CardinalHQ

cardinalhq.io

CardinalHQ declares 5 subprocessors in its subprocessor list, which we last checked on Nov 11, 2026 (evidence). They include Amazon Web Services, Google Cloud and GitHub. No published changes since we first read it on Nov 6, 2026.

Subprocessors CSV of CardinalHQ's subprocessors · Atom feed of CardinalHQ's subprocessors DORA draft CSV of CardinalHQ's subprocessors as declared by CardinalHQ what's this? · 

5 third parties.

NamePurposeLocationListed since
Amazon Web Services Cloud provider
GitHub Version control
Google Drive Document management
Google Workspace Identity provider
Vanta Continuous security and compliance monitoringSecurity

Web TechnologiesCSV of CardinalHQ's web technologies · Atom feed of CardinalHQ's web technologies

CardinalHQ's homepage made 40 requests to 10 domains, 4 services controlled by another company, and 1 domain not identified.

Analytics (2): Google Cloud, RB2BMarketing automation (1): ApolloOther (1): Email: LiveIntent

4 third parties by category: Analytics 2Marketing automation 1Other 1

Third parties 4 · 15 requests
Google Cloudsubprocessor Google Analytics Google Tag Manager 18% of the page's requests 7
LiveIntent LiveIntent 10% of the page's requests 4
Apollo Apollo.io 8% of the page's requests 3
RB2B RB2B 2% of the page's requests 1
Unknown 1 · 1 request

simpleicons.org

First party 1 · 24 requests
CardinalHQ Google Font API Open Graph React React Router 8.3.0 Varnish core-js 3.50.0 60% of the page's requests 24

2 tracked companies loaded by the homepage are not in CardinalHQ's subprocessor list. A website can use a service without it processing customer data.

ComplianceCSV of CardinalHQ's compliance · Atom feed of CardinalHQ's compliance

Certified

Certifications as CardinalHQ's trust center lists them; reports are usually shared on request (evidence)

Incidents reported by CardinalHQ's subprocessorsCSV of incidents reported by vendors CardinalHQ lists · Atom feed of incidents reported by vendors CardinalHQ lists

36 reported incidents in the last 30 days, by 2 of the vendors CardinalHQ lists as subprocessors.

A subprocessor list names a company, not the service an incident touched. This does not show that CardinalHQ was involved.

DateCompanyIncidentImpactLasted
GitHubImpact across multiple GitHub products including Actions, Pages, and Copilot products. critical33 min
GitHubIncident with Webhooks minor4 min
GitHubIncident with Git Operations and Pull Requests critical1 h 44 min
GitHubDegraded availability for GPT-5.3 Codex and GPT-5.6 models in Copilot major49 min
GitHubIncident with Actions and Checks API critical46 min
GitHubIncident with Webhooks and Actions major1 h 50 min
GitHubIncreased timeouts due to surge in anonymous users minor3 h 10 min
GitHubIncrease in timeouts for some unauthenticated users minor1 h 56 min
GitHubDegraded performance for multiple GitHub services minor44 min
GitHubIncident with Actions minor52 min
GitHubIncident with Actions major35 min
GitHubIncident with Actions and Pages major55 min
GitHubIncident with Pull Requests, Git Operations and Issues major2 h
GitHubIncreased task-related errors for Copilot Mission Control minor1 h 16 min
VantaMissing check results for GitHub pull requests minorongoing
GitHubIncident with Git Operations minor1 h 43 min
GitHubIncident with API, Git, and Copilot requests minor30 min
GitHubElevated errors on GPT-5.4 Nano minor38 min
GitHubIncident with Dependabot minor2 h 29 min
GitHubIncident with Actions, Pages, and Webhooks major1 h 32 min
GitHubDisruption with GitHub services critical31 min
VantaIncorrect security-training and background-check test results no impact stated—
GitHubDisruption with Copilot Cloud services minor2 h 29 min
GitHubDisruption with some Copilot services critical1 h 15 min
GitHubElevated 404s for GitHub App s2s tokens in git/API no impact stated—

And 11 more. All of them: CSV · Who is around them.

ChangesCSV of CardinalHQ's changes · Atom feed of CardinalHQ's changes

See the list as we read it on any date: Time machine

None since tracking began.

Rating badge for CardinalHQ's site

CardinalHQ transparency rating

It updates with the rating.

<a href="https://thirdpartyindex.com/vendors/cardinalhq"><img src="https://thirdpartyindex.com/badge/cardinalhq.svg" alt="CardinalHQ transparency rating on Third Party Index" height="20"></a>
[![CardinalHQ transparency rating on Third Party Index](https://thirdpartyindex.com/badge/cardinalhq.svg)](https://thirdpartyindex.com/vendors/cardinalhq)