# Atlan

Atlan declares [4 subprocessors](https://thirdpartyindex.com/vendors/atlan#subprocessors) in [its subprocessor list](https://security.atlan.com/subprocessors), which we last checked on 2026-11-11 ([evidence](https://thirdpartyindex.com/evidence/190730)). They include [Amazon Web Services](https://thirdpartyindex.com/vendors/amazon-web-services), [Google Cloud](https://thirdpartyindex.com/vendors/google-cloud) and [OpenAI](https://thirdpartyindex.com/vendors/openai). The list last changed on 2026-10-31: 0 added, 0 removed, 2 changed. [1 tracked vendor](https://thirdpartyindex.com/vendors/atlan#used-by), [Vimeo](https://thirdpartyindex.com/vendors/vimeo), names Atlan as a subprocessor.

Atlan (atlan.com): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/atlan
- Documents last verified: 2026-11-11
- Transparency rating: 95/100 (how much it publishes, not how secure it is): Subprocessor list 30/30; Processing locations 8/8; Purposes 7/7; Data processing addendum 12/12; Trust center 8/8; Privacy policy 6/6; security.txt 6/6; Security page 5/5; Status page 5/5; Vulnerability disclosure 0/5 (not found); Pages still reachable 8/8
- Supply chain: relies on 4 tracked vendors directly, 47 within two hops, 186 within three; 1 tracked vendors rely on it directly, 13 within two hops, 18 within three
- Cite as: Atlan, Third Party Index, https://thirdpartyindex.com/vendors/atlan (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Trust center | https://atlan.com/trust/ | 2026-11-11 | 2026-09-22 |
| Subprocessor list | https://security.atlan.com/subprocessors | 2026-11-11 | 2026-10-31 |
| Data processing addendum | https://atlan.com/data-processing-agreement/ | 2026-11-11 | 2026-11-06 |
| Privacy policy | https://atlan.com/privacy/ | 2026-11-11 | 2026-09-22 |
| Terms | https://atlan.com/terms/ | 2026-11-11 | 2026-09-22 |
| Security page | https://security.atlan.com/ | 2026-11-11 | 2026-11-11 |
| security.txt | https://atlan.com/.well-known/security.txt | 2026-11-11 | 2026-09-22 |
| Status page | https://status.atlan.com/ | 2026-11-11 | 2026-11-01 |

## Subprocessors (4)

As its own list states them.

| Subprocessor | Purpose | Location | Listed since |
|---|---|---|---|
| [Amazon Web Services](https://thirdpartyindex.com/vendors/amazon-web-services.md) (AI model provider: Amazon Bedrock) | AI Model Hosting; AI model inference for Atlan AI features using Anthropic Claude models hosted by AWS in Amazon Bedrock. Models run in AWS-operated accounts, and Anthropic has no access to prompts or outputs.; Cloud Provider; Cloud infrastructure provider for storing and processing Customer Data in connection with the delivery of agreed services. | Atlan-selected AWS regions; Customer Choice | 2026-10-31 |
| [Azure Open AI](https://thirdpartyindex.com/vendors/microsoft.md) (AI model provider: Azure OpenAI) | AI Model Hosting; AI model inference for Atlan AI features using OpenAI GPT models hosted by Microsoft in Azure. Prompts and outputs are not available to OpenAI, and Azure OpenAI does not store them under Atlan's zero-retention exemption from Microsoft. | US | 2026-10-31 |
| [Google Cloud Platform](https://thirdpartyindex.com/vendors/google-cloud.md) | Cloud Provider; Google Cloud Platform serves as the cloud infrastructure provider for storing and processing Customer Data in connection with the delivery of agreed services. | Customer Choice | 2026-10-01 |
| [OpenAI, LLC](https://thirdpartyindex.com/vendors/openai.md) (AI model provider: OpenAI) | AI model inference through the OpenAI API ( for Atlan AI features: Requests are routed through Atlan's AI gateway, which load-balances GPT traffic between the OpenAI API and Azure OpenAI Service. Zero Data Retention is enabled on Atlan's OpenAI API account, so OpenAI does not store prompts or outputs, and Customer Data is not used to train models. | Engineering | 2026-10-30 |

Read from ([evidence](https://thirdpartyindex.com/evidence/190730)). CSV: https://thirdpartyindex.com/vendors/atlan/subprocessors.csv

AI model providers (or a cloud provider's AI model service) among these entries: 3. All vendors that list one: https://thirdpartyindex.com/ai

## Web Technologies

Atlan's homepage made 193 requests to 14 domains, and 8 services controlled by another company. Loaded on 2026-11-05 by a browser that accepted nothing; other visits may load more or less. What a page loads is not a list of who receives customer data.

8 third parties by category: Analytics 4 (Google Cloud, Cloudflare; usually detected as Analytics: HubSpot, Plausible Analytics); Advertising 1 (Microsoft); Live chat 1 (Qualified.com, Inc.); Cookie compliance 1 (CookieYes); Issue trackers 1 (usually detected as Issue trackers: Sentry). Each company that appears controlled by another organization is counted once, under the main category of the technologies detected from it on this homepage or, when none was, the category recorded from the company's own page (marked reviewed) or else the one it is usually detected as on other published homepages (marked as such); unclassified: none of these.

### Third parties (8)

- Qualified.com, Inc.: 27 requests to qualified.com; Qualified
- CookieYes: 11 requests to cdn-cookieyes.com, cookieyes.com; CookieYes
- Microsoft: 8 requests to bing.com, clarity.ms; Microsoft Advertising (its subprocessor list names it too)
- Google Cloud: 6 requests to doubleclick.net, google.com, googletagmanager.com; Google Analytics, Google Tag Manager (its subprocessor list names it too)
- HubSpot: 4 requests to hsforms.com, hsforms.net
- Cloudflare: 2 requests to cloudflareinsights.com; Cloudflare Browser Insights
- Sentry: 2 requests to sentry.io
- Plausible Analytics: 1 request to plausible.io

### First party (1)

- Atlan: 132 requests to atlan.com; Amazon CloudFront, Amazon Web Services, Astro, Cloudflare, HSTS, HubSpot, Microsoft Clarity, Open Graph, Plausible, Priority Hints, Sentry, Vue.js

5 tracked companies loaded by the homepage are not in Atlan's subprocessor list. A website can use a service without it processing customer data.

## Subprocessor of (1)

Tracked vendors whose own subprocessor lists name it, and what they say they use it for.

- [Vimeo](https://thirdpartyindex.com/vendors/vimeo.md): Data catalog

## Service status

Incidents it reported on its own status page.

- Last 90 days: 3 reported incidents (2 major or critical, 1 minor, 0 with no impact stated)
- Typical time to resolve: 7 h 56 min
- Status page last read: 2026-11-12
- 2026-11-06: Delayed workflow execution for some tenants in the us-west-2 region (minor)
- 2026-10-20: GCP Infrastructure Incident: Compute Engine Connectivity Issues in europe-west2-b (critical)
- 2026-10-06: Connectivity issues for some Atlan instances hosted in UAE North (Azure) (major)
- 2026-07-24: Service disruption affecting tenants hosted in the us-west-2 region (no impact stated)

## Incidents reported by Atlan's subprocessors

Incidents reported in the last 30 days on their own status pages by 1 vendor Atlan lists as a subprocessor. A subprocessor list names a company, not the service an incident touched.

- 2026-11-11: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Atlan lists as a subprocessor, reported Unable to start new Workspace Agent runs (critical)
- 2026-11-11: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Atlan lists as a subprocessor, reported Elevated errors affecting logins, sign-ups, and ChatGPT features (minor)
- 2026-11-10: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Atlan lists as a subprocessor, reported Incorrect cost data in Costs API exports (no impact stated)
- 2026-11-09: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Atlan lists as a subprocessor, reported Elevated Errors On API (minor)
- 2026-11-09: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Atlan lists as a subprocessor, reported Elevated ChatGPT Conversation Errors (minor)
- 2026-11-08: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Atlan lists as a subprocessor, reported Elevated errors with image generation (minor)
- 2026-11-06: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Atlan lists as a subprocessor, reported Elevated error rates with some U.S. business Mastercards (no impact stated)
- 2026-11-05: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Atlan lists as a subprocessor, reported ChatGPT Work and Dots Errors (minor)
- 2026-11-04: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Atlan lists as a subprocessor, reported Elevated error rates across paid ChatGPT plans (minor)
- 2026-11-03: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Atlan lists as a subprocessor, reported File upload errors in ChatGPT (minor)
- 2026-10-30: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Atlan lists as a subprocessor, reported Elevated errors with search in Dots, ChatGPT Work, and certain ChatGPT thinking experiences (minor)
- 2026-10-30: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Atlan lists as a subprocessor, reported Elevated errors for GPT Image 2 API image edits (minor)
- 2026-10-27: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Atlan lists as a subprocessor, reported 6.1 Sol Degraded Model Performance (minor)
- 2026-10-27: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Atlan lists as a subprocessor, reported Elevated error rates for most hosted Code Reviews and Security Reviews on private GitHub repositories (no impact stated)
- 2026-10-26: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Atlan lists as a subprocessor, reported Elevated error rates for Ads POST requests (minor)
- 2026-10-23: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Atlan lists as a subprocessor, reported Degraded experience with ChatGPT app connections using CIMD (minor)
- 2026-10-23: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Atlan lists as a subprocessor, reported Help Center Chat Support Degraded (no impact stated)
- 2026-10-23: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Atlan lists as a subprocessor, reported Delays in customer support responses (no impact stated)
- 2026-10-22: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Atlan lists as a subprocessor, reported New Ad Accounts failing to provision admins (minor)
- 2026-10-22: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Atlan lists as a subprocessor, reported Degraded Performance of Dots on Enterprise (minor)
- 2026-10-22: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Atlan lists as a subprocessor, reported Elevated ChatGPT conversation and Responses API errors (minor)
- 2026-10-21: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Atlan lists as a subprocessor, reported Authentication errors for some users (major)
- 2026-10-21: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Atlan lists as a subprocessor, reported Elevated error rates for gpt-5.6-luna API requests (minor)
- 2026-10-21: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Atlan lists as a subprocessor, reported Elevated FedRAMP API error rates for Astra and Sol (minor)
- 2026-10-21: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Atlan lists as a subprocessor, reported Degraded performance in ChatGPT, Codex, and APIs (minor)
- 2026-10-19: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Atlan lists as a subprocessor, reported File Download errors (minor)
- 2026-10-15: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Atlan lists as a subprocessor, reported Widespread feature degradation (major)
- 2026-10-14: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Atlan lists as a subprocessor, reported Delayed Costs data in the Compliance API (minor)
- 2026-10-14: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Atlan lists as a subprocessor, reported Limited availability on gpt-image-2.5-flare and gpt-image-2.5-sunburst (minor)
- 2026-10-14: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Atlan lists as a subprocessor, reported Degraded performance in Codex and ChatGPT Work (minor)
- 2026-10-13: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Atlan lists as a subprocessor, reported Degraded performance in GPT-6.1 Sol Codex and Work mode (minor)

## Recent changes

Changes to its documents and subprocessor list since monitoring began.

- 2026-10-31: Changed subprocessor: Amazon Web Services (purpose: AI model inference for Atlan AI features using Anthropic Claude models hosted by AWS in Amazon Bedrock. Models run in AWS-operated accounts, and Anthropic has no access to prompts or outputs.…) ([evidence](https://thirdpartyindex.com/evidence/190730))
- 2026-10-31: Changed subprocessor: Azure Open AI (purpose: AI model inference for Atlan AI features using OpenAI GPT models hosted by Microsoft in Azure. Prompts and outputs are not available to OpenAI, and Azure OpenAI does not store them under Atla…) ([evidence](https://thirdpartyindex.com/evidence/190730))

Feed: https://thirdpartyindex.com/vendors/atlan/changes.atom

The subprocessor list as we read it on any date: https://thirdpartyindex.com/labs/time-machine/atlan

## Security contact

From its security.txt (https://atlan.com/.well-known/security.txt) ([evidence](https://thirdpartyindex.com/evidence/3283)):

- Contact: https://docs.google.com/forms/d/e/1FAIpQLScnmM81wrEEXA-fX5o8WQxsMUgWy5nZQf8owS6zKzS-yVS8-w/viewform
- Contact: mailto:security@atlan.com
- Disclosure policy: https://atlan.com/responsible-disclosure-program/
- Encryption key: https://atlan.com/security/public-key.txt
- Acknowledgments: https://atlan.com/responsible-disclosure-program/
- Security jobs: https://atlan.com/careers
- Languages: en
- Valid until 2027-01-14

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api
