyindex.com/vendors/intercom#status), which apiphani lists as a subprocessor, reported Delays in processin Bulk Actions in the Inbox (minor)
- 2026-10-03: [LangChain](https://thirdpartyindex.com/vendors/langchain#status), which apiphani lists as a subprocessor, reported LangSmith Deployment Database Provisioning Error (major)
- 2026-10-01: [WorkOS](https://thirdpartyindex.com/vendors/workos#status), which apiphani lists as a subprocessor, reported Elevated errors for Audit Logs (minor)
- 2026-10-01: [WorkOS](https://thirdpartyindex.com/vendors/workos#status), which apiphani lists as a subprocessor, reported Elevated API and AuthKit errors for some requests (Columbus, OH region) (minor)
- 2026-10-01: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which apiphani lists as a subprocessor, reported Elevated API errors (no impact stated)
- 2026-09-30: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which apiphani lists as a subprocessor, reported Visa authorization errors (no impact stated)
- 2026-09-27: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which apiphani lists as a subprocessor, reported Elevated API Errors (major)

The subprocessor list as we read it on any date: https://thirdpartyindex.com/labs/time-machine/apiphani

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api
