# CodeRabbit

CodeRabbit declares [30 subprocessors](https://thirdpartyindex.com/vendors/coderabbit#subprocessors) in [its subprocessor list](https://trust.coderabbit.ai/subprocessors), which we last checked on 2026-11-11 ([evidence](https://thirdpartyindex.com/evidence/53908)). They include [Google Cloud](https://thirdpartyindex.com/vendors/google-cloud), [OpenAI](https://thirdpartyindex.com/vendors/openai) and [Stripe](https://thirdpartyindex.com/vendors/stripe). No published changes since we first read it on 2026-09-21. [2 tracked vendors](https://thirdpartyindex.com/vendors/coderabbit#used-by) name CodeRabbit as a subprocessor, including [Simple Analytics](https://thirdpartyindex.com/vendors/simple-analytics) and [Parseable](https://thirdpartyindex.com/vendors/parseable).

CodeRabbit (coderabbit.ai): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/coderabbit
- Documents last verified: 2026-11-11
- Transparency rating: 100/100 (how much it publishes, not how secure it is): Subprocessor list 30/30; Processing locations 8/8; Purposes 7/7; Data processing addendum 12/12; Trust center 8/8; Privacy policy 6/6; security.txt 6/6; Security page 5/5; Status page 5/5; Vulnerability disclosure 5/5; Pages still reachable 8/8
- Supply chain: relies on 28 tracked vendors directly, 226 within two hops, 596 within three; 2 tracked vendors rely on it directly, 3 within two hops, 7 within three
- Cite as: CodeRabbit, Third Party Index, https://thirdpartyindex.com/vendors/coderabbit (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Trust center | https://trust.coderabbit.ai/ | 2026-11-10 | 2026-11-10 |
| Subprocessor list | https://trust.coderabbit.ai/subprocessors | 2026-11-11 | 2026-10-06 |
| Data processing addendum | https://www.coderabbit.ai/legal/dpa | 2026-11-11 | 2026-11-04 |
| Privacy policy | https://www.coderabbit.ai/privacy-policy | 2026-11-11 | 2026-10-17 |
| Terms | https://www.coderabbit.ai/legal/terms-of-service | 2026-11-11 | 2026-11-04 |
| Security page | https://www.coderabbit.ai/security | 2026-11-11 | 2026-10-27 |
| security.txt | https://www.coderabbit.ai/.well-known/security.txt | 2026-11-11 | 2026-09-21 |
| Status page | https://status.coderabbit.ai/ | 2026-11-11 | 2026-11-03 |
| Security advisories | https://www.coderabbit.ai/vulnerability-disclosure | 2026-11-11 | 2026-09-21 |

## Subprocessors (30)

As its own list states them.

| Subprocessor | Purpose | Location | Listed since |
|---|---|---|---|
| [Anthropic](https://thirdpartyindex.com/vendors/anthropic.md) (AI model provider: Anthropic) | Artificial Intelligence | USA | 2026-10-01 |
| [Baseten](https://thirdpartyindex.com/vendors/baseten.md) (AI model provider: Baseten) | AI Services | USA | 2026-10-01 |
| [Chargebee](https://thirdpartyindex.com/vendors/chargebee.md) | Finance | USA | 2026-10-01 |
| [Clerk](https://thirdpartyindex.com/vendors/clerk.md) | SSO Authentication | USA | 2026-10-01 |
| [Cloudflare](https://thirdpartyindex.com/vendors/cloudflare.md) | Hosting Providers | USA | 2026-10-01 |
| [Customer.io](https://thirdpartyindex.com/vendors/customer-io.md) | Customer Communications | USA | 2026-10-01 |
| [Datadog](https://thirdpartyindex.com/vendors/datadog.md) | IT infrastructure | USA | 2026-10-01 |
| [Discord](https://thirdpartyindex.com/vendors/discord.md) | Collaboration & Productivity | USA | 2026-10-01 |
| [Exa](https://thirdpartyindex.com/vendors/exa-labs.md) | AI-powered web search services | USA | 2026-10-01 |
| [Fivetran](https://thirdpartyindex.com/vendors/fivetran.md) | ETL data pipeline for analytics | USA | 2026-10-01 |
| [GitHub](https://thirdpartyindex.com/vendors/github.md) | Version control | USA | 2026-10-01 |
| [Google Cloud Platform](https://thirdpartyindex.com/vendors/google-cloud.md) | Cloud provider | USA | 2026-10-01 |
| [Google Workspace](https://thirdpartyindex.com/vendors/google-cloud.md) | Collaboration | USA | 2026-10-01 |
| [HubSpot](https://thirdpartyindex.com/vendors/hubspot.md) | Sales | USA | 2026-10-01 |
| [LanceDB](https://thirdpartyindex.com/vendors/lancedb.md) | IT infrastructure | USA | 2026-10-01 |
| LanguageTool | Documentation reviews | Germany (EU) | 2026-10-01 |
| [OpenAI](https://thirdpartyindex.com/vendors/openai.md) (AI model provider: OpenAI) | Artificial Intelligence | USA | 2026-10-01 |
| [PostHog](https://thirdpartyindex.com/vendors/posthog.md) | Analytics | USA | 2026-10-01 |
| [Pylon](https://thirdpartyindex.com/vendors/pylon.md) | Customer Service | USA | 2026-10-01 |
| [salesforce](https://thirdpartyindex.com/vendors/salesforce.md) | Sales | USA | 2026-10-01 |
| [SentinelOne](https://thirdpartyindex.com/vendors/sentinelone.md) | Security Software | USA | 2026-10-01 |
| [Slack](https://thirdpartyindex.com/vendors/slack.md) | Collaboration & Productivity | US | 2026-10-01 |
| [Stripe](https://thirdpartyindex.com/vendors/stripe.md) | Finance | USA | 2026-10-01 |
| [Suger](https://thirdpartyindex.com/vendors/suger.md) | Marketplace Administration; Suger is a Cloud GTM platform for selling and billing through cloud marketplaces — AWS, Microsoft, Google Cloud, Snowflake, Alibaba Cloud, and Oracle. | USA | 2026-10-01 |
| [Typeform](https://thirdpartyindex.com/vendors/typeform.md) | Ticketing Softwares | USA | 2026-10-01 |
| [Upstash](https://thirdpartyindex.com/vendors/upstash.md) | IT infrastructure | USA | 2026-10-01 |
| [Vanta](https://thirdpartyindex.com/vendors/vanta.md) | Continuous security and compliance monitoring; Security | USA | 2026-10-01 |
| [Vercel](https://thirdpartyindex.com/vendors/vercel.md) | IT infrastructure | USA | 2026-10-01 |
| [wiz](https://thirdpartyindex.com/vendors/wiz-io.md) | Cloud Security; Wiz connects code, cloud, and runtime into a single security graph that provides the end-to-end context required to automate risk reduction and threat response, enabling security teams to operate at AI speed. | USA | 2026-10-01 |
| [Zoom](https://thirdpartyindex.com/vendors/zoom.md) | Virtual meetings | USA | 2026-10-01 |

Read from ([evidence](https://thirdpartyindex.com/evidence/9033)). CSV: https://thirdpartyindex.com/vendors/coderabbit/subprocessors.csv

AI model providers (or a cloud provider's AI model service) among these entries: 3. All vendors that list one: https://thirdpartyindex.com/ai

## Compliance

As its trust center lists them.

- Audited: SOC 2 Type II, ISO/IEC 27001 ([evidence](https://thirdpartyindex.com/evidence/10856))
- Claimed: SOC 3, GDPR ([evidence](https://thirdpartyindex.com/evidence/83868))

## Web Technologies

CodeRabbit's homepage made 200 requests to 35 domains, 15 services controlled by another company, and 5 domains not identified. Loaded on 2026-11-03 by a browser that accepted nothing; other visits may load more or less. What a page loads is not a list of who receives customer data.

15 third parties by category: Advertising 6 (Google Cloud, X Corp., Sovrn, OpenAI, Gravity; usually detected as Advertising: Microsoft); Analytics 5 (HubSpot, FullContact, LinkedIn, Leadfeeder, Primer Labs, Inc.); Marketing automation 1 (Apollo); Cookie compliance 1 (Ketch); CDN 1 (jsDelivr); Email 1 (LiveIntent). Each company that appears controlled by another organization is counted once, under the main category of the technologies detected from it on this homepage or, when none was, the category recorded from the company's own page (marked reviewed) or else the one it is usually detected as on other published homepages (marked as such); unclassified: none of these.

### Third parties (15)

- Google Cloud: 15 requests to google.com, doubleclick.net, googletagmanager.com, googleadservices.com; DoubleClick Floodlight, Google Analytics, Google Tag Manager (its subprocessor list names it too)
- HubSpot: 12 requests to hubspot.com, hscollectedforms.net, hsforms.com, hs-analytics.net, hs-banner.com, hs-scripts.com, usemessages.com; HubSpot, HubSpot Analytics, HubSpot Chat (its subprocessor list names it too)
- X Corp.: 9 requests to t.co, twitter.com, ads-twitter.com; Twitter Ads
- LiveIntent: 8 requests to liadm.com; LiveIntent
- Ketch: 7 requests to ketchcdn.com, ketchjs.com; Ketch
- Sovrn: 6 requests to lijit.com; Sovrn
- OpenAI: 4 requests to openai.com; ChatGPT Ads Measurement Pixel (its subprocessor list names it too)
- Apollo: 3 requests to aplo-evnt.com, apollo.io; Apollo.io
- FullContact: 3 requests to fullcontact.com; FullContact
- LinkedIn: 3 requests to linkedin.com, licdn.com; Linkedin Insight Tag
- Leadfeeder: 2 requests to lfeeder.com; Leadfeeder
- Gravity: 1 request to trygravity.ai; Gravity Ads
- Microsoft: 1 request to bing.com
- Primer Labs, Inc.: 1 request to sayprimer.com; Primer
- jsDelivr: 1 request to jsdelivr.net; FingerprintJS 3.4.2, jsDelivr

### Unknown (5)

Domains not identified yet: 1eye.ai, instadb.io, datamoon.com, sitelytics.tech, usbrowserspeed.com

### First party (1)

- CodeRabbit: 113 requests to coderabbit.ai; Framer Motion, HSTS, Next.js 16.2.10, Next.js App Router, Open Graph, PWA, PostHog, Priority Hints, React, Turbopack, Vercel, Webpack

7 tracked companies loaded by the homepage are not in CodeRabbit's subprocessor list. A website can use a service without it processing customer data.

## Subprocessor of (2)

Tracked vendors whose own subprocessor lists name it, and what they say they use it for.

- [Parseable](https://thirdpartyindex.com/vendors/parseable.md): Development software
- [Simple Analytics](https://thirdpartyindex.com/vendors/simple-analytics.md): AI code reviews

## Service status

Incidents it reported on its own status page.

- Last 90 days: 14 reported incidents (0 major or critical, 0 minor, 14 with no impact stated)
- Typical time to resolve: 54 min
- Status page last read: 2026-11-11
- 2026-10-27: Reviews might be impacted (no impact stated)
- 2026-10-19: Reviews might be impacted (no impact stated)
- 2026-10-19: Reviews might be impacted (no impact stated)
- 2026-10-19: Reviews might be impacted (no impact stated)
- 2026-10-19: Reviews might be impacted (no impact stated)
- 2026-10-19: Degraded Performance on Login and Reviews (no impact stated)
- 2026-10-19: Reviews might be impacted (no impact stated)
- 2026-10-19: Reviews might be impacted (no impact stated)

## Incidents reported by CodeRabbit's subprocessors

Incidents reported in the last 30 days on their own status pages by 16 vendors CodeRabbit lists as subprocessors. A subprocessor list names a company, not the service an incident touched.

- 2026-11-11: [Baseten](https://thirdpartyindex.com/vendors/baseten#status), which CodeRabbit lists as a subprocessor, reported Model APIs are down for all models (critical)
- 2026-11-11: [Pylon](https://thirdpartyindex.com/vendors/pylon#status), which CodeRabbit lists as a subprocessor, reported Slack Integration Connection Issues (major)
- 2026-11-10: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which CodeRabbit lists as a subprocessor, reported Elevated errors on Fable 52 and Mythos 52 (no impact stated)
- 2026-11-10: [Vercel](https://thirdpartyindex.com/vendors/vercel#status), which CodeRabbit lists as a subprocessor, reported Elevated Sandbox and Blob request latency and errors (minor)
- 2026-11-10: [Zoom](https://thirdpartyindex.com/vendors/zoom#status), which CodeRabbit lists as a subprocessor, reported Service Degradation Affecting Zoom Conference Room Connector Services Endpoints in the AMS region. (minor)
- 2026-11-10: [HubSpot](https://thirdpartyindex.com/vendors/hubspot#status), which CodeRabbit lists as a subprocessor, reported Some HubSpot tools may be unavailable for some users (no impact stated)
- 2026-11-10: [GitHub](https://thirdpartyindex.com/vendors/github#status), which CodeRabbit lists as a subprocessor, reported Incident with Git Operations and Pull Requests (critical)
- 2026-11-10: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which CodeRabbit lists as a subprocessor, reported Incorrect cost data in Costs API exports (no impact stated)
- 2026-11-10: [Zoom](https://thirdpartyindex.com/vendors/zoom#status), which CodeRabbit lists as a subprocessor, reported Service Degradation Affecting a subset of users with ZVA and ZoomMate (no impact stated)
- 2026-11-09: [GitHub](https://thirdpartyindex.com/vendors/github#status), which CodeRabbit lists as a subprocessor, reported Degraded availability for GPT-5.3 Codex and GPT-5.6 models in Copilot (major)
- 2026-11-09: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which CodeRabbit lists as a subprocessor, reported Elevated Errors On API (minor)
- 2026-11-09: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which CodeRabbit lists as a subprocessor, reported Elevated ChatGPT Conversation Errors (minor)
- 2026-11-09: [GitHub](https://thirdpartyindex.com/vendors/github#status), which CodeRabbit lists as a subprocessor, reported Incident with Actions and Checks API (critical)
- 2026-11-09: [Discord](https://thirdpartyindex.com/vendors/discord#status), which CodeRabbit lists as a subprocessor, reported Connectivity Issue w/ Discord's Homepage and Marketing Sites (major)
- 2026-11-09: [GitHub](https://thirdpartyindex.com/vendors/github#status), which CodeRabbit lists as a subprocessor, reported Incident with Webhooks and Actions (major)
- 2026-11-09: [GitHub](https://thirdpartyindex.com/vendors/github#status), which CodeRabbit lists as a subprocessor, reported Increased timeouts due to surge in anonymous users (minor)
- 2026-11-09: [Zoom](https://thirdpartyindex.com/vendors/zoom#status), which CodeRabbit lists as a subprocessor, reported Service Degradation Affecting Zoom Inbound SMS Service in the AU region (minor)
- 2026-11-08: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which CodeRabbit lists as a subprocessor, reported Elevated errors with image generation (minor)
- 2026-11-08: [GitHub](https://thirdpartyindex.com/vendors/github#status), which CodeRabbit lists as a subprocessor, reported Increase in timeouts for some unauthenticated users (minor)
- 2026-11-08: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which CodeRabbit lists as a subprocessor, reported Degraded performance for Claude Fable 5.1 (minor)
- 2026-11-06: [Customer.io](https://thirdpartyindex.com/vendors/customer-io#status), which CodeRabbit lists as a subprocessor, reported Customers are Unable to add new Email Sending Domains (major)
- 2026-11-06: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which CodeRabbit lists as a subprocessor, reported Elevated error rates with some U.S. business Mastercards (no impact stated)
- 2026-11-06: [Zoom](https://thirdpartyindex.com/vendors/zoom#status), which CodeRabbit lists as a subprocessor, reported Service Degradation Affecting Zoom Mail, Calendar and Scheduler. (minor)
- 2026-11-05: [GitHub](https://thirdpartyindex.com/vendors/github#status), which CodeRabbit lists as a subprocessor, reported Degraded performance for multiple GitHub services (minor)
- 2026-11-05: [Baseten](https://thirdpartyindex.com/vendors/baseten#status), which CodeRabbit lists as a subprocessor, reported Elevated errors for Kimi-K3 on Model APIs. \*\*Dedicated Inference is not affected\*\* (minor)
- 2026-11-05: [Vercel](https://thirdpartyindex.com/vendors/vercel#status), which CodeRabbit lists as a subprocessor, reported Build delays and degraded Vercel Dashboard performance (minor)
- 2026-11-05: [GitHub](https://thirdpartyindex.com/vendors/github#status), which CodeRabbit lists as a subprocessor, reported Incident with Actions (minor)
- 2026-11-05: [Pylon](https://thirdpartyindex.com/vendors/pylon#status), which CodeRabbit lists as a subprocessor, reported Delay in Analytics Data (minor)
- 2026-11-05: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which CodeRabbit lists as a subprocessor, reported ChatGPT Work and Dots Errors (minor)
- 2026-11-05: [wiz.io](https://thirdpartyindex.com/vendors/wiz-io#status), which CodeRabbit lists as a subprocessor, reported Graph query reports could fail to generate in some data centers due to an AWS Neptune issue. We are working with AWS on a mitigation. (no impact stated)
- 2026-11-04: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which CodeRabbit lists as a subprocessor, reported Elevated error rates across paid ChatGPT plans (minor)
- 2026-11-04: [GitHub](https://thirdpartyindex.com/vendors/github#status), which CodeRabbit lists as a subprocessor, reported Incident with Actions (major)
- 2026-11-04: [GitHub](https://thirdpartyindex.com/vendors/github#status), which CodeRabbit lists as a subprocessor, reported Incident with Actions and Pages (major)
- 2026-11-04: [Pylon](https://thirdpartyindex.com/vendors/pylon#status), which CodeRabbit lists as a subprocessor, reported Inbound Email Delays (minor)
- 2026-11-04: [GitHub](https://thirdpartyindex.com/vendors/github#status), which CodeRabbit lists as a subprocessor, reported Incident with Pull Requests, Git Operations and Issues (major)
- 2026-11-04: [GitHub](https://thirdpartyindex.com/vendors/github#status), which CodeRabbit lists as a subprocessor, reported Increased task-related errors for Copilot Mission Control (minor)
- 2026-11-03: [Vanta](https://thirdpartyindex.com/vendors/vanta#status), which CodeRabbit lists as a subprocessor, reported Missing check results for GitHub pull requests (minor)
- 2026-11-03: [GitHub](https://thirdpartyindex.com/vendors/github#status), which CodeRabbit lists as a subprocessor, reported Incident with Git Operations (minor)
- 2026-11-03: [Zoom](https://thirdpartyindex.com/vendors/zoom#status), which CodeRabbit lists as a subprocessor, reported Service Degradation Affecting Outbound MMS Services in the US region (minor)
- 2026-11-03: [GitHub](https://thirdpartyindex.com/vendors/github#status), which CodeRabbit lists as a subprocessor, reported Incident with API, Git, and Copilot requests (minor)
- 2026-11-03: [Clerk](https://thirdpartyindex.com/vendors/clerk#status), which CodeRabbit lists as a subprocessor, reported Elevated error rates for authentication requests (minor)
- 2026-11-03: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which CodeRabbit lists as a subprocessor, reported File upload errors in ChatGPT (minor)
- 2026-11-02: [GitHub](https://thirdpartyindex.com/vendors/github#status), which CodeRabbit lists as a subprocessor, reported Elevated errors on GPT-5.4 Nano (minor)
- 2026-11-02: [HubSpot](https://thirdpartyindex.com/vendors/hubspot#status), which CodeRabbit lists as a subprocessor, reported HubSpot is experiencing issues (no impact stated)
- 2026-11-01: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which CodeRabbit lists as a subprocessor, reported Elevated Instant Payouts failures (no impact stated)
- 2026-10-31: [Discord](https://thirdpartyindex.com/vendors/discord#status), which CodeRabbit lists as a subprocessor, reported Issues establishing voice call (major)
- 2026-10-30: [GitHub](https://thirdpartyindex.com/vendors/github#status), which CodeRabbit lists as a subprocessor, reported Incident with Dependabot (minor)
- 2026-10-30: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which CodeRabbit lists as a subprocessor, reported Elevated errors with search in Dots, ChatGPT Work, and certain ChatGPT thinking experiences (minor)
- 2026-10-30: [GitHub](https://thirdpartyindex.com/vendors/github#status), which CodeRabbit lists as a subprocessor, reported Incident with Actions, Pages, and Webhooks (major)
- 2026-10-30: [Discord](https://thirdpartyindex.com/vendors/discord#status), which CodeRabbit lists as a subprocessor, reported Issues establishing voice calls (major)
- 2026-10-30: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which CodeRabbit lists as a subprocessor, reported Elevated errors for GPT Image 2 API image edits (minor)
- 2026-10-30: [GitHub](https://thirdpartyindex.com/vendors/github#status), which CodeRabbit lists as a subprocessor, reported Disruption with GitHub services (critical)
- 2026-10-29: [Vanta](https://thirdpartyindex.com/vendors/vanta#status), which CodeRabbit lists as a subprocessor, reported Incorrect security-training and background-check test results (no impact stated)
- 2026-10-29: [Clerk](https://thirdpartyindex.com/vendors/clerk#status), which CodeRabbit lists as a subprocessor, reported SMS Delivery Issues (major)
- 2026-10-29: [GitHub](https://thirdpartyindex.com/vendors/github#status), which CodeRabbit lists as a subprocessor, reported Disruption with Copilot Cloud services (minor)
- 2026-10-28: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which CodeRabbit lists as a subprocessor, reported Elevated Issuing errors from 17:13 - 20:41 UTC (minor)
- 2026-10-28: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which CodeRabbit lists as a subprocessor, reported Elevated errors affecting the Google Calendar connector (minor)
- 2026-10-28: [Datadog](https://thirdpartyindex.com/vendors/datadog#status), which CodeRabbit lists as a subprocessor, reported Metrics query are disrupted (major)
- 2026-10-28: [Zoom](https://thirdpartyindex.com/vendors/zoom#status), which CodeRabbit lists as a subprocessor, reported Service Degradation Affecting the Evaluations Acknowledge Button in Zoom Quality Management in the US Region (minor)
- 2026-10-28: [GitHub](https://thirdpartyindex.com/vendors/github#status), which CodeRabbit lists as a subprocessor, reported Disruption with some Copilot services (critical)
- 2026-10-28: [ChargeBee](https://thirdpartyindex.com/vendors/chargebee#status), which CodeRabbit lists as a subprocessor, reported API Service Degradation - EU Region (major)
- 2026-10-28: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which CodeRabbit lists as a subprocessor, reported Elevated errors affecting the Gmail connector (minor)
- 2026-10-27: [Customer.io](https://thirdpartyindex.com/vendors/customer-io#status), which CodeRabbit lists as a subprocessor, reported Customer.io UI is currently unavailable for some customers (minor)
- 2026-10-27: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which CodeRabbit lists as a subprocessor, reported Elevated errors for Claude Sonnet 5.5 (major)
- 2026-10-27: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which CodeRabbit lists as a subprocessor, reported 6.1 Sol Degraded Model Performance (minor)
- 2026-10-27: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which CodeRabbit lists as a subprocessor, reported Elevated errors for Claude Sonnet 5.5 (major)
- 2026-10-27: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which CodeRabbit lists as a subprocessor, reported Elevated error rates for most hosted Code Reviews and Security Reviews on private GitHub repositories (no impact stated)
- 2026-10-27: [GitHub](https://thirdpartyindex.com/vendors/github#status), which CodeRabbit lists as a subprocessor, reported Elevated 404s for GitHub App s2s tokens in git/API (no impact stated)
- 2026-10-26: [GitHub](https://thirdpartyindex.com/vendors/github#status), which CodeRabbit lists as a subprocessor, reported Incident with Actions, Issues, API Requests and Pull Requests (minor)
- 2026-10-26: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which CodeRabbit lists as a subprocessor, reported Elevated error rates for Ads POST requests (minor)
- 2026-10-26: [Datadog](https://thirdpartyindex.com/vendors/datadog#status), which CodeRabbit lists as a subprocessor, reported Elevated Error Rates for Workflow Automation, App Builder, Bits Code, Bits Agent Builder (major)
- 2026-10-25: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which CodeRabbit lists as a subprocessor, reported Elevated errors for Claude Fable 5.1 (major)
- 2026-10-25: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which CodeRabbit lists as a subprocessor, reported Elevated errors for Claude Sonnet 5.5 and other models (major)
- 2026-10-24: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which CodeRabbit lists as a subprocessor, reported Elevated Blik errors (no impact stated)
- 2026-10-24: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which CodeRabbit lists as a subprocessor, reported Elevated errors for Claude Fable 5 and Claude Fable 5.1 (major)
- 2026-10-24: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which CodeRabbit lists as a subprocessor, reported Elevated errors for Claude Opus 5.5 (major)
- 2026-10-23: [GitHub](https://thirdpartyindex.com/vendors/github#status), which CodeRabbit lists as a subprocessor, reported Grok 4.6 and Grok 4.7 Service Issues (minor)
- 2026-10-23: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which CodeRabbit lists as a subprocessor, reported Elevated errors for Claude Fable 5.1, Sonnet 5.5, and Haiku 5.5 (critical)
- 2026-10-23: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which CodeRabbit lists as a subprocessor, reported Degraded experience with ChatGPT app connections using CIMD (minor)
- 2026-10-23: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which CodeRabbit lists as a subprocessor, reported Help Center Chat Support Degraded (no impact stated)
- 2026-10-23: [Vercel](https://thirdpartyindex.com/vendors/vercel#status), which CodeRabbit lists as a subprocessor, reported Delays in Logs and Observability data (minor)
- 2026-10-23: [HubSpot](https://thirdpartyindex.com/vendors/hubspot#status), which CodeRabbit lists as a subprocessor, reported Some HubSpot tools may be unavailable for some users (no impact stated)
- 2026-10-23: [Zoom](https://thirdpartyindex.com/vendors/zoom#status), which CodeRabbit lists as a subprocessor, reported Service Degradation Affecting Multiple Zoom Services (minor)
- 2026-10-23: [GitHub](https://thirdpartyindex.com/vendors/github#status), which CodeRabbit lists as a subprocessor, reported Disruption with Dependabot Alerts (minor)
- 2026-10-23: [GitHub](https://thirdpartyindex.com/vendors/github#status), which CodeRabbit lists as a subprocessor, reported Delayed Actions status check results (minor)
- 2026-10-23: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which CodeRabbit lists as a subprocessor, reported Delays in customer support responses (no impact stated)
- 2026-10-23: [Baseten](https://thirdpartyindex.com/vendors/baseten#status), which CodeRabbit lists as a subprocessor, reported Elevated errors for US-only GLM 5.3 Flash on Model APIs (minor)
- 2026-10-22: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which CodeRabbit lists as a subprocessor, reported Elevated Bancontact errors (no impact stated)
- 2026-10-22: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which CodeRabbit lists as a subprocessor, reported New Ad Accounts failing to provision admins (minor)
- 2026-10-22: [Zoom](https://thirdpartyindex.com/vendors/zoom#status), which CodeRabbit lists as a subprocessor, reported Service Degradation Affecting Zoom Meetings Services in the US. (minor)
- 2026-10-22: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which CodeRabbit lists as a subprocessor, reported Degraded Performance of Dots on Enterprise (minor)
- 2026-10-22: [ChargeBee](https://thirdpartyindex.com/vendors/chargebee#status), which CodeRabbit lists as a subprocessor, reported Subject: Security Notice: No Impact from PHPshell Zero-Day Vulnerability (no impact stated)
- 2026-10-22: [GitHub](https://thirdpartyindex.com/vendors/github#status), which CodeRabbit lists as a subprocessor, reported Project updates delayed (minor)
- 2026-10-22: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which CodeRabbit lists as a subprocessor, reported Elevated Bancontact errors (no impact stated)
- 2026-10-22: [GitHub](https://thirdpartyindex.com/vendors/github#status), which CodeRabbit lists as a subprocessor, reported Incident with Actions (minor)
- 2026-10-22: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which CodeRabbit lists as a subprocessor, reported Elevated errors affecting Connectors (minor)
- 2026-10-22: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which CodeRabbit lists as a subprocessor, reported Elevated ChatGPT conversation and Responses API errors (minor)
- 2026-10-22: [HubSpot](https://thirdpartyindex.com/vendors/hubspot#status), which CodeRabbit lists as a subprocessor, reported Update on PHP security vulnerability (no impact stated)
- 2026-10-21: [Clerk](https://thirdpartyindex.com/vendors/clerk#status), which CodeRabbit lists as a subprocessor, reported Issues with Documentation "Ask AI" (minor)
- 2026-10-21: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which CodeRabbit lists as a subprocessor, reported Authentication errors for some users (major)
- 2026-10-21: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which CodeRabbit lists as a subprocessor, reported Degraded performance for Claude Fable 5 (minor)
- 2026-10-21: [Vanta](https://thirdpartyindex.com/vendors/vanta#status), which CodeRabbit lists as a subprocessor, reported Stale data for CloudflareDomainInventory and CloudflareZoneRule (major)
- 2026-10-21: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which CodeRabbit lists as a subprocessor, reported Elevated error rates for gpt-5.6-luna API requests (minor)
- 2026-10-21: [GitHub](https://thirdpartyindex.com/vendors/github#status), which CodeRabbit lists as a subprocessor, reported Delays for Pull Requests and Webhook deliveries (critical)
- 2026-10-21: [Zoom](https://thirdpartyindex.com/vendors/zoom#status), which CodeRabbit lists as a subprocessor, reported Service Degradation Affecting Zoom Learning Webpage (minor)
- 2026-10-21: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which CodeRabbit lists as a subprocessor, reported Elevated FedRAMP API error rates for Astra and Sol (minor)
- 2026-10-21: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which CodeRabbit lists as a subprocessor, reported Degraded performance in ChatGPT, Codex, and APIs (minor)
- 2026-10-21: [Baseten](https://thirdpartyindex.com/vendors/baseten#status), which CodeRabbit lists as a subprocessor, reported Elevated errors on DeepSeek V4 Flash on Model APIs (minor)
- 2026-10-21: [Baseten](https://thirdpartyindex.com/vendors/baseten#status), which CodeRabbit lists as a subprocessor, reported Elevated errors for image requests on multiple Model APIs (minor)
- 2026-10-20: [Baseten](https://thirdpartyindex.com/vendors/baseten#status), which CodeRabbit lists as a subprocessor, reported DeepSeek V4.1 Flash Fast Outage on Model APIs (major)
- 2026-10-20: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which CodeRabbit lists as a subprocessor, reported Spike in cancellations and expired errors with PayByBank payments (no impact stated)
- 2026-10-20: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which CodeRabbit lists as a subprocessor, reported Elevated Revolut Pay errors (no impact stated)
- 2026-10-20: [Baseten](https://thirdpartyindex.com/vendors/baseten#status), which CodeRabbit lists as a subprocessor, reported Elevated errors on Model APIs (minor)
- 2026-10-19: [Zoom](https://thirdpartyindex.com/vendors/zoom#status), which CodeRabbit lists as a subprocessor, reported Service Degradation Affecting Meeting Summaries Via Email. (minor)
- 2026-10-19: [GitHub](https://thirdpartyindex.com/vendors/github#status), which CodeRabbit lists as a subprocessor, reported Degraded availability for GitHub Actions, GitHub Pages and Webhooks (critical)
- 2026-10-19: [Zoom](https://thirdpartyindex.com/vendors/zoom#status), which CodeRabbit lists as a subprocessor, reported Service Degradation Affecting Zoom Website in UK region (minor)
- 2026-10-19: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which CodeRabbit lists as a subprocessor, reported File Download errors (minor)
- 2026-10-19: [Zoom](https://thirdpartyindex.com/vendors/zoom#status), which CodeRabbit lists as a subprocessor, reported Service Degradation Affecting ZP SMS Australia Mobile Numbers (no impact stated)
- 2026-10-18: [wiz.io](https://thirdpartyindex.com/vendors/wiz-io#status), which CodeRabbit lists as a subprocessor, reported We are investigating an issue affecting the security graph and dependent features in prod-US38. (no impact stated)
- 2026-10-17: [Zoom](https://thirdpartyindex.com/vendors/zoom#status), which CodeRabbit lists as a subprocessor, reported Service Degradation Affecting Zoom Chat Compose and SMS Summarisation with AI Companion (minor)
- 2026-10-15: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which CodeRabbit lists as a subprocessor, reported Elevated declines on Mastercard (no impact stated)
- 2026-10-15: [GitHub](https://thirdpartyindex.com/vendors/github#status), which CodeRabbit lists as a subprocessor, reported CCA Automations are delayed when starting an Automation (minor)
- 2026-10-15: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which CodeRabbit lists as a subprocessor, reported Elevated declines on Visa (no impact stated)
- 2026-10-15: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which CodeRabbit lists as a subprocessor, reported Widespread feature degradation (major)
- 2026-10-15: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which CodeRabbit lists as a subprocessor, reported Elevated Amazon Pay errors (no impact stated)
- 2026-10-14: [Pylon](https://thirdpartyindex.com/vendors/pylon#status), which CodeRabbit lists as a subprocessor, reported Platform loading issues (no impact stated)
- 2026-10-14: [wiz.io](https://thirdpartyindex.com/vendors/wiz-io#status), which CodeRabbit lists as a subprocessor, reported We are investigating an issue causing GitHub pull request scans to remain pending, potentially blocking merges where Wiz checks are required. (no impact stated)
- 2026-10-14: [Zoom](https://thirdpartyindex.com/vendors/zoom#status), which CodeRabbit lists as a subprocessor, reported Service degradation affected Zoom AI Companion in US region (no impact stated)
- 2026-10-14: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which CodeRabbit lists as a subprocessor, reported Delayed Costs data in the Compliance API (minor)
- 2026-10-14: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which CodeRabbit lists as a subprocessor, reported Limited availability on gpt-image-2.5-flare and gpt-image-2.5-sunburst (minor)
- 2026-10-14: [Zoom](https://thirdpartyindex.com/vendors/zoom#status), which CodeRabbit lists as a subprocessor, reported Service Degradation Affected Sandbox Creation in ZoomMate (no impact stated)
- 2026-10-14: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which CodeRabbit lists as a subprocessor, reported Degraded performance in Codex and ChatGPT Work (minor)
- 2026-10-14: [Zoom](https://thirdpartyindex.com/vendors/zoom#status), which CodeRabbit lists as a subprocessor, reported Service Degradation Affecting Zoom Clips (minor)
- 2026-10-13: [GitHub](https://thirdpartyindex.com/vendors/github#status), which CodeRabbit lists as a subprocessor, reported \[Retroactive\] Actions workflow run logs delayed (minor)
- 2026-10-13: [Zoom](https://thirdpartyindex.com/vendors/zoom#status), which CodeRabbit lists as a subprocessor, reported Service degradation affecting Zoom Meeting API in US region (no impact stated)
- 2026-10-13: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which CodeRabbit lists as a subprocessor, reported Degraded performance in GPT-6.1 Sol Codex and Work mode (minor)

The subprocessor list as we read it on any date: https://thirdpartyindex.com/labs/time-machine/coderabbit

## Security contact

From its security.txt (https://www.coderabbit.ai/.well-known/security.txt) ([evidence](https://thirdpartyindex.com/evidence/703)):

- Contact: https://www.coderabbit.ai/vulnerability-disclosure/submit-vulnerability
- Disclosure policy: https://www.coderabbit.ai/vulnerability-disclosure
- Languages: en
- Valid until 2027-12-31

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api
