# Castle

[3 tracked vendors](https://thirdpartyindex.com/vendors/castle#used-by) name Castle as a subprocessor, including [GitBook](https://thirdpartyindex.com/vendors/gitbook), [Lovable](https://thirdpartyindex.com/vendors/lovable) and [Signable](https://thirdpartyindex.com/vendors/signable). We have not found a subprocessor list published by Castle. We monitor 4 of its documents, which we last checked on 2026-11-11.

Castle (castle.io): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/castle
- Documents last verified: 2026-11-11
- Transparency rating: 27/100 (how much it publishes, not how secure it is): Subprocessor list 0/30 (not found); Processing locations 0/8 (no list); Purposes 0/7 (no list); Data processing addendum 0/12 (not found); Trust center 8/8; Privacy policy 6/6; security.txt 0/6 (not found); Security page 0/5 (not found); Status page 5/5; Vulnerability disclosure 0/5 (not found); Pages still reachable 8/8
- Supply chain: relies on 0 tracked vendors directly, 0 within two hops, 0 within three; 3 tracked vendors rely on it directly, 10 within two hops, 112 within three
- Cite as: Castle, Third Party Index, https://thirdpartyindex.com/vendors/castle (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Trust center | https://trust.castle.io/ | 2026-11-11 | 2026-11-07 |
| Privacy policy | https://castle.io/privacy/ | 2026-11-11 | 2026-11-06 |
| Terms | https://castle.io/terms/ | 2026-11-11 | 2026-11-06 |
| Status page | https://status.castle.io/ | 2026-11-11 | 2026-11-11 |

## Subprocessors (0)

No subprocessor list has been found or read for this vendor.

## Web Technologies

Castle's homepage made 57 requests to 1 domain. Loaded on 2026-11-08 by a browser that accepted nothing; other visits may load more or less. What a page loads is not a list of who receives customer data.

### First party (1)

- Castle: 57 requests to castle.io; Astro 5.17.2, HSTS, Lucide, Netlify, Open Graph, PostHog

## Subprocessor of (3)

Tracked vendors whose own subprocessor lists name it, and what they say they use it for.

- [GitBook](https://thirdpartyindex.com/vendors/gitbook.md): Security & Bots detection
- [Lovable](https://thirdpartyindex.com/vendors/lovable.md): Data analytics and fraud detection
- [Signable](https://thirdpartyindex.com/vendors/signable.md): Fraud Prevention

## Service status

Incidents it reported on its own status page.

- Last 90 days: 3 reported incidents (3 major or critical, 0 minor, 0 with no impact stated)
- Typical time to resolve: 12 min
- Status page last read: 2026-11-12
- 2026-10-30: Elevated invalid request token errors (major)
- 2026-10-23: Risk & Filter API outage (major)
- 2026-09-07: Risk & Filter API Outage (critical)
- 2026-07-31: Elevated number of errors (major)
- 2026-05-08: Degraded performance and latency due to upstream provider issues (minor)
- 2026-03-17: Risk and Filter API Outage (no impact stated)
- 2026-01-22: API Outage (no impact stated)

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api