Third Party Index

Bird

bird.com

Certifications and attestations: SOC 2 Type IISOC 3ISO/IEC 27001

Says it complies with: HIPAA, GDPR, CCPA/CPRA, Data Privacy Framework, PIPEDA

As listed on Bird's trust center (evidence) ; reports themselves are usually shared on request.

Transparency

Exemplary

Breakdown
Subprocessor list30 / 30
Processing locations8 / 8
Purposes7 / 7
Data processing addendum12 / 12
Trust center8 / 8
Privacy policy6 / 6
security.txt6 / 6
Security page5 / 5
Status page5 / 5
Vulnerability disclosurenot found0 / 5
Pages still reachable8 / 8
Total95 / 100

Only documents we can retrieve count: a page behind a login or a broken link scores nothing.

Badge

Bird transparency rating

For Bird's own site; it updates with the rating.

<a href="https://thirdpartyindex.com/vendors/bird"><img src="https://thirdpartyindex.com/badge/bird.svg" alt="Bird transparency rating on Third Party Index" height="20"></a>
[![Bird transparency rating on Third Party Index](https://thirdpartyindex.com/badge/bird.svg)](https://thirdpartyindex.com/vendors/bird)

Documents

DocumentVerifiedChangedEvidence
Trust center safebase snapshot
Subprocessor list snapshot
Data processing addendum snapshot
Privacy policy snapshot
Terms snapshot
Security page snapshot
security.txt snapshot
Status page snapshot

Subprocessors

21 third parties, 1 affiliate. CSV · Atom

NamePurposeLocationListed since
Amazon Web Services EMEA SARL Cloud Hosting Service ProviderAs determined by customer; Ireland (optional), USA; Ireland, Australia, Brazil, Japan, Singapore, South Korea, India, UK, USA; Ireland, Germany; Ireland, India, USA (as selected by customer); Ireland, India, USA (as selected by customer) and Germany, Singapore, Australia, Brazil, USA; USA, Ireland (optional, as selected by customer)
Anthropic Ireland Ltd. (end-user data optional) Customer Support AI LLM Service ProviderUSA
ClickHouse Inc. Analytics Data Base Service Provider; Analytics Database Service ProviderIreland
Digital Ocean Turn Server providerThe Netherlands
Flowmailer Email Service ProviderThe Netherlands
Google Cloud EMEA Limited Cloud Hosting Service Provider; Speech to text conversionGlobal; The Netherlands, Belgium; The Netherlands, Belgium, Germany; The Netherlands, Belgium, Singapore, UK, USA
Google Ireland Limited Provision of Google RCS Business Messaging (RBM) servicesEU
Google Ireland Limited by means of their subsidiary Jibe Mobile Ltd. Provision of, Google Business, Messages (RCS), servicesEU
Hubper (optional) Online Learning AcademyThe Netherlands
LiveKit Inc. (optional) Conduit processing of video and audio streamsGlobal (close-to-customer, carrier peering and geo-spreading)
Luzmo In-app dashboard providerIreland
Microsoft Azure Cloud Hosting Service ProviderThe Netherlands, Hong Kong, USA
Not Just Tickets Ltd (Plain) (optional Subprocessor) Internal Customer Support Ticketing SystemUK
Postmark Dashboard - Log management and Analysis softwareUSA
See All services See All servicesSee All services
Sentry Error monitoringUSA
Svix Inc. Webhook Delivery Infrastructure ProviderIreland
These Email Services do not require processing of personal data by Bird These Email Services do not require processing of personal data by BirdThese Email Services do not require processing of personal data by Bird
Twilio (optional) Recorded dial-in, SMS, Phone number verificationGlobal
Vibes Media, LLC Provision of Rich Communication Services (RCS) - US & CAN onlyUSA
WhatsApp Ireland Limited Provision of, WhatsApp for, Business services; WhatsApp for Business Service ProviderEU and USA; USA
Bird affiliates (1)
NamePurposeLocationListed since
Bird Affiliates Performance of the Agreement, support servicesThe Netherlands, UK, USA

Listed as a subprocessor by (10)

Purposes as each company states them.

Changes

None since tracking began.