Basis Theory
Transparency
Breakdown
| Subprocessor list | 30 / 30 | |
| Processing locations | 8 / 8 | |
| Purposes | 7 / 7 | |
| Data processing addendum | not found | 0 / 12 |
| Trust center | 8 / 8 | |
| Privacy policy | 6 / 6 | |
| security.txt | not found | 0 / 6 |
| Security page | 5 / 5 | |
| Status page | unreachable | 0 / 5 |
| Vulnerability disclosure | not found | 0 / 5 |
| Pages still reachable | some unreachable this week | 0 / 8 |
| Total | 64 / 100 |
Only documents we can retrieve count: a page behind a login or a broken link scores nothing.
Badge
For Basis Theory's own site; it updates with the rating.
<a href="https://thirdpartyindex.com/vendors/basis-theory"><img src="https://thirdpartyindex.com/badge/basis-theory.svg" alt="Basis Theory transparency rating on Third Party Index" height="20"></a>[](https://thirdpartyindex.com/vendors/basis-theory)Documents
| Document | Verified | Changed | Evidence |
|---|---|---|---|
| Trust center safebase | snapshot | ||
| Subprocessor list | snapshot | ||
| Privacy policy | snapshot | ||
| Terms | snapshot | ||
| Security page | snapshot | ||
| Status page failing | snapshot |
Subprocessors
| Name | Purpose | Location | Listed since |
|---|---|---|---|
| Auth0 | Authentication services | USA | |
| AWS | Cloud infrastructure hosting | USA, Ireland, Germany | |
| Cloudflare | Edge networking, CDN services | Global Datacenters | |
| Datadog | Logging and SIEM | USA | |
| Pagos | Payments services (If Network Tokens or Account Updater are used) | USA | |
| Ravelin | 3D Secure Validation (If 3DS product is used) | USA, Belgium | |
| Snowflake | Data analytics | USA |
Listed as a subprocessor by (1)
Purposes as each company states them.
Decagon decagon.ai Provides a programmable tokenization vault and API platform that Decagon uses to support PCI DSS compliance; Storage and processing for compliance-restricted data
Changes
None since tracking began.