BonData
BonData declares 9 subprocessors in its subprocessor list, which we last checked on Oct 11, 2026 (evidence). They include Amazon Web Services, Google Cloud and OpenAI. No published changes since we first read it on Oct 11, 2026.
Not listed by any tracked vendor.
Subprocessors CSV of BonData's subprocessors · Atom feed of BonData's subprocessors DORA draft CSV of BonData's subprocessors as declared by BonData what's this? ·
9 third parties.
| Name | Purpose | Location | Listed since |
|---|---|---|---|
| Amazon Web Services (AWS) | Cloud infrastructure: EKS, RDS, S3, Amazon MQ, Secrets Manager, KMS, CloudFront, Athena, Glue, Redshift, CloudWatch | United States (EU on request) | |
| Anthropic AI | Large language model provider (Claude). Inputs and outputs not used for training under Anthropic Commercial Terms. | United States | |
| Cloudflare | DNS, TLS termination, web application firewall, DDoS protection, Cloudflare Tunnel | Global edge network | |
| Descope | Identity provider: authentication, SSO federation, SCIM, MFA, session management | United States | |
| e2b | Sandboxed code execution in ephemeral Firecracker microVMs. Receives the generated code and input variables passed by the workflow node. Compliance posture at trust.e2b.dev. | United States | |
| Google AI | Large language model provider (Gemini). API usage; not used for training. | United States | |
| New Relic | Log aggregation and platform metrics | United States | |
| OpenAI AI | Large language model provider and default text embeddings (text-embedding-3-small). API usage; not used for training. Enterprise customers can switch embeddings to AWS Bedrock Titan in their Cloud-Prem region. | United States | |
| Sentry | Application error tracking with PII filtering enabled | United States |
Incidents reported by BonData's subprocessorsCSV of incidents reported by vendors BonData lists · Atom feed of incidents reported by vendors BonData lists
69 reported incidents in the last 30 days, by 5 of the vendors BonData lists as subprocessors.
A subprocessor list names a company, not the service an incident touched. This does not show that BonData was involved.
And 44 more. All of them: CSV · Who is around them.
ChangesCSV of BonData's changes · Atom feed of BonData's changes
See the list as we read it on any date: Time machine
None since tracking began.