# CITCON CITCON declares [7 subprocessors](https://thirdpartyindex.com/vendors/citcon#subprocessors) in [its subprocessor list](https://trust.citcon.com/subprocessors), which we last checked on 2026-11-11 ([evidence](https://thirdpartyindex.com/evidence/54251)). They include [Amazon Web Services](https://thirdpartyindex.com/vendors/amazon-web-services), [Google Cloud](https://thirdpartyindex.com/vendors/google-cloud) and [Cloudflare](https://thirdpartyindex.com/vendors/cloudflare). No published changes since we first read it on 2026-09-22. [1 tracked vendor](https://thirdpartyindex.com/vendors/citcon#used-by), [FastSpring](https://thirdpartyindex.com/vendors/fastspring), names CITCON as a subprocessor. CITCON (citcon.com): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index. - Page: https://thirdpartyindex.com/vendors/citcon - Documents last verified: 2026-11-11 - Transparency rating: 77/100 (how much it publishes, not how secure it is): Subprocessor list 30/30; Processing locations 8/8; Purposes 5/7 (partial); Data processing addendum 12/12; Trust center 8/8; Privacy policy 6/6; security.txt 0/6 (not found); Security page 0/5 (not found); Status page 0/5 (not found); Vulnerability disclosure 0/5 (not found); Pages still reachable 8/8 - Supply chain: relies on 7 tracked vendors directly, 73 within two hops, 240 within three; 1 tracked vendors rely on it directly, 12 within two hops, 25 within three - Cite as: CITCON, Third Party Index, https://thirdpartyindex.com/vendors/citcon (data CC BY 4.0) ## Documents | Document | URL | Last verified | Last changed | |---|---|---|---| | Trust center | https://trust.citcon.com/ | 2026-11-11 | 2026-11-11 | | Subprocessor list | https://trust.citcon.com/subprocessors | 2026-11-11 | 2026-10-06 | | Data processing addendum | https://cdn.prod.website-files.com/6828b564a444ee6676dd6111/6828b564a444ee6676dd612f\_Citcon-Data-Processing-Addendum\_Global-Web.pdf | 2026-11-11 | 2026-09-22 | | Privacy policy | https://www.citcon.com/privacy-policy | 2026-11-11 | 2026-09-22 | | Terms | https://www.citcon.com/terms-conditions | 2026-11-11 | 2026-09-22 | ## Subprocessors (7) As its own list states them. | Subprocessor | Purpose | Location | Listed since | |---|---|---|---| | [Amazon Web Services](https://thirdpartyindex.com/vendors/amazon-web-services.md) | Provide cloud based production transactional processing | Cloud provider | 2026-10-01 | | [Cloudflare](https://thirdpartyindex.com/vendors/cloudflare.md) | — | Cloud monitoring | 2026-10-01 | | [CrowdStrike](https://thirdpartyindex.com/vendors/crowdstrike.md) | — | Security | 2026-10-01 | | [GitHub](https://thirdpartyindex.com/vendors/github.md) | Source code repository | Source code repository | 2026-10-01 | | [Google Workspace](https://thirdpartyindex.com/vendors/google-cloud.md) | Google Workspace | Productivity Tool | 2026-10-01 | | [Jamf](https://thirdpartyindex.com/vendors/jamf.md) | MDM solution for MacOS | Security | 2026-10-01 | | [Okta](https://thirdpartyindex.com/vendors/okta.md) | Identity Management with SSO, MFA, and Lifecycle management | Identity Management | 2026-10-01 | Read from ([evidence](https://thirdpartyindex.com/evidence/9774)). CSV: https://thirdpartyindex.com/vendors/citcon/subprocessors.csv ## Compliance As its trust center lists them. - Audited: SOC 2 Type II, SOC 2 Type I, PCI DSS ([evidence](https://thirdpartyindex.com/evidence/9773)) - Claimed: GDPR ([evidence](https://thirdpartyindex.com/evidence/9773)) ## Web Technologies CITCON's homepage made 73 requests to 6 domains, and 4 services controlled by another company. Loaded on 2026-11-05 by a browser that accepted nothing; other visits may load more or less. What a page loads is not a list of who receives customer data. 4 third parties by category: CDN 2 (jsDelivr, Cloudflare); Page builders 2 (Webflow; usually detected as Page builders: Finsweet (Consent Pro)). Each company that appears controlled by another organization is counted once, under the main category of the technologies detected from it on this homepage or, when none was, the category recorded from the company's own page (marked reviewed) or else the one it is usually detected as on other published homepages (marked as such); unclassified: none of these. ### Third parties (4) - Webflow: 40 requests to website-files.com, d3e54v103j8qbb.cloudfront.net; Webflow 1.6.0 - jsDelivr: 26 requests to jsdelivr.net; jsDelivr - Cloudflare: 4 requests to cloudflare.com; cdnjs, jQuery 3.5.1 (its subprocessor list names it too) - Finsweet (Consent Pro): 1 request to consentpro.com ### First party (1) - CITCON: 2 requests to citcon.com; Cloudflare, Finsweet, GSAP 3.11.3, HSTS, HTTP/3, Lenis 0.2.28, LottieFiles, Open Graph, Swiper, Webpack 2 tracked companies loaded by the homepage are not in CITCON's subprocessor list. A website can use a service without it processing customer data. ## Subprocessor of (1) Tracked vendors whose own subprocessor lists name it, and what they say they use it for. - [FastSpring](https://thirdpartyindex.com/vendors/fastspring.md): Payment Processing ## Incidents reported by CITCON's subprocessors Incidents reported in the last 30 days on their own status pages by 2 vendors CITCON lists as subprocessors. A subprocessor list names a company, not the service an incident touched. - 2026-11-11: [GitHub](https://thirdpartyindex.com/vendors/github#status), which CITCON lists as a subprocessor, reported Impact across multiple GitHub products including Actions, Pages, and Copilot products. (critical) - 2026-11-11: [GitHub](https://thirdpartyindex.com/vendors/github#status), which CITCON lists as a subprocessor, reported Incident with Webhooks (minor) - 2026-11-10: [GitHub](https://thirdpartyindex.com/vendors/github#status), which CITCON lists as a subprocessor, reported Incident with Git Operations and Pull Requests (critical) - 2026-11-09: [GitHub](https://thirdpartyindex.com/vendors/github#status), which CITCON lists as a subprocessor, reported Degraded availability for GPT-5.3 Codex and GPT-5.6 models in Copilot (major) - 2026-11-09: [GitHub](https://thirdpartyindex.com/vendors/github#status), which CITCON lists as a subprocessor, reported Incident with Actions and Checks API (critical) - 2026-11-09: [GitHub](https://thirdpartyindex.com/vendors/github#status), which CITCON lists as a subprocessor, reported Incident with Webhooks and Actions (major) - 2026-11-09: [GitHub](https://thirdpartyindex.com/vendors/github#status), which CITCON lists as a subprocessor, reported Increased timeouts due to surge in anonymous users (minor) - 2026-11-08: [GitHub](https://thirdpartyindex.com/vendors/github#status), which CITCON lists as a subprocessor, reported Increase in timeouts for some unauthenticated users (minor) - 2026-11-05: [GitHub](https://thirdpartyindex.com/vendors/github#status), which CITCON lists as a subprocessor, reported Degraded performance for multiple GitHub services (minor) - 2026-11-05: [GitHub](https://thirdpartyindex.com/vendors/github#status), which CITCON lists as a subprocessor, reported Incident with Actions (minor) - 2026-11-04: [GitHub](https://thirdpartyindex.com/vendors/github#status), which CITCON lists as a subprocessor, reported Incident with Actions (major) - 2026-11-04: [GitHub](https://thirdpartyindex.com/vendors/github#status), which CITCON lists as a subprocessor, reported Incident with Actions and Pages (major) - 2026-11-04: [GitHub](https://thirdpartyindex.com/vendors/github#status), which CITCON lists as a subprocessor, reported Incident with Pull Requests, Git Operations and Issues (major) - 2026-11-04: [Jamf](https://thirdpartyindex.com/vendors/jamf#status), which CITCON lists as a subprocessor, reported Jamf Now: Some accounts deactivated unexpectedly (major) - 2026-11-04: [GitHub](https://thirdpartyindex.com/vendors/github#status), which CITCON lists as a subprocessor, reported Increased task-related errors for Copilot Mission Control (minor) - 2026-11-03: [GitHub](https://thirdpartyindex.com/vendors/github#status), which CITCON lists as a subprocessor, reported Incident with Git Operations (minor) - 2026-11-03: [GitHub](https://thirdpartyindex.com/vendors/github#status), which CITCON lists as a subprocessor, reported Incident with API, Git, and Copilot requests (minor) - 2026-11-02: [GitHub](https://thirdpartyindex.com/vendors/github#status), which CITCON lists as a subprocessor, reported Elevated errors on GPT-5.4 Nano (minor) - 2026-10-30: [GitHub](https://thirdpartyindex.com/vendors/github#status), which CITCON lists as a subprocessor, reported Incident with Dependabot (minor) - 2026-10-30: [GitHub](https://thirdpartyindex.com/vendors/github#status), which CITCON lists as a subprocessor, reported Incident with Actions, Pages, and Webhooks (major) - 2026-10-30: [GitHub](https://thirdpartyindex.com/vendors/github#status), which CITCON lists as a subprocessor, reported Disruption with GitHub services (critical) - 2026-10-29: [GitHub](https://thirdpartyindex.com/vendors/github#status), which CITCON lists as a subprocessor, reported Disruption with Copilot Cloud services (minor) - 2026-10-28: [GitHub](https://thirdpartyindex.com/vendors/github#status), which CITCON lists as a subprocessor, reported Disruption with some Copilot services (critical) - 2026-10-27: [GitHub](https://thirdpartyindex.com/vendors/github#status), which CITCON lists as a subprocessor, reported Elevated 404s for GitHub App s2s tokens in git/API (no impact stated) - 2026-10-26: [GitHub](https://thirdpartyindex.com/vendors/github#status), which CITCON lists as a subprocessor, reported Incident with Actions, Issues, API Requests and Pull Requests (minor) - 2026-10-26: [Jamf](https://thirdpartyindex.com/vendors/jamf#status), which CITCON lists as a subprocessor, reported Jamf Pro may be experiencing slow response times. (no impact stated) - 2026-10-26: [Jamf](https://thirdpartyindex.com/vendors/jamf#status), which CITCON lists as a subprocessor, reported Partial connectivity issue to some instances (major) - 2026-10-23: [GitHub](https://thirdpartyindex.com/vendors/github#status), which CITCON lists as a subprocessor, reported Grok 4.6 and Grok 4.7 Service Issues (minor) - 2026-10-23: [GitHub](https://thirdpartyindex.com/vendors/github#status), which CITCON lists as a subprocessor, reported Disruption with Dependabot Alerts (minor) - 2026-10-23: [Jamf](https://thirdpartyindex.com/vendors/jamf#status), which CITCON lists as a subprocessor, reported Customers using VPP v2 may experience delays in new apps and licenses appearing in their Jamf environment (minor) - 2026-10-23: [GitHub](https://thirdpartyindex.com/vendors/github#status), which CITCON lists as a subprocessor, reported Delayed Actions status check results (minor) - 2026-10-22: [GitHub](https://thirdpartyindex.com/vendors/github#status), which CITCON lists as a subprocessor, reported Project updates delayed (minor) - 2026-10-22: [GitHub](https://thirdpartyindex.com/vendors/github#status), which CITCON lists as a subprocessor, reported Incident with Actions (minor) - 2026-10-21: [GitHub](https://thirdpartyindex.com/vendors/github#status), which CITCON lists as a subprocessor, reported Delays for Pull Requests and Webhook deliveries (critical) - 2026-10-21: [Jamf](https://thirdpartyindex.com/vendors/jamf#status), which CITCON lists as a subprocessor, reported Public disclosure of compromised intermediate certificate authority keys (eMudhra) affecting certificate trust across the internet (minor) - 2026-10-21: [Jamf](https://thirdpartyindex.com/vendors/jamf#status), which CITCON lists as a subprocessor, reported On-Device Content Filtering test page is currently unavailable (minor) - 2026-10-21: [Jamf](https://thirdpartyindex.com/vendors/jamf#status), which CITCON lists as a subprocessor, reported Jamf School Upload Functionality (major) - 2026-10-19: [GitHub](https://thirdpartyindex.com/vendors/github#status), which CITCON lists as a subprocessor, reported Degraded availability for GitHub Actions, GitHub Pages and Webhooks (critical) - 2026-10-15: [GitHub](https://thirdpartyindex.com/vendors/github#status), which CITCON lists as a subprocessor, reported CCA Automations are delayed when starting an Automation (minor) - 2026-10-13: [GitHub](https://thirdpartyindex.com/vendors/github#status), which CITCON lists as a subprocessor, reported \[Retroactive\] Actions workflow run logs delayed (minor) The subprocessor list as we read it on any date: https://thirdpartyindex.com/labs/time-machine/citcon --- Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api