# Candu

Candu declares [11 subprocessors](https://thirdpartyindex.com/vendors/candu#subprocessors) in [its subprocessor list](https://docs.google.com/spreadsheets/d/1m8hDAzah3KTqsYHI_eDD9GfRy-2gi1Xy/edit?gid=637566527), which we last checked on 2026-11-11 ([evidence](https://thirdpartyindex.com/evidence/8345)). They include [Amazon Web Services](https://thirdpartyindex.com/vendors/amazon-web-services), [Google Cloud](https://thirdpartyindex.com/vendors/google-cloud) and [OpenAI](https://thirdpartyindex.com/vendors/openai). No published changes since we first read it on 2026-09-24. [3 tracked vendors](https://thirdpartyindex.com/vendors/candu#used-by) name Candu as a subprocessor, including [Make](https://thirdpartyindex.com/vendors/make), [Gorgias](https://thirdpartyindex.com/vendors/gorgias) and [15Five](https://thirdpartyindex.com/vendors/15five).

Candu (candu.ai): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/candu
- Documents last verified: 2026-11-11
- Transparency rating: 76/100 (how much it publishes, not how secure it is): Subprocessor list 30/30; Processing locations 8/8; Purposes 7/7; Data processing addendum 12/12; Trust center 0/8 (not found); Privacy policy 6/6; security.txt 0/6 (not found); Security page 5/5; Status page 0/5 (not found); Vulnerability disclosure 0/5 (not found); Pages still reachable 8/8
- Supply chain: relies on 11 tracked vendors directly, 86 within two hops, 294 within three; 3 tracked vendors rely on it directly, 19 within two hops, 26 within three
- Cite as: Candu, Third Party Index, https://thirdpartyindex.com/vendors/candu (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Subprocessor list | https://docs.google.com/spreadsheets/d/1m8hDAzah3KTqsYHI\_eDD9GfRy-2gi1Xy/edit?gid=637566527 | 2026-11-11 | 2026-09-24 |
| Data processing addendum | https://www.candu.ai/dpa | 2026-11-11 | 2026-10-22 |
| Privacy policy | https://www.candu.ai/privacy-policy | 2026-11-11 | 2026-10-22 |
| Terms | https://www.candu.ai/terms-of-use | 2026-11-11 | 2026-10-22 |
| Security page | https://www.candu.ai/security | 2026-11-11 | 2026-10-29 |

## Subprocessors (11)

As its own list states them.

| Subprocessor | Purpose | Location | Listed since |
|---|---|---|---|
| [Anthropic, PBC (Claude)](https://thirdpartyindex.com/vendors/anthropic.md) (AI model provider: Anthropic) | AI / model providers; LLM inference provider for optional AI features, including GitHub-connected Code Chat (code understanding, Q&A, and generation). | USA | 2026-09-27 |
| [AWS](https://thirdpartyindex.com/vendors/amazon-web-services.md) | Infra; The AWS Partner Network (APN) includes thousands of systems integrators who specialize in AWS services and tens of thousands of independent software vendors (ISVs) who adapt their technology to work on AWS. | EMEA (Ireland) | 2026-09-27 |
| [Channeled](https://thirdpartyindex.com/vendors/channeled.md) | Customer Support; Unified inbox and automation platform used to manage customer communications in Slack. | USA | 2026-09-27 |
| [Cloudflare](https://thirdpartyindex.com/vendors/cloudflare.md) | Infra; Used as a CDN and Edge compute. Cloudflare processes a limited amount of Personal Data (end-user IDs, user IP addresses, browser and operating system related information) for logging, security, and abuse prevention purposes. | Local - Cloudflare routes traffic to worldwide data centers closest to the user's location. | 2026-09-27 |
| [Customer.io](https://thirdpartyindex.com/vendors/customer-io.md) | Communication marketing and customer support services; Sales / Marketing | EMEA (Ireland) | 2026-09-27 |
| [Google Analytics](https://thirdpartyindex.com/vendors/google-cloud.md) | Product Analytics; Web analytics service | USA | 2026-09-27 |
| [Hubspot](https://thirdpartyindex.com/vendors/hubspot.md) | CRM platform used for marketing & sales activities.; Sales / Marketing | USA | 2026-09-27 |
| [Intercom](https://thirdpartyindex.com/vendors/intercom.md) | Customer Support; Customer support tool providing in-app chat & the Candu support center. | USA | 2026-09-27 |
| [Logo.dev](https://thirdpartyindex.com/vendors/logo-dev.md) | Logo API used to source company logos in the UI where branding is enabled; Other / enrichment | USA | 2026-09-27 |
| [LogRocket](https://thirdpartyindex.com/vendors/logrocket.md) | Product Analytics; Session replay, error and performance monitoring used to diagnose and fix product issues | USA | 2026-09-27 |
| [OpenAI](https://thirdpartyindex.com/vendors/openai.md) (AI model provider: OpenAI) | AI / model providers; Frontier Models | USA | 2026-09-27 |

Read from ([evidence](https://thirdpartyindex.com/evidence/8345)). CSV: https://thirdpartyindex.com/vendors/candu/subprocessors.csv

AI model providers (or a cloud provider's AI model service) among these entries: 2. All vendors that list one: https://thirdpartyindex.com/ai

## Web Technologies

Candu's homepage made 174 requests to 32 domains, 13 services controlled by another company, and 1 domain not identified. Loaded on 2026-11-04 by a browser that accepted nothing; other visits may load more or less. What a page loads is not a list of who receives customer data.

13 third parties by category: Analytics 4 (HubSpot, Dubot, LinkedIn, Meta); Advertising 3 (Google Cloud, Reddit, Inc., X Corp.); Marketing automation 1 (usually detected as Marketing automation: Adobe); Live chat 1 (reviewed: Intercom); Appointment scheduling 1 (Calendly.com); Customer data platform 1 (Segment); JavaScript libraries 1 (Webflow); Security 1 (usually detected as Security: Amazon Web Services). Each company that appears controlled by another organization is counted once, under the main category of the technologies detected from it on this homepage or, when none was, the category recorded from the company's own page (marked reviewed) or else the one it is usually detected as on other published homepages (marked as such); unclassified: none of these.

### Third parties (13)

- Webflow: 71 requests to website-files.com, d3e54v103j8qbb.cloudfront.net; Webflow 1.6.0, jQuery 3.5.1
- Adobe: 31 requests to typekit.net
- Google Cloud: 17 requests to google.com, googletagmanager.com, doubleclick.net, google-analytics.com, googleadservices.com; DoubleClick Floodlight, Google Analytics, Google Tag Manager (its subprocessor list names it too)
- Segment: 10 requests to segment.com; Segment 1.81.0
- HubSpot: 8 requests to hscollectedforms.net, hs-analytics.net, hs-banner.com, hs-scripts.com, hsadspixel.net, hubapi.com, hubspot.com; HubSpot, HubSpot Analytics (its subprocessor list names it too)
- Intercom: 7 requests to intercom.io, intercomcdn.com (its subprocessor list names it too)
- Dubot: 6 requests to dubot.ai; Dubot
- LinkedIn: 3 requests to linkedin.com, licdn.com; Linkedin Insight Tag
- Meta: 3 requests to facebook.net, facebook.com; Facebook Pixel 2.9.435
- Reddit, Inc.: 3 requests to reddit.com, redditstatic.com; Reddit Ads
- X Corp.: 3 requests to ads-twitter.com, t.co, twitter.com; Twitter Ads
- Amazon Web Services: 1 request to s3-us-west-2.amazonaws.com (its subprocessor list names it too)
- Calendly.com: 1 request to calendly.com; Calendly

### Unknown (1)

Domains not identified yet: webflow-files-prod.global.ssl.fastly.net

### First party (1)

- Candu: 9 requests to candu.ai; Adobe Fonts 1.21.0, Cloudflare, HSTS, Intercom, Open Graph, Priority Hints, Typekit 1.21.0, Webpack, core-js 3.32.2

6 tracked companies loaded by the homepage are not in Candu's subprocessor list. A website can use a service without it processing customer data.

## Subprocessor of (3)

Tracked vendors whose own subprocessor lists name it, and what they say they use it for.

- [15Five](https://thirdpartyindex.com/vendors/15five.md)
- [Gorgias](https://thirdpartyindex.com/vendors/gorgias.md): In-app guidance and product education
- [Make](https://thirdpartyindex.com/vendors/make.md): Customer engagement tool

## Incidents reported by Candu's subprocessors

Incidents reported in the last 30 days on their own status pages by 7 vendors Candu lists as subprocessors. A subprocessor list names a company, not the service an incident touched.

- 2026-11-11: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Candu lists as a subprocessor, reported Unable to start new Workspace Agent runs (critical)
- 2026-11-11: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Candu lists as a subprocessor, reported Elevated errors affecting logins, sign-ups, and ChatGPT features (minor)
- 2026-11-10: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Candu lists as a subprocessor, reported Elevated errors on Fable 52 and Mythos 52 (no impact stated)
- 2026-11-10: [HubSpot](https://thirdpartyindex.com/vendors/hubspot#status), which Candu lists as a subprocessor, reported Some HubSpot tools may be unavailable for some users (no impact stated)
- 2026-11-10: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Candu lists as a subprocessor, reported Incorrect cost data in Costs API exports (no impact stated)
- 2026-11-09: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Candu lists as a subprocessor, reported Elevated Errors On API (minor)
- 2026-11-09: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Candu lists as a subprocessor, reported Elevated ChatGPT Conversation Errors (minor)
- 2026-11-08: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Candu lists as a subprocessor, reported Elevated errors with image generation (minor)
- 2026-11-08: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Candu lists as a subprocessor, reported Degraded performance for Claude Fable 5.1 (minor)
- 2026-11-07: [Logo.dev](https://thirdpartyindex.com/vendors/logo-dev#status), which Candu lists as a subprocessor, reported Site Unreachable (no impact stated)
- 2026-11-06: [Customer.io](https://thirdpartyindex.com/vendors/customer-io#status), which Candu lists as a subprocessor, reported Customers are Unable to add new Email Sending Domains (major)
- 2026-11-06: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Candu lists as a subprocessor, reported Elevated error rates with some U.S. business Mastercards (no impact stated)
- 2026-11-06: [Intercom](https://thirdpartyindex.com/vendors/intercom#status), which Candu lists as a subprocessor, reported Elevated errors and latencies in the European hosting region. (major)
- 2026-11-05: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Candu lists as a subprocessor, reported ChatGPT Work and Dots Errors (minor)
- 2026-11-04: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Candu lists as a subprocessor, reported Elevated error rates across paid ChatGPT plans (minor)
- 2026-11-04: [Logo.dev](https://thirdpartyindex.com/vendors/logo-dev#status), which Candu lists as a subprocessor, reported Heartbeat Failed (no impact stated)
- 2026-11-03: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Candu lists as a subprocessor, reported File upload errors in ChatGPT (minor)
- 2026-11-02: [HubSpot](https://thirdpartyindex.com/vendors/hubspot#status), which Candu lists as a subprocessor, reported HubSpot is experiencing issues (no impact stated)
- 2026-10-30: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Candu lists as a subprocessor, reported Elevated errors with search in Dots, ChatGPT Work, and certain ChatGPT thinking experiences (minor)
- 2026-10-30: [Intercom](https://thirdpartyindex.com/vendors/intercom#status), which Candu lists as a subprocessor, reported Slow Fin Procedures (minor)
- 2026-10-30: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Candu lists as a subprocessor, reported Elevated errors for GPT Image 2 API image edits (minor)
- 2026-10-28: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Candu lists as a subprocessor, reported Elevated errors affecting the Google Calendar connector (minor)
- 2026-10-28: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Candu lists as a subprocessor, reported Elevated errors affecting the Gmail connector (minor)
- 2026-10-27: [Customer.io](https://thirdpartyindex.com/vendors/customer-io#status), which Candu lists as a subprocessor, reported Customer.io UI is currently unavailable for some customers (minor)
- 2026-10-27: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Candu lists as a subprocessor, reported Elevated errors for Claude Sonnet 5.5 (major)
- 2026-10-27: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Candu lists as a subprocessor, reported 6.1 Sol Degraded Model Performance (minor)
- 2026-10-27: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Candu lists as a subprocessor, reported Elevated errors for Claude Sonnet 5.5 (major)
- 2026-10-27: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Candu lists as a subprocessor, reported Elevated error rates for most hosted Code Reviews and Security Reviews on private GitHub repositories (no impact stated)
- 2026-10-26: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Candu lists as a subprocessor, reported Elevated error rates for Ads POST requests (minor)
- 2026-10-25: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Candu lists as a subprocessor, reported Elevated errors for Claude Fable 5.1 (major)
- 2026-10-25: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Candu lists as a subprocessor, reported Elevated errors for Claude Sonnet 5.5 and other models (major)
- 2026-10-24: [LogRocket](https://thirdpartyindex.com/vendors/logrocket#status), which Candu lists as a subprocessor, reported Analytics Ingestion Delays (minor)
- 2026-10-24: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Candu lists as a subprocessor, reported Elevated errors for Claude Fable 5 and Claude Fable 5.1 (major)
- 2026-10-24: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Candu lists as a subprocessor, reported Elevated errors for Claude Opus 5.5 (major)
- 2026-10-23: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Candu lists as a subprocessor, reported Elevated errors for Claude Fable 5.1, Sonnet 5.5, and Haiku 5.5 (critical)
- 2026-10-23: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Candu lists as a subprocessor, reported Degraded experience with ChatGPT app connections using CIMD (minor)
- 2026-10-23: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Candu lists as a subprocessor, reported Help Center Chat Support Degraded (no impact stated)
- 2026-10-23: [HubSpot](https://thirdpartyindex.com/vendors/hubspot#status), which Candu lists as a subprocessor, reported Some HubSpot tools may be unavailable for some users (no impact stated)
- 2026-10-23: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Candu lists as a subprocessor, reported Delays in customer support responses (no impact stated)
- 2026-10-22: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Candu lists as a subprocessor, reported New Ad Accounts failing to provision admins (minor)
- 2026-10-22: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Candu lists as a subprocessor, reported Degraded Performance of Dots on Enterprise (minor)
- 2026-10-22: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Candu lists as a subprocessor, reported Elevated errors affecting Connectors (minor)
- 2026-10-22: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Candu lists as a subprocessor, reported Elevated ChatGPT conversation and Responses API errors (minor)
- 2026-10-22: [HubSpot](https://thirdpartyindex.com/vendors/hubspot#status), which Candu lists as a subprocessor, reported Update on PHP security vulnerability (no impact stated)
- 2026-10-21: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Candu lists as a subprocessor, reported Authentication errors for some users (major)
- 2026-10-21: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Candu lists as a subprocessor, reported Degraded performance for Claude Fable 5 (minor)
- 2026-10-21: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Candu lists as a subprocessor, reported Elevated error rates for gpt-5.6-luna API requests (minor)
- 2026-10-21: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Candu lists as a subprocessor, reported Elevated FedRAMP API error rates for Astra and Sol (minor)
- 2026-10-21: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Candu lists as a subprocessor, reported Degraded performance in ChatGPT, Codex, and APIs (minor)
- 2026-10-19: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Candu lists as a subprocessor, reported File Download errors (minor)
- 2026-10-15: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Candu lists as a subprocessor, reported Widespread feature degradation (major)
- 2026-10-14: [Intercom](https://thirdpartyindex.com/vendors/intercom#status), which Candu lists as a subprocessor, reported Customer contact details showing up as "Redacted" in the Intercom Inbox (minor)
- 2026-10-14: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Candu lists as a subprocessor, reported Delayed Costs data in the Compliance API (minor)
- 2026-10-14: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Candu lists as a subprocessor, reported Limited availability on gpt-image-2.5-flare and gpt-image-2.5-sunburst (minor)
- 2026-10-14: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Candu lists as a subprocessor, reported Degraded performance in Codex and ChatGPT Work (minor)

The subprocessor list as we read it on any date: https://thirdpartyindex.com/labs/time-machine/candu

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api