# Brave

Brave declares [11 subprocessors](https://thirdpartyindex.com/vendors/brave#subprocessors) in [its subprocessor list](https://trust.brave.app/subprocessors), which we last checked on 2026-11-12 ([evidence](https://thirdpartyindex.com/evidence/87599)). They include [Amazon Web Services](https://thirdpartyindex.com/vendors/amazon-web-services), [Google Cloud](https://thirdpartyindex.com/vendors/google-cloud) and [Stripe](https://thirdpartyindex.com/vendors/stripe). No published changes since we first read it on 2026-09-22. [12 tracked vendors](https://thirdpartyindex.com/vendors/brave#used-by) name Brave as a subprocessor, including [Anthropic](https://thirdpartyindex.com/vendors/anthropic), [Zoho](https://thirdpartyindex.com/vendors/zoho) and [Mistral](https://thirdpartyindex.com/vendors/mistral).

Brave (brave.com): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/brave
- Documents last verified: 2026-11-12
- Transparency rating: 78/100 (how much it publishes, not how secure it is): Subprocessor list 30/30; Processing locations 8/8; Purposes 7/7; Data processing addendum 0/12 (not found); Trust center 8/8; Privacy policy 6/6; security.txt 6/6; Security page 0/5 (not found); Status page 5/5; Vulnerability disclosure 0/5 (not found); Pages still reachable 8/8
- Supply chain: relies on 10 tracked vendors directly, 104 within two hops, 377 within three; 12 tracked vendors rely on it directly, 928 within two hops, 2624 within three
- Cite as: Brave, Third Party Index, https://thirdpartyindex.com/vendors/brave (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Trust center | https://trust.brave.app/ | 2026-11-11 | 2026-11-11 |
| Subprocessor list | https://trust.brave.app/subprocessors | 2026-11-12 | 2026-10-12 |
| Privacy policy | https://search.brave.com/help/privacy-policy | 2026-11-12 | 2026-10-13 |
| Terms | https://brave.com/terms-of-use/ | 2026-11-12 | 2026-09-22 |
| security.txt | https://brave.com/.well-known/security.txt | 2026-11-12 | 2026-09-22 |
| Status page | https://status.brave.app/ | 2026-11-11 | 2026-11-11 |

## Subprocessors (11)

As its own list states them.

| Subprocessor | Purpose | Location | Listed since |
|---|---|---|---|
| [Amazon Web Services](https://thirdpartyindex.com/vendors/amazon-web-services.md) | Cloud infrastructure and security; Cloud provider | United States | 2026-09-28 |
| [Asana](https://thirdpartyindex.com/vendors/asana.md) | Customer prospect information such as name, email address, contact information.; Inbound inquiries for custom agreements | United States | 2026-09-22 |
| [Google Cloud](https://thirdpartyindex.com/vendors/google-cloud.md) | Cloud infrastructure; Cloud provider | United States | 2026-09-30 |
| [Google Workspace](https://thirdpartyindex.com/vendors/google-cloud.md) | Customer support; Emails sent to support@/privacy@brave.com | United States | 2026-09-28 |
| [HubSpot](https://thirdpartyindex.com/vendors/hubspot.md) | CRM | United States | 2026-09-28 |
| [Nebius](https://thirdpartyindex.com/vendors/nebius.md) | Cloud infrastructure | Europe and United States | 2026-10-12 |
| [Oracle NetSuite](https://thirdpartyindex.com/vendors/netsuite.md) | Invoicing | United States | 2026-09-28 |
| [Slack](https://thirdpartyindex.com/vendors/slack.md) | Collaboration; Internal communications | United States | 2026-09-28 |
| [Stripe](https://thirdpartyindex.com/vendors/stripe.md) | Finance and payments; Stripe is a financial infrastructure platform that enables businesses to accept online and in-person payments, manage revenue, and build new business models. | United States | 2026-09-28 |
| [Vanta](https://thirdpartyindex.com/vendors/vanta.md) | Continuous security and compliance monitoring | Security | 2026-09-28 |
| [Zendesk](https://thirdpartyindex.com/vendors/zendesk.md) | Customer support; Customer support desk and ticketing system | United States | 2026-09-22 |

Read from ([evidence](https://thirdpartyindex.com/evidence/13574)). CSV: https://thirdpartyindex.com/vendors/brave/subprocessors.csv

## Compliance

As its trust center lists them.

- Audited: SOC 2 ([evidence](https://thirdpartyindex.com/evidence/14025))
- Claimed: GDPR ([evidence](https://thirdpartyindex.com/evidence/14025))

## Web Technologies

Brave's homepage made 81 requests to 1 domain. Loaded on 2026-11-04 by a browser that accepted nothing; other visits may load more or less. What a page loads is not a list of who receives customer data.

### First party (1)

- Brave: 81 requests to brave.com; Amazon CloudFront, Amazon S3, Amazon Web Services, HSTS, HTTP/3, Hugo 0.119.0, LottieFiles, Matomo Analytics, Open Graph, RSS, Svelte

## Subprocessor of (12)

Tracked vendors whose own subprocessor lists name it, and what they say they use it for.

- [Adobe](https://thirdpartyindex.com/vendors/adobe.md): Adobe Document Cloud utilizes the Brave Search web search API. Brave processes queries constructed based on user inputs. URLs are returned to Adobe services fro…
- [Anthropic](https://thirdpartyindex.com/vendors/anthropic.md): Products: All products \[More Information\](; Web Search
- [ClickUp™](https://thirdpartyindex.com/vendors/clickuptm.md): Application AI Functionality
- [Count](https://thirdpartyindex.com/vendors/count.md): Count Reasoning Plug: enabled by default. Count Canvas Platform: This sub-processor has two modes of operation: - Disabled: No data is processed by Brave. (Defa…
- [Glean](https://thirdpartyindex.com/vendors/glean.md): Search
- [Mistral](https://thirdpartyindex.com/vendors/mistral.md): Products: Vibe, Studio / API; Web Search
- [n8n](https://thirdpartyindex.com/vendors/n8n.md): Web search provider
- [Neuralwatt Cloud](https://thirdpartyindex.com/vendors/neuralwatt-cloud.md): Web search for the optional hosted web-search tool; receives search queries only when a customer enables the tool
- [Seamlessly](https://thirdpartyindex.com/vendors/seamlessly.md)
- [Upstage](https://thirdpartyindex.com/vendors/upstage.md)
- [Walnut](https://thirdpartyindex.com/vendors/walnut.md): Web and image search
- [Zoho](https://thirdpartyindex.com/vendors/zoho.md)

## Service status

Incidents it reported on its own status page.

- Last 44 days: 0 reported incidents (0 major or critical, 0 minor, 0 with no impact stated)
- Status page last read: 2026-11-12
- No incidents reported since Sep 30, 2026

## Incidents reported by Brave's subprocessors

Incidents reported in the last 30 days on their own status pages by 6 vendors Brave lists as subprocessors. A subprocessor list names a company, not the service an incident touched.

- 2026-11-11: [Nebius](https://thirdpartyindex.com/vendors/nebius#status), which Brave lists as a subprocessor, reported Token Factory connectivity loss in tf-us2 (no impact stated)
- 2026-11-10: [HubSpot](https://thirdpartyindex.com/vendors/hubspot#status), which Brave lists as a subprocessor, reported Some HubSpot tools may be unavailable for some users (no impact stated)
- 2026-11-09: [Nebius](https://thirdpartyindex.com/vendors/nebius#status), which Brave lists as a subprocessor, reported Compute Cloud: some hosts unreachable in eu-north1 (major)
- 2026-11-06: [Nebius](https://thirdpartyindex.com/vendors/nebius#status), which Brave lists as a subprocessor, reported Network problems (critical)
- 2026-11-06: [NetSuite](https://thirdpartyindex.com/vendors/netsuite#status), which Brave lists as a subprocessor, reported NetSuite Service | UK Newport (critical)
- 2026-11-05: [Nebius](https://thirdpartyindex.com/vendors/nebius#status), which Brave lists as a subprocessor, reported Token Factory: some models unavailable in eu-north1 (major)
- 2026-11-03: [Vanta](https://thirdpartyindex.com/vendors/vanta#status), which Brave lists as a subprocessor, reported Missing check results for GitHub pull requests (minor)
- 2026-11-02: [HubSpot](https://thirdpartyindex.com/vendors/hubspot#status), which Brave lists as a subprocessor, reported HubSpot is experiencing issues (no impact stated)
- 2026-11-02: [Nebius](https://thirdpartyindex.com/vendors/nebius#status), which Brave lists as a subprocessor, reported Public API gateway partially unavailable in US-NORTH1 and US-CENTRAL1 (minor)
- 2026-11-01: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Brave lists as a subprocessor, reported Elevated Instant Payouts failures (no impact stated)
- 2026-10-31: [Nebius](https://thirdpartyindex.com/vendors/nebius#status), which Brave lists as a subprocessor, reported Token Factory: some dedicated endpoints partially unavailable (minor)
- 2026-10-29: [Vanta](https://thirdpartyindex.com/vendors/vanta#status), which Brave lists as a subprocessor, reported Incorrect security-training and background-check test results (no impact stated)
- 2026-10-28: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Brave lists as a subprocessor, reported Elevated Issuing errors from 17:13 - 20:41 UTC (minor)
- 2026-10-28: [Nebius](https://thirdpartyindex.com/vendors/nebius#status), which Brave lists as a subprocessor, reported Compute Cloud: disk images and snapshots partial unavailability (major)
- 2026-10-24: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Brave lists as a subprocessor, reported Elevated Blik errors (no impact stated)
- 2026-10-24: [Nebius](https://thirdpartyindex.com/vendors/nebius#status), which Brave lists as a subprocessor, reported Token Factory 503 errors in eu-west2 (major)
- 2026-10-23: [Asana](https://thirdpartyindex.com/vendors/asana#status), which Brave lists as a subprocessor, reported Background jobs partial outage (major)
- 2026-10-23: [HubSpot](https://thirdpartyindex.com/vendors/hubspot#status), which Brave lists as a subprocessor, reported Some HubSpot tools may be unavailable for some users (no impact stated)
- 2026-10-22: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Brave lists as a subprocessor, reported Elevated Bancontact errors (no impact stated)
- 2026-10-22: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Brave lists as a subprocessor, reported Elevated Bancontact errors (no impact stated)
- 2026-10-22: [HubSpot](https://thirdpartyindex.com/vendors/hubspot#status), which Brave lists as a subprocessor, reported Update on PHP security vulnerability (no impact stated)
- 2026-10-21: [Vanta](https://thirdpartyindex.com/vendors/vanta#status), which Brave lists as a subprocessor, reported Stale data for CloudflareDomainInventory and CloudflareZoneRule (major)
- 2026-10-21: [Asana](https://thirdpartyindex.com/vendors/asana#status), which Brave lists as a subprocessor, reported Asana downtime (major)
- 2026-10-21: [NetSuite](https://thirdpartyindex.com/vendors/netsuite#status), which Brave lists as a subprocessor, reported NetSuite Email | Multiple Regions (major)
- 2026-10-20: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Brave lists as a subprocessor, reported Spike in cancellations and expired errors with PayByBank payments (no impact stated)
- 2026-10-20: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Brave lists as a subprocessor, reported Elevated Revolut Pay errors (no impact stated)
- 2026-10-18: [Nebius](https://thirdpartyindex.com/vendors/nebius#status), which Brave lists as a subprocessor, reported Partial IAM and console unavailability (no impact stated)
- 2026-10-16: [Nebius](https://thirdpartyindex.com/vendors/nebius#status), which Brave lists as a subprocessor, reported CLI login issues (major)
- 2026-10-15: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Brave lists as a subprocessor, reported Elevated declines on Mastercard (no impact stated)
- 2026-10-15: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Brave lists as a subprocessor, reported Elevated declines on Visa (no impact stated)
- 2026-10-15: [Nebius](https://thirdpartyindex.com/vendors/nebius#status), which Brave lists as a subprocessor, reported InfiniBand connectivity issues for GPU clusters in eu-west2 (major)
- 2026-10-15: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Brave lists as a subprocessor, reported Elevated Amazon Pay errors (no impact stated)
- 2026-10-14: [Nebius](https://thirdpartyindex.com/vendors/nebius#status), which Brave lists as a subprocessor, reported Connectivity issues between eu-south1 and other Nebius regions (minor)
- 2026-10-14: [Nebius](https://thirdpartyindex.com/vendors/nebius#status), which Brave lists as a subprocessor, reported InfiniBand connectivity issues for GPU clusters in eu-west2 (major)

The subprocessor list as we read it on any date: https://thirdpartyindex.com/labs/time-machine/brave

## Security contact

From its security.txt (https://brave.com/.well-known/security.txt) ([evidence](https://thirdpartyindex.com/evidence/2230)):

- Contact: mailto:security@brave.com
- Disclosure policy: https://hackerone.com/brave?view_policy=true
- Acknowledgments: https://hackerone.com/brave/thanks
- Languages: en
- No expiry date

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api