# Black Forest Labs Black Forest Labs declares [10 subprocessors](https://thirdpartyindex.com/vendors/black-forest-labs#subprocessors) in [its subprocessor list](https://trust.bfl.ai/subprocessors), which we last checked on 2026-11-11 ([evidence](https://thirdpartyindex.com/evidence/53581)). They include [Google Cloud](https://thirdpartyindex.com/vendors/google-cloud), [Microsoft](https://thirdpartyindex.com/vendors/microsoft) and [GitHub](https://thirdpartyindex.com/vendors/github). No published changes since we first read it on 2026-09-22. [7 tracked vendors](https://thirdpartyindex.com/vendors/black-forest-labs#used-by) name Black Forest Labs as a subprocessor, including [Mistral](https://thirdpartyindex.com/vendors/mistral), [Adobe](https://thirdpartyindex.com/vendors/adobe) and [Luma AI](https://thirdpartyindex.com/vendors/luma-ai). Black Forest Labs (bfl.ai): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index. - Page: https://thirdpartyindex.com/vendors/black-forest-labs - Documents last verified: 2026-11-11 - Transparency rating: 71/100 (how much it publishes, not how secure it is): Subprocessor list 30/30; Processing locations 7/8 (partial); Purposes 1/7 (partial); Data processing addendum 0/12 (not found); Trust center 8/8; Privacy policy 6/6; security.txt 6/6; Security page 0/5 (not found); Status page 5/5; Vulnerability disclosure 0/5 (not found); Pages still reachable 8/8 - Supply chain: relies on 8 tracked vendors directly, 120 within two hops, 373 within three; 7 tracked vendors rely on it directly, 100 within two hops, 835 within three - Cite as: Black Forest Labs, Third Party Index, https://thirdpartyindex.com/vendors/black-forest-labs (data CC BY 4.0) ## Documents | Document | URL | Last verified | Last changed | |---|---|---|---| | Trust center | https://trust.bfl.ai/ | 2026-11-11 | 2026-11-09 | | Subprocessor list | https://trust.bfl.ai/subprocessors | 2026-11-11 | 2026-10-06 | | Privacy policy | https://bfl.ai/legal/privacy-policy | 2026-11-11 | 2026-09-22 | | Terms | https://bfl.ai/legal/terms-of-service | 2026-11-11 | 2026-09-22 | | security.txt | https://bfl.ai/.well-known/security.txt | 2026-11-11 | 2026-09-22 | | Status page | https://status.bfl.ml/ | 2026-11-11 | 2026-11-11 | ## Subprocessors (10) As its own list states them. | Subprocessor | Purpose | Location | Listed since | |---|---|---|---| | [DocuSign](https://thirdpartyindex.com/vendors/docusign.md) | — | Document management | 2026-10-01 | | [GitHub](https://thirdpartyindex.com/vendors/github.md) | — | Version control | 2026-10-01 | | [Google Drive](https://thirdpartyindex.com/vendors/google-cloud.md) | — | Document management | 2026-10-01 | | [Google Workspace](https://thirdpartyindex.com/vendors/google-cloud.md) | — | Identity provider | 2026-10-01 | | [Linear](https://thirdpartyindex.com/vendors/linear.md) | — | Collaboration | 2026-10-01 | | [Microsoft Azure](https://thirdpartyindex.com/vendors/microsoft.md) | — | Cloud provider | 2026-10-01 | | Remote | — | — | 2026-10-01 | | [Rippling](https://thirdpartyindex.com/vendors/rippling.md) | — | Employee management | 2026-10-01 | | [Trello](https://thirdpartyindex.com/vendors/trello.md) | — | Collaboration | 2026-10-01 | | [Vanta](https://thirdpartyindex.com/vendors/vanta.md) | Continuous security and compliance monitoring | Security | 2026-10-01 | Read from ([evidence](https://thirdpartyindex.com/evidence/8742)). CSV: https://thirdpartyindex.com/vendors/black-forest-labs/subprocessors.csv ## Compliance As its trust center lists them. - Audited: SOC 2, ISO/IEC 27001 ([evidence](https://thirdpartyindex.com/evidence/13768)) - Claimed: GDPR ([evidence](https://thirdpartyindex.com/evidence/13768)) ## Web Technologies Black Forest Labs's homepage made 98 requests to 5 domains, and 3 services controlled by another company. Loaded on 2026-11-05 by a browser that accepted nothing; other visits may load more or less. What a page loads is not a list of who receives customer data. 3 third parties by category: Analytics 1 (Clay); Cookie compliance 1 (CookieYes); CMS 1 (Sanity). Each company that appears controlled by another organization is counted once, under the main category of the technologies detected from it on this homepage or, when none was, the category recorded from the company's own page (marked reviewed) or else the one it is usually detected as on other published homepages (marked as such); unclassified: none of these. ### Third parties (3) - Sanity: 16 requests to sanity.io; Sanity, Sanity.io - CookieYes: 6 requests to cdn-cookieyes.com, cookieyes.com; CookieYes - Clay: 4 requests to claydar.com; Clay Web Intent ### First party (1) - Black Forest Labs: 72 requests to bfl.ai; Framer Motion, HSTS, Lucide, Next.js 15.5.28, Next.js App Router, Open Graph, PWA, Priority Hints, Radix UI, React, Vercel, Webpack 3 tracked companies loaded by the homepage are not in Black Forest Labs's subprocessor list. A website can use a service without it processing customer data. ## Subprocessor of (7) Tracked vendors whose own subprocessor lists name it, and what they say they use it for. - [Adobe](https://thirdpartyindex.com/vendors/adobe.md) - [Codia](https://thirdpartyindex.com/vendors/codia.md) - [Gamma](https://thirdpartyindex.com/vendors/gamma.md): Artificial intelligence services - [Luma AI](https://thirdpartyindex.com/vendors/luma-ai.md): Video generation provider - [Mistral](https://thirdpartyindex.com/vendors/mistral.md): Image Generation; Products: Vibe, Studio /API - [Picsart](https://thirdpartyindex.com/vendors/picsart.md): AI Service - [Verda](https://thirdpartyindex.com/vendors/verda.md): Privacy policy:; Processing FLUX.1 Kontext content ## Service status Incidents it reported on its own status page. - Last 90 days: 8 reported incidents (3 major or critical, 3 minor, 2 with no impact stated) - Typical time to resolve: 6 h 30 min - Status page last read: 2026-11-12 - Its status page says now: Partially Degraded Service (affected: API Europe (api.eu.bfl.ai): degraded performance) - Under way: Europe reduced model set (minor), since 2026-11-09 11:30 UTC - 2026-11-09: Europe reduced model set (minor) - 2026-11-02: Europe compute outage (critical) - 2026-09-29: EU cluster increased latencies (major) - 2026-09-08: US region increased latencies (no impact stated) - 2026-08-25: Please avoid cluster specific endpoints. (no impact stated) - 2026-08-19: EU region cluster outage (minor) - 2026-08-19: Cluster Down - FLUX.2 \[flex\] Traffic Impacted (minor) - 2026-08-19: Extended flux-3-video generation times (major) ## Incidents reported by Black Forest Labs's subprocessors Incidents reported in the last 30 days on their own status pages by 4 vendors Black Forest Labs lists as subprocessors. A subprocessor list names a company, not the service an incident touched. - 2026-11-11: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Black Forest Labs lists as a subprocessor, reported Impact across multiple GitHub products including Actions, Pages, and Copilot products. (critical) - 2026-11-11: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Black Forest Labs lists as a subprocessor, reported Incident with Webhooks (minor) - 2026-11-11: [Rippling](https://thirdpartyindex.com/vendors/rippling#status), which Black Forest Labs lists as a subprocessor, reported Performance degraded (minor) - 2026-11-11: [Linear](https://thirdpartyindex.com/vendors/linear#status), which Black Forest Labs lists as a subprocessor, reported Slack integration degraded due to Slack outage (minor) - 2026-11-10: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Black Forest Labs lists as a subprocessor, reported Incident with Git Operations and Pull Requests (critical) - 2026-11-10: [Rippling](https://thirdpartyindex.com/vendors/rippling#status), which Black Forest Labs lists as a subprocessor, reported Salesforce integrations disconnecting (minor) - 2026-11-09: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Black Forest Labs lists as a subprocessor, reported Degraded availability for GPT-5.3 Codex and GPT-5.6 models in Copilot (major) - 2026-11-09: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Black Forest Labs lists as a subprocessor, reported Incident with Actions and Checks API (critical) - 2026-11-09: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Black Forest Labs lists as a subprocessor, reported Incident with Webhooks and Actions (major) - 2026-11-09: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Black Forest Labs lists as a subprocessor, reported Increased timeouts due to surge in anonymous users (minor) - 2026-11-08: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Black Forest Labs lists as a subprocessor, reported Increase in timeouts for some unauthenticated users (minor) - 2026-11-07: [Rippling](https://thirdpartyindex.com/vendors/rippling#status), which Black Forest Labs lists as a subprocessor, reported Platform APIs are returning 403s (no impact stated) - 2026-11-05: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Black Forest Labs lists as a subprocessor, reported Degraded performance for multiple GitHub services (minor) - 2026-11-05: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Black Forest Labs lists as a subprocessor, reported Incident with Actions (minor) - 2026-11-04: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Black Forest Labs lists as a subprocessor, reported Incident with Actions (major) - 2026-11-04: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Black Forest Labs lists as a subprocessor, reported Incident with Actions and Pages (major) - 2026-11-04: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Black Forest Labs lists as a subprocessor, reported Incident with Pull Requests, Git Operations and Issues (major) - 2026-11-04: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Black Forest Labs lists as a subprocessor, reported Increased task-related errors for Copilot Mission Control (minor) - 2026-11-03: [Vanta](https://thirdpartyindex.com/vendors/vanta#status), which Black Forest Labs lists as a subprocessor, reported Missing check results for GitHub pull requests (minor) - 2026-11-03: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Black Forest Labs lists as a subprocessor, reported Incident with Git Operations (minor) - 2026-11-03: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Black Forest Labs lists as a subprocessor, reported Incident with API, Git, and Copilot requests (minor) - 2026-11-02: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Black Forest Labs lists as a subprocessor, reported Elevated errors on GPT-5.4 Nano (minor) - 2026-10-30: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Black Forest Labs lists as a subprocessor, reported Incident with Dependabot (minor) - 2026-10-30: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Black Forest Labs lists as a subprocessor, reported Incident with Actions, Pages, and Webhooks (major) - 2026-10-30: [Linear](https://thirdpartyindex.com/vendors/linear#status), which Black Forest Labs lists as a subprocessor, reported Project pages failing to load (minor) - 2026-10-30: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Black Forest Labs lists as a subprocessor, reported Disruption with GitHub services (critical) - 2026-10-29: [Vanta](https://thirdpartyindex.com/vendors/vanta#status), which Black Forest Labs lists as a subprocessor, reported Incorrect security-training and background-check test results (no impact stated) - 2026-10-29: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Black Forest Labs lists as a subprocessor, reported Disruption with Copilot Cloud services (minor) - 2026-10-29: [Rippling](https://thirdpartyindex.com/vendors/rippling#status), which Black Forest Labs lists as a subprocessor, reported Issues editing Supergroups (no impact stated) - 2026-10-28: [Linear](https://thirdpartyindex.com/vendors/linear#status), which Black Forest Labs lists as a subprocessor, reported Some Slack integrations have been unexpectedly archived (no impact stated) - 2026-10-28: [Rippling](https://thirdpartyindex.com/vendors/rippling#status), which Black Forest Labs lists as a subprocessor, reported QuickBooks data import delayed for some customers (minor) - 2026-10-28: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Black Forest Labs lists as a subprocessor, reported Disruption with some Copilot services (critical) - 2026-10-28: [Rippling](https://thirdpartyindex.com/vendors/rippling#status), which Black Forest Labs lists as a subprocessor, reported Rippling AI is down (major) - 2026-10-27: [Linear](https://thirdpartyindex.com/vendors/linear#status), which Black Forest Labs lists as a subprocessor, reported Problems loading application (major) - 2026-10-27: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Black Forest Labs lists as a subprocessor, reported Elevated 404s for GitHub App s2s tokens in git/API (no impact stated) - 2026-10-26: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Black Forest Labs lists as a subprocessor, reported Incident with Actions, Issues, API Requests and Pull Requests (minor) - 2026-10-23: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Black Forest Labs lists as a subprocessor, reported Grok 4.6 and Grok 4.7 Service Issues (minor) - 2026-10-23: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Black Forest Labs lists as a subprocessor, reported Disruption with Dependabot Alerts (minor) - 2026-10-23: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Black Forest Labs lists as a subprocessor, reported Delayed Actions status check results (minor) - 2026-10-22: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Black Forest Labs lists as a subprocessor, reported Project updates delayed (minor) - 2026-10-22: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Black Forest Labs lists as a subprocessor, reported Incident with Actions (minor) - 2026-10-21: [Vanta](https://thirdpartyindex.com/vendors/vanta#status), which Black Forest Labs lists as a subprocessor, reported Stale data for CloudflareDomainInventory and CloudflareZoneRule (major) - 2026-10-21: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Black Forest Labs lists as a subprocessor, reported Delays for Pull Requests and Webhook deliveries (critical) - 2026-10-19: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Black Forest Labs lists as a subprocessor, reported Degraded availability for GitHub Actions, GitHub Pages and Webhooks (critical) - 2026-10-15: [Rippling](https://thirdpartyindex.com/vendors/rippling#status), which Black Forest Labs lists as a subprocessor, reported Products partially degraded (major) - 2026-10-15: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Black Forest Labs lists as a subprocessor, reported CCA Automations are delayed when starting an Automation (minor) - 2026-10-13: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Black Forest Labs lists as a subprocessor, reported \[Retroactive\] Actions workflow run logs delayed (minor) The subprocessor list as we read it on any date: https://thirdpartyindex.com/labs/time-machine/black-forest-labs ## Security contact From its security.txt (https://bfl.ai/.well-known/security.txt) ([evidence](https://thirdpartyindex.com/evidence/3652)): - Contact: mailto:security@blackforestlabs.ai - Security jobs: https://bfl.ai/careers - Languages: en, de - Valid until 2027-02-01 --- Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api