Chainguard

chainguard.dev

Chainguard declares 10 subprocessors in its subprocessor list, which we last checked on Nov 11, 2026 (evidence). They include Amazon Web Services, Google Cloud and OpenAI. The list last changed on Sep 24, 2026: 0 added, 0 removed, 1 changed. 1 tracked vendor, Precisely Software, names Chainguard as a subprocessor.

Subprocessors CSV · Atom DORA draft CSV what's this? · 

10 third parties.

NamePurposeLocationListed since
Amazon Web Services Cloud providerUnited States
Anthropic (Claude AI) AILLM and AIUnited States
Cloudflare Content delivery servicesUnited States
Google Cloud Platform Cloud service provider and AIUnited States
HubSpot (Clearbit) Communication (e.g., Activity Center)United States
Knock Notification and updates (e.g., Activity Center)United States
Okta Identity management servicesUnited States
OpenAI AILLM an AIUnited States
Vercel Data infrastructure and hosting servicesUnited States, United Kingdom, and Spain
Zendesk Customer support platformUnited States

Web TechnologiesCSV · Atom

Chainguard's homepage made 212 requests to 38 domains, 17 services controlled by another company, and 3 domains not identified.

Analytics (7): HubSpot, Reo.Dev, Clay, LinkedIn, ZoomInfo, Unify, CloudflareAdvertising (4): Google Cloud, Microsoft, X Corp., Reddit, Inc.Live chat (1): Qualified.com, Inc.Cookie compliance (1): OneTrustCDN (1): jsDelivrOther (3): Documentation: TechTarget, Inc.; usually detected as Issue trackers: Sentry; Personalisation: Contentful

17 third parties by category: Analytics 7Advertising 4Live chat 1Cookie compliance 1CDN 1Other 3

Third parties 17 · 144 requests
Qualified.com, Inc. Qualified 18% of the page's requests 39
Contentful Ninetailed 12% of the page's requests 25
Google Cloudsubprocessor DoubleClick Floodlight Google Analytics Google Tag Manager 8% of the page's requests 16
HubSpotsubprocessor HubSpot HubSpot Analytics 6% of the page's requests 12
OneTrust OneTrust 6% of the page's requests 12
Microsoft Microsoft Advertising 4% of the page's requests 9
Reo.Dev Reo.Dev 2% of the page's requests 5
X Corp. Twitter Ads 2% of the page's requests 5
Clay Clay Web Intent 2% of the page's requests 4
LinkedIn Linkedin Insight Tag 1% of the page's requests 3
Reddit, Inc. Reddit Ads 1% of the page's requests 3
ZoomInfo Zoominfo 1% of the page's requests 3
TechTarget, Inc. TechTarget <1% of the page's requests 2
Unify Unify <1% of the page's requests 2
jsDelivr jsDelivr <1% of the page's requests 2
Cloudflaresubprocessor Cloudflare Browser Insights <1% of the page's requests 1
Sentry sentry.io <1% of the page's requests 1
Unknown 3 · 13 requests

userled.iouserledclient.ioseamintent.ai

First party 1 · 55 requests
Chainguard Contentful Framer Motion HSTS HockeyStack Microsoft Clarity Next.js 15.5.18 Open Graph Priority Hints Radix UI React Sentry Vercel Webpack 26% of the page's requests 55

8 tracked companies loaded by the homepage are not in Chainguard's subprocessor list. A website can use a service without it processing customer data.

Subprocessor of (1)CSV · Atom

1 company

ComplianceCSV · Atom

Certified
Says it complies with

Certifications as Chainguard's trust center lists them; reports are usually shared on request (evidence)

Service statusCSV · Atom

Aug 15: no incident reportedAug 16: no incident reportedAug 17: no incident reportedAug 18: no incident reportedAug 19: no incident reportedAug 20: no incident reportedAug 21: no incident reportedAug 22: no incident reportedAug 23: no incident reportedAug 24: 1 incident (1 minor)Aug 25: no incident reportedAug 26: no incident reportedAug 27: no incident reportedAug 28: no incident reportedAug 29: no incident reportedAug 30: no incident reportedAug 31: no incident reportedSep 1: no incident reportedSep 2: no incident reportedSep 3: no incident reportedSep 4: no incident reportedSep 5: no incident reportedSep 6: no incident reportedSep 7: no incident reportedSep 8: 1 incident (1 minor)Sep 9: 1 incident (1 minor)Sep 10: no incident reportedSep 11: no incident reportedSep 12: no incident reportedSep 13: no incident reportedSep 14: no incident reportedSep 15: no incident reportedSep 16: no incident reportedSep 17: no incident reportedSep 18: no incident reportedSep 19: no incident reportedSep 20: no incident reportedSep 21: no incident reportedSep 22: no incident reportedSep 23: no incident reportedSep 24: no incident reportedSep 25: no incident reportedSep 26: no incident reportedSep 27: no incident reportedSep 28: no incident reportedSep 29: no incident reportedSep 30: no incident reportedOct 1: 1 incident (1 minor)Oct 2: no incident reportedOct 3: no incident reportedOct 4: no incident reportedOct 5: no incident reportedOct 6: 1 incident (1 minor)Oct 7: no incident reportedOct 8: no incident reportedOct 9: no incident reportedOct 10: no incident reportedOct 11: no incident reportedOct 12: no incident reportedOct 13: no incident reportedOct 14: no incident reportedOct 15: no incident reportedOct 16: no incident reportedOct 17: no incident reportedOct 18: no incident reportedOct 19: no incident reportedOct 20: 1 incident (1 minor)Oct 21: 1 incident (1 minor)Oct 22: no incident reportedOct 23: no incident reportedOct 24: no incident reportedOct 25: no incident reportedOct 26: no incident reportedOct 27: no incident reportedOct 28: no incident reportedOct 29: no incident reportedOct 30: no incident reportedOct 31: no incident reportedNov 1: no incident reportedNov 2: no incident reportedNov 3: no incident reportedNov 4: no incident reportedNov 5: no incident reportedNov 6: no incident reportedNov 7: no incident reportedNov 8: no incident reportedNov 9: no incident reportedNov 10: no incident reportedNov 11: no incident reportedNov 12: no incident reported

90 days agotoday

  • 8 incidents in 90 days
  • 0 major or critical
  • 24 h 43 min typical time to resolve
BeganIncidentImpactLasted
Critical PHP vulnerabilities require updatesminor24 h 43 min
Removing trust in a compromised certificate authority (eMudhra emSign G3)minor2 days
Build and runtime failures related to the OpenSSL 4 transitionminor10 days
APK and Image publishing is delayedminor1 h 1 min
Issues authenticating to the support portalminor10 min
Incorrect repositories list being included in image buildsminor24 h 2 min
Chainguard websites unavailable for some ISPsminor2 days
Resolved: Zendesk support portal may not be availableminor8 h 58 min

Incidents per month

0 3 6 Jul 2026: 3 incidents (2 minor, 1 no impact stated) · partial: our history begins Jul 9 · typical time to resolve 1 h 9 min Aug 2026: 5 incidents (1 major, 4 minor) · typical time to resolve 8 h 58 min Sep 2026: 2 incidents (2 minor) · typical time to resolve 24 h 2 min Oct 2026: 4 incidents (4 minor) · typical time to resolve 2 days Nov 2026: 0 incidents Jul 2026Aug Sep Oct Nov

critical major minor no impact stated before or partly before our history

Components affected

ComponentIncidents
Image builds & releases5
Console3
APK Registry1

As Chainguard's status page reports its own incidents (scheduled maintenance left out), read every few hours since (evidence)

Incidents reported by Chainguard's subprocessorsCSV · Atom

52 reported incidents in the last 30 days, by 5 of the vendors Chainguard lists as subprocessors.

A subprocessor list names a company, not the service an incident touched. This does not show that Chainguard was involved.

DateCompanyIncidentImpactLasted
OpenAIUnable to start new Workspace Agent runs criticalongoing
OpenAIElevated errors affecting logins, sign-ups, and ChatGPT features minor8 min
AnthropicElevated errors on Fable 52 and Mythos 52 no impact stated1 min
VercelElevated Sandbox and Blob request latency and errors minor1 min
HubSpotSome HubSpot tools may be unavailable for some users no impact stated51 min
OpenAIIncorrect cost data in Costs API exports no impact stated2 h 20 min
OpenAIElevated Errors On API minor42 min
OpenAIElevated ChatGPT Conversation Errors minor52 min
OpenAIElevated errors with image generation minor1 h 49 min
AnthropicDegraded performance for Claude Fable 5.1 minor26 min
OpenAIElevated error rates with some U.S. business Mastercards no impact stated3 days
Knock LabsDashboard transactional email outage minor2 h 20 min
VercelBuild delays and degraded Vercel Dashboard performance minor25 min
OpenAIChatGPT Work and Dots Errors minor13 h 6 min
OpenAIElevated error rates across paid ChatGPT plans minor1 h 54 min
OpenAIFile upload errors in ChatGPT minor4 h 52 min
HubSpotHubSpot is experiencing issues no impact stated22 min
OpenAIElevated errors with search in Dots, ChatGPT Work, and certain ChatGPT thinking experiences minor1 h 35 min
OpenAIElevated errors for GPT Image 2 API image edits minor4 h 1 min
Knock LabsSockets service impaired major1 h 34 min
AnthropicElevated errors affecting the Google Calendar connector minor3 h 46 min
AnthropicElevated errors affecting the Gmail connector minor1 h 48 min
AnthropicElevated errors for Claude Sonnet 5.5 major41 min
OpenAI6.1 Sol Degraded Model Performance minor1 h 17 min
AnthropicElevated errors for Claude Sonnet 5.5 major42 min

And 27 more. All of them: CSV · Who is around them.

ChangesCSV · Atom

See the list as we read it on any date: Time machine

  1. Changed subprocessor: Feature-specific Subprocessors locations: For Feature-specific Subprocessors, click [here](https://security.chainguard.dev/resources?s=hdft1yllox1qiso2w5ew&name=feature-specific-subprocessors). → For Code Analysis Offerings Subprocessors, click [here](https://security.chainguard.dev/resources?s=hdft1yllox1qiso2w5ew&name=feature… evidence list before and after
Rating badge for Chainguard's site

Chainguard transparency rating

It updates with the rating.

<a href="https://thirdpartyindex.com/vendors/chainguard"><img src="https://thirdpartyindex.com/badge/chainguard.svg" alt="Chainguard transparency rating on Third Party Index" height="20"></a>
[![Chainguard transparency rating on Third Party Index](https://thirdpartyindex.com/badge/chainguard.svg)](https://thirdpartyindex.com/vendors/chainguard)