# CoLab

CoLab declares [18 subprocessors](https://thirdpartyindex.com/vendors/colab#subprocessors) in [its subprocessor list](https://trust.colabsoftware.com/subprocessors), which we last checked on 2026-11-11 ([evidence](https://thirdpartyindex.com/evidence/53839)). They include [Amazon Web Services](https://thirdpartyindex.com/vendors/amazon-web-services), [Google Cloud](https://thirdpartyindex.com/vendors/google-cloud) and [OpenAI](https://thirdpartyindex.com/vendors/openai). No published changes since we first read it on 2026-09-22.

CoLab (colabsoftware.com): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/colab
- Documents last verified: 2026-11-11
- Transparency rating: 72/100 (how much it publishes, not how secure it is): Subprocessor list 30/30; Processing locations 8/8; Purposes 7/7; Data processing addendum 0/12 (not found); Trust center 8/8; Privacy policy 6/6; security.txt 0/6 (not found); Security page 5/5; Status page 0/5 (not found); Vulnerability disclosure 0/5 (not found); Pages still reachable 8/8
- Supply chain: relies on 18 tracked vendors directly, 143 within two hops, 396 within three; 0 tracked vendors rely on it directly, 0 within two hops, 0 within three
- Cite as: CoLab, Third Party Index, https://thirdpartyindex.com/vendors/colab (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Trust center | https://trust.colabsoftware.com/ | 2026-11-11 | 2026-11-11 |
| Subprocessor list | https://trust.colabsoftware.com/subprocessors | 2026-11-11 | 2026-10-06 |
| Privacy policy | https://www.colabsoftware.com/privacy-policy | 2026-11-11 | 2026-09-22 |
| Terms | https://www.colabsoftware.com/terms-and-conditions | 2026-11-11 | 2026-10-28 |
| Security page | https://www.colabsoftware.com/security | 2026-11-11 | 2026-09-22 |

## Subprocessors (18)

As its own list states them.

| Subprocessor | Purpose | Location | Listed since |
|---|---|---|---|
| [Amazon Web Services](https://thirdpartyindex.com/vendors/amazon-web-services.md) | Large Language Model (LLM) and Hosting Provider; Large Language Model (LLM) and primary hosting provider for the CoLab application, file data and other services. | Canada and US | 2026-09-28 |
| [Anthropic](https://thirdpartyindex.com/vendors/anthropic.md) (AI model provider: Anthropic) | Large Language Model (LLM) Provider; Large Language Model (LLM) provider for AI Features and other API services used to process customer data. | Global | 2026-09-22 |
| [Auth0](https://thirdpartyindex.com/vendors/okta.md) | Customer identity provider for user management and SSO in the CoLab application.; Identity Management Platform | US | 2026-09-22 |
| [Cloudflare](https://thirdpartyindex.com/vendors/cloudflare.md) | Global Network Service Provider; Used for network security and content delivery network (CDN) service for the CoLab application. | US | 2026-09-28 |
| [Datadog](https://thirdpartyindex.com/vendors/datadog.md) | Monitoring and Analytics Platform; Provides security and performance monitoring for the CoLab environment. | US | 2026-09-28 |
| [Google Cloud](https://thirdpartyindex.com/vendors/google-cloud.md) | Large Language Model (LLM) Provider; Large Language Model (LLM) provider and other API services used to process customer data. | Global | 2026-09-22 |
| [HubSpot](https://thirdpartyindex.com/vendors/hubspot.md) | Customer Relationship Management; Used for inbound sales and marketing. | US | 2026-09-28 |
| [Intercom](https://thirdpartyindex.com/vendors/intercom.md) | Customer Service Platform; Used to automate product tours during customer onboarding. | US | 2026-09-22 |
| [LaunchDarkly](https://thirdpartyindex.com/vendors/launchdarkly.md) | Feature Flag Management; Provides feature flag functionality within the CoLab application. | US | 2026-09-28 |
| [Microsoft Azure](https://thirdpartyindex.com/vendors/microsoft.md) | Large Language Model (LLM) Provider; Large Language Model (LLM) provider and other API services used to process customer data. | Canada and US | 2026-09-28 |
| [Mixpanel](https://thirdpartyindex.com/vendors/mixpanel.md) | Product Analytics; Used to track and analyze user interactions with the CoLab application. | US | 2026-09-22 |
| [OpenAI](https://thirdpartyindex.com/vendors/openai.md) (AI model provider: OpenAI) | Large Language Model (LLM) Provider; Large Language Model (LLM) provider and other API services used to process customer data. | Global | 2026-09-28 |
| [Paragon](https://thirdpartyindex.com/vendors/forge-technology-inc-aka-paragon.md) | Integration Platform As A Service; Used to facilitate the integration of products with third-party applications and data sources. | US | 2026-09-22 |
| [Pendo](https://thirdpartyindex.com/vendors/pendo.md) | Delivers customer notifications within the CoLab application.; Product Experience Platform | US | 2026-09-22 |
| [Retool](https://thirdpartyindex.com/vendors/retool.md) | Software Development Platform; Used for the development of internal tools and applications for reporting and customer support. | US | 2026-09-22 |
| [Salesforce](https://thirdpartyindex.com/vendors/salesforce.md) | Customer Relationship Management; Used to manage customer and sales information. | US | 2026-09-28 |
| [TurboPuffer](https://thirdpartyindex.com/vendors/turbopuffer.md) | Serverless Vector and Full Text Search Database; Used for vector and full text search in the CoLab application. | Canada | 2026-09-22 |
| [WorkOS](https://thirdpartyindex.com/vendors/workos.md) | Customer identity provider for user management and SSO in the CoLab application.; Engineering | US | 2026-09-22 |

Read from ([evidence](https://thirdpartyindex.com/evidence/13233)). CSV: https://thirdpartyindex.com/vendors/colab/subprocessors.csv

AI model providers (or a cloud provider's AI model service) among these entries: 2. All vendors that list one: https://thirdpartyindex.com/ai

## Compliance

As its trust center lists them.

- Audited: SOC 2 Type II, ISO/IEC 27001, ISO/IEC 27017, ISO/IEC 27018, ISO/IEC 42001 ([evidence](https://thirdpartyindex.com/evidence/13935))
- FedRAMP Marketplace: High · 1 agency authorization · since Jun 3, 2026

## Web Technologies

CoLab's homepage made 181 requests to 29 domains, 11 services controlled by another company, and 1 domain not identified. Loaded on 2026-11-09 by a browser that accepted nothing; other visits may load more or less. What a page loads is not a list of who receives customer data.

11 third parties by category: Analytics 4 (HubSpot, LinkedIn, Meta, ZoomInfo); Advertising 2 (Google Cloud; usually detected as Advertising: Microsoft); A/B Testing 1 (Webflow); CDN 1 (jsDelivr); Appointment scheduling 1 (Chili Piper); Miscellaneous 1 (Slater); Unclassified 1 (Perspective Design). Each company that appears controlled by another organization is counted once, under the main category of the technologies detected from it on this homepage or, when none was, the category recorded from the company's own page (marked reviewed) or else the one it is usually detected as on other published homepages (marked as such); unclassified: none of these.

### Third parties (11)

- Webflow: 115 requests to website-files.com, intellimize.co, d3e54v103j8qbb.cloudfront.net; Intellimize, Webflow 1.6.0, jQuery 3.5.1
- Google Cloud: 19 requests to google.com, doubleclick.net, googletagmanager.com, ajax.googleapis.com, fonts.googleapis.com, google-analytics.com, gstatic.com; DoubleClick Floodlight, Google Analytics, Google Font API, Google Hosted Libraries, Google Tag Manager (its subprocessor list names it too)
- HubSpot: 16 requests to hsforms.com, hubspot.com, hs-banner.com, hs-analytics.net, hs-scripts.com, hsforms.net, hubspotusercontent-na1.net; HubSpot, HubSpot Analytics (its subprocessor list names it too)
- Microsoft: 8 requests to clarity.ms (its subprocessor list names it too)
- Slater: 5 requests to slater.app; Slater
- jsDelivr: 4 requests to jsdelivr.net; jsDelivr
- LinkedIn: 3 requests to linkedin.com, licdn.com; Linkedin Insight Tag
- Meta: 3 requests to facebook.net, facebook.com; Facebook Pixel 2.9.438
- ZoomInfo: 2 requests to zoominfo.com; Zoominfo
- Chili Piper: 1 request to chilipiper.com; Chili Piper
- Perspective Design: 1 request to perspective.design

### Unknown (1)

Domains not identified yet: hubspotonwebflow.com

### First party (1)

- CoLab: 2 requests to colabsoftware.com; Cloudflare, GSAP 3.15.0, HTTP/3, HubSpot Cookie Policy Banner, LottieFiles, Microsoft Clarity, Open Graph, Priority Hints, Sentry, Splide, Webpack, core-js 3.32.2

6 tracked companies loaded by the homepage are not in CoLab's subprocessor list. A website can use a service without it processing customer data.

## Subprocessor of (0)

No tracked vendor lists it.

## Incidents reported by CoLab's subprocessors

Incidents reported in the last 30 days on their own status pages by 12 vendors CoLab lists as subprocessors. A subprocessor list names a company, not the service an incident touched.

- 2026-11-11: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which CoLab lists as a subprocessor, reported Unable to start new Workspace Agent runs (critical)
- 2026-11-11: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which CoLab lists as a subprocessor, reported Elevated errors affecting logins, sign-ups, and ChatGPT features (minor)
- 2026-11-11: [turbopuffer](https://thirdpartyindex.com/vendors/turbopuffer#status), which CoLab lists as a subprocessor, reported Dashboard Outage (critical)
- 2026-11-10: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which CoLab lists as a subprocessor, reported Elevated errors on Fable 52 and Mythos 52 (no impact stated)
- 2026-11-10: [HubSpot](https://thirdpartyindex.com/vendors/hubspot#status), which CoLab lists as a subprocessor, reported Some HubSpot tools may be unavailable for some users (no impact stated)
- 2026-11-10: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which CoLab lists as a subprocessor, reported Incorrect cost data in Costs API exports (no impact stated)
- 2026-11-09: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which CoLab lists as a subprocessor, reported Elevated Errors On API (minor)
- 2026-11-09: [Retool](https://thirdpartyindex.com/vendors/retool#status), which CoLab lists as a subprocessor, reported Some antivirus products are blocking retool.app (major)
- 2026-11-09: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which CoLab lists as a subprocessor, reported Elevated ChatGPT Conversation Errors (minor)
- 2026-11-09: [LaunchDarkly](https://thirdpartyindex.com/vendors/launchdarkly#status), which CoLab lists as a subprocessor, reported Email notifications are not being delivered (minor)
- 2026-11-08: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which CoLab lists as a subprocessor, reported Elevated errors with image generation (minor)
- 2026-11-08: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which CoLab lists as a subprocessor, reported Degraded performance for Claude Fable 5.1 (minor)
- 2026-11-07: [WorkOS](https://thirdpartyindex.com/vendors/workos#status), which CoLab lists as a subprocessor, reported Intermittent 503 errors in certain regions (minor)
- 2026-11-06: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which CoLab lists as a subprocessor, reported Elevated error rates with some U.S. business Mastercards (no impact stated)
- 2026-11-06: [Intercom](https://thirdpartyindex.com/vendors/intercom#status), which CoLab lists as a subprocessor, reported Elevated errors and latencies in the European hosting region. (major)
- 2026-11-05: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which CoLab lists as a subprocessor, reported ChatGPT Work and Dots Errors (minor)
- 2026-11-05: [Mixpanel](https://thirdpartyindex.com/vendors/mixpanel#status), which CoLab lists as a subprocessor, reported Duplicate charges on a subset of customer accounts (no impact stated)
- 2026-11-04: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which CoLab lists as a subprocessor, reported Elevated error rates across paid ChatGPT plans (minor)
- 2026-11-04: [Pendo](https://thirdpartyindex.com/vendors/pendo#status), which CoLab lists as a subprocessor, reported Degradation of Account and Visitor Reports (critical)
- 2026-11-03: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which CoLab lists as a subprocessor, reported File upload errors in ChatGPT (minor)
- 2026-11-02: [HubSpot](https://thirdpartyindex.com/vendors/hubspot#status), which CoLab lists as a subprocessor, reported HubSpot is experiencing issues (no impact stated)
- 2026-10-30: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which CoLab lists as a subprocessor, reported Elevated errors with search in Dots, ChatGPT Work, and certain ChatGPT thinking experiences (minor)
- 2026-10-30: [Intercom](https://thirdpartyindex.com/vendors/intercom#status), which CoLab lists as a subprocessor, reported Slow Fin Procedures (minor)
- 2026-10-30: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which CoLab lists as a subprocessor, reported Elevated errors for GPT Image 2 API image edits (minor)
- 2026-10-29: [Paragon](https://thirdpartyindex.com/vendors/forge-technology-inc-aka-paragon#status), which CoLab lists as a subprocessor, reported Degraded Performance - Cloudflare Endpoint Latency (minor)
- 2026-10-29: [WorkOS](https://thirdpartyindex.com/vendors/workos#status), which CoLab lists as a subprocessor, reported SSO Profile API Timeouts (major)
- 2026-10-29: [Paragon](https://thirdpartyindex.com/vendors/forge-technology-inc-aka-paragon#status), which CoLab lists as a subprocessor, reported Paragon Dashboard Errors (major)
- 2026-10-28: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which CoLab lists as a subprocessor, reported Elevated errors affecting the Google Calendar connector (minor)
- 2026-10-28: [Datadog](https://thirdpartyindex.com/vendors/datadog#status), which CoLab lists as a subprocessor, reported Metrics query are disrupted (major)
- 2026-10-28: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which CoLab lists as a subprocessor, reported Elevated errors affecting the Gmail connector (minor)
- 2026-10-27: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which CoLab lists as a subprocessor, reported Elevated errors for Claude Sonnet 5.5 (major)
- 2026-10-27: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which CoLab lists as a subprocessor, reported 6.1 Sol Degraded Model Performance (minor)
- 2026-10-27: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which CoLab lists as a subprocessor, reported Elevated errors for Claude Sonnet 5.5 (major)
- 2026-10-27: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which CoLab lists as a subprocessor, reported Elevated error rates for most hosted Code Reviews and Security Reviews on private GitHub repositories (no impact stated)
- 2026-10-26: [LaunchDarkly](https://thirdpartyindex.com/vendors/launchdarkly#status), which CoLab lists as a subprocessor, reported delayed event processing (minor)
- 2026-10-26: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which CoLab lists as a subprocessor, reported Elevated error rates for Ads POST requests (minor)
- 2026-10-26: [Datadog](https://thirdpartyindex.com/vendors/datadog#status), which CoLab lists as a subprocessor, reported Elevated Error Rates for Workflow Automation, App Builder, Bits Code, Bits Agent Builder (major)
- 2026-10-25: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which CoLab lists as a subprocessor, reported Elevated errors for Claude Fable 5.1 (major)
- 2026-10-25: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which CoLab lists as a subprocessor, reported Elevated errors for Claude Sonnet 5.5 and other models (major)
- 2026-10-24: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which CoLab lists as a subprocessor, reported Elevated errors for Claude Fable 5 and Claude Fable 5.1 (major)
- 2026-10-24: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which CoLab lists as a subprocessor, reported Elevated errors for Claude Opus 5.5 (major)
- 2026-10-23: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which CoLab lists as a subprocessor, reported Elevated errors for Claude Fable 5.1, Sonnet 5.5, and Haiku 5.5 (critical)
- 2026-10-23: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which CoLab lists as a subprocessor, reported Degraded experience with ChatGPT app connections using CIMD (minor)
- 2026-10-23: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which CoLab lists as a subprocessor, reported Help Center Chat Support Degraded (no impact stated)
- 2026-10-23: [Paragon](https://thirdpartyindex.com/vendors/forge-technology-inc-aka-paragon#status), which CoLab lists as a subprocessor, reported US Cloud: Degraded Service (Cloudflare Incident) - Recurrence (minor)
- 2026-10-23: [Paragon](https://thirdpartyindex.com/vendors/forge-technology-inc-aka-paragon#status), which CoLab lists as a subprocessor, reported US Cloud: Degraded Service (Cloudflare Incident) (major)
- 2026-10-23: [HubSpot](https://thirdpartyindex.com/vendors/hubspot#status), which CoLab lists as a subprocessor, reported Some HubSpot tools may be unavailable for some users (no impact stated)
- 2026-10-23: [WorkOS](https://thirdpartyindex.com/vendors/workos#status), which CoLab lists as a subprocessor, reported Elevated errors across SSO and AuthKit (major)
- 2026-10-23: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which CoLab lists as a subprocessor, reported Delays in customer support responses (no impact stated)
- 2026-10-22: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which CoLab lists as a subprocessor, reported New Ad Accounts failing to provision admins (minor)
- 2026-10-22: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which CoLab lists as a subprocessor, reported Degraded Performance of Dots on Enterprise (minor)
- 2026-10-22: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which CoLab lists as a subprocessor, reported Elevated errors affecting Connectors (minor)
- 2026-10-22: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which CoLab lists as a subprocessor, reported Elevated ChatGPT conversation and Responses API errors (minor)
- 2026-10-22: [HubSpot](https://thirdpartyindex.com/vendors/hubspot#status), which CoLab lists as a subprocessor, reported Update on PHP security vulnerability (no impact stated)
- 2026-10-21: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which CoLab lists as a subprocessor, reported Authentication errors for some users (major)
- 2026-10-21: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which CoLab lists as a subprocessor, reported Degraded performance for Claude Fable 5 (minor)
- 2026-10-21: [Mixpanel](https://thirdpartyindex.com/vendors/mixpanel#status), which CoLab lists as a subprocessor, reported Degraded Service for Requests to decide.mixpanel.com (no impact stated)
- 2026-10-21: [Mixpanel](https://thirdpartyindex.com/vendors/mixpanel#status), which CoLab lists as a subprocessor, reported Degraded Service for Requests to decide.mixpanel.com (no impact stated)
- 2026-10-21: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which CoLab lists as a subprocessor, reported Elevated error rates for gpt-5.6-luna API requests (minor)
- 2026-10-21: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which CoLab lists as a subprocessor, reported Elevated FedRAMP API error rates for Astra and Sol (minor)
- 2026-10-21: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which CoLab lists as a subprocessor, reported Degraded performance in ChatGPT, Codex, and APIs (minor)
- 2026-10-19: [WorkOS](https://thirdpartyindex.com/vendors/workos#status), which CoLab lists as a subprocessor, reported Elevated AuthKit Error Rates (major)
- 2026-10-19: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which CoLab lists as a subprocessor, reported File Download errors (minor)
- 2026-10-15: [WorkOS](https://thirdpartyindex.com/vendors/workos#status), which CoLab lists as a subprocessor, reported Radar SMS challenge failures for phone numbers in mainland China (+86) (major)
- 2026-10-15: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which CoLab lists as a subprocessor, reported Widespread feature degradation (major)
- 2026-10-15: [LaunchDarkly](https://thirdpartyindex.com/vendors/launchdarkly#status), which CoLab lists as a subprocessor, reported Elevated 5xx Errors (15:11–15:32 UTC) (minor)
- 2026-10-14: [Intercom](https://thirdpartyindex.com/vendors/intercom#status), which CoLab lists as a subprocessor, reported Customer contact details showing up as "Redacted" in the Intercom Inbox (minor)
- 2026-10-14: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which CoLab lists as a subprocessor, reported Delayed Costs data in the Compliance API (minor)
- 2026-10-14: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which CoLab lists as a subprocessor, reported Limited availability on gpt-image-2.5-flare and gpt-image-2.5-sunburst (minor)
- 2026-10-14: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which CoLab lists as a subprocessor, reported Degraded performance in Codex and ChatGPT Work (minor)
- 2026-10-13: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which CoLab lists as a subprocessor, reported Degraded performance in GPT-6.1 Sol Codex and Work mode (minor)

## Recent changes

Changes to its documents and subprocessor list since monitoring began.

- 2026-11-09: Added certification: ISO/IEC 42001 ([evidence](https://thirdpartyindex.com/evidence/245275))

Feed: https://thirdpartyindex.com/vendors/colab/changes.atom

The subprocessor list as we read it on any date: https://thirdpartyindex.com/labs/time-machine/colab

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api
