# Bitrise

[1 tracked vendor](https://thirdpartyindex.com/vendors/bitrise#used-by), [ZeeMee](https://thirdpartyindex.com/vendors/zeemee), names Bitrise as a subprocessor. We have not found a subprocessor list published by Bitrise. We monitor 5 of its documents, which we last checked on 2026-11-11.

Bitrise (bitrise.io): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/bitrise
- Documents last verified: 2026-11-11
- Transparency rating: 32/100 (how much it publishes, not how secure it is): Subprocessor list 0/30 (not found); Processing locations 0/8 (no list); Purposes 0/7 (no list); Data processing addendum 0/12 (not found); Trust center 8/8; Privacy policy 6/6; security.txt 0/6 (not found); Security page 5/5; Status page 5/5; Vulnerability disclosure 0/5 (not found); Pages still reachable 8/8
- Supply chain: relies on 0 tracked vendors directly, 0 within two hops, 0 within three; 1 tracked vendors rely on it directly, 1 within two hops, 1 within three
- Cite as: Bitrise, Third Party Index, https://thirdpartyindex.com/vendors/bitrise (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Trust center | https://security.bitrise.io/ | 2026-11-11 | 2026-11-10 |
| Privacy policy | https://bitrise.io/legal/privacy-policy | 2026-11-11 | 2026-09-22 |
| Terms | https://bitrise.io/legal/terms-of-service | 2026-11-11 | 2026-09-22 |
| Security page | https://bitrise.io/platform/devops/security | 2026-11-11 | 2026-09-22 |
| Status page | https://status.bitrise.io/ | 2026-11-11 | 2026-11-11 |

## Subprocessors (0)

No subprocessor list has been found or read for this vendor.

## Compliance

As its trust center lists them.

- Audited: SOC 2, PCI DSS ([evidence](https://thirdpartyindex.com/evidence/180694))
- Claimed: GDPR ([evidence](https://thirdpartyindex.com/evidence/180694))

## Web Technologies

Bitrise's homepage made 151 requests to 36 domains, 14 services controlled by another company, and 1 domain not identified. Loaded on 2026-10-13 by a browser that accepted nothing; other visits may load more or less. What a page loads is not a list of who receives customer data.

14 third parties by category: Analytics 4 (Reo.Dev, LinkedIn, Cloudflare; usually detected as Analytics: G2.com); Advertising 3 (Google Cloud, Reddit, Inc.; usually detected as Advertising: Microsoft); Marketing automation 2 (HubSpot, Clearbit); Live chat 1 (reviewed: Intercom); A/B Testing 1 (Webflow); Cookie compliance 1 (OneTrust); CDN 1 (jsDelivr); SEO 1 (Ahrefs). Each company that appears controlled by another organization is counted once, under the main category of the technologies detected from it on this homepage or, when none was, the category recorded from the company's own page (marked reviewed) or else the one it is usually detected as on other published homepages (marked as such); unclassified: none of these.

### Third parties (14)

- Webflow: 63 requests to website-files.com, d3e54v103j8qbb.cloudfront.net, intellimize.co; Intellimize, Webflow 1.6.0, jQuery 3.5.1
- Google Cloud: 16 requests to gstatic.com, google.com, googletagmanager.com, doubleclick.net, ajax.googleapis.com, fonts.googleapis.com; DoubleClick Floodlight, Google Analytics, Google Font API, Google Hosted Libraries, Google Tag Manager
- OneTrust: 11 requests to cookielaw.org, onetrust.com; OneTrust
- HubSpot: 9 requests to hubspot.com, hs-analytics.net, hs-banner.com, hs-scripts.com, hsadspixel.net, hsforms.com, hubapi.com; HubSpot
- jsDelivr: 8 requests to jsdelivr.net; jsDelivr
- Clearbit: 5 requests to clearbitjs.com, clearbit.com, clearbitscripts.com; Clearbit
- Intercom: 5 requests to intercom.io, intercomcdn.com
- Microsoft: 5 requests to clarity.ms
- Reo.Dev: 5 requests to reo.dev; Reo.Dev
- LinkedIn: 4 requests to licdn.com, linkedin.com; Linkedin Insight Tag
- Cloudflare: 3 requests to cloudflare.com, cloudflareinsights.com; Cloudflare Browser Insights, cdnjs
- Reddit, Inc.: 3 requests to reddit.com, redditstatic.com; Reddit Ads
- G2.com: 2 requests to g2.com
- Ahrefs: 1 request to ahrefs.com; Ahrefs

### Unknown (1)

Domains not identified yet: webflow-files-prod.global.ssl.fastly.net

### First party (1)

- Bitrise: 9 requests to bitrise.io; Cloudflare, GSAP 3.12.2, HSTS, Intercom, LottieFiles, Microsoft Clarity, Open Graph, Webpack

12 tracked companies loaded by the homepage are not in Bitrise's subprocessor list. A website can use a service without it processing customer data.

## Subprocessor of (1)

Tracked vendors whose own subprocessor lists name it, and what they say they use it for.

- [ZeeMee](https://thirdpartyindex.com/vendors/zeemee.md)

## Service status

Incidents it reported on its own status page.

- Last 90 days: 8 reported incidents (3 major or critical, 5 minor, 0 with no impact stated)
- Typical time to resolve: 1 h 17 min
- Status page last read: 2026-11-12
- 2026-11-08: Builds failing while downloading tools from GitHub (major)
- 2026-11-06: Interrupted builds and longer queue times (minor)
- 2026-11-02: Elevated errors on Bitrise pages in Safari (minor)
- 2026-10-26: Long waiting times (queue) on builds (minor)
- 2026-10-05: Issue with the Start Build dialog in the Website UI (major)
- 2026-09-22: Long waiting times \[on specific stacks / to start builds\] (minor)
- 2026-09-05: Key Value Dependency Cache Service (minor)
- 2026-08-28: CI build list is not loading in multiple workspaces (major)

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api