# Confirm

Confirm (confirm.com): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/confirm
- Documents last verified: 2026-10-04
- Transparency rating: 65/100 (how much it publishes, not how secure it is): Subprocessor list 30/30; Processing locations 8/8; Purposes 0/7 (partial); Data processing addendum 0/12 (not found); Trust center 8/8; Privacy policy 6/6; security.txt 0/6 (not found); Security page 5/5; Status page 0/5 (not found); Vulnerability disclosure 0/5 (not found); Pages still reachable 8/8
- Supply chain: relies on 34 tracked vendors directly, 200 within two hops, 461 within three; 0 tracked vendors rely on it directly, 0 within two hops, 0 within three
- Cite as: Confirm, Third Party Index, https://thirdpartyindex.com/vendors/confirm (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Trust center | https://trust.confirm.com/ | 2026-10-04 | 2026-10-04 |
| Subprocessor list | https://www.confirm.com/policies/sub-processors | 2026-10-04 | 2026-10-04 |
| Privacy policy | https://www.confirm.com/policies/privacy-policy | 2026-10-04 | 2026-10-04 |
| Security page | https://www.confirm.com/policies/security | 2026-10-04 | 2026-10-04 |

## Subprocessors (39)

As its own list states them.

| Subprocessor | Purpose | Location | Listed since |
|---|---|---|---|
| [Algolia](https://thirdpartyindex.com/vendors/algolia.md) | — | USA | 2026-10-04 |
| [Anthropic](https://thirdpartyindex.com/vendors/anthropic.md) (AI model provider: Anthropic) | — | EU (Germany) | 2026-10-04 |
| [AWS](https://thirdpartyindex.com/vendors/amazon-web-services.md) | — | Multiple regions, depending on product | 2026-10-04 |
| [BambooHR](https://thirdpartyindex.com/vendors/bamboohr.md) | — | USA | 2026-10-04 |
| [Box](https://thirdpartyindex.com/vendors/box.md) | — | USA | 2026-10-04 |
| CameraTag | — | Multiple regions depending on stream location: USA, Asia Pacific, South America, and Europe | 2026-10-04 |
| Cape Ann Enterprises | — | Bosnia | 2026-10-04 |
| [Datadog](https://thirdpartyindex.com/vendors/datadog.md) | — | USA | 2026-10-04 |
| [DeepL](https://thirdpartyindex.com/vendors/deepl.md) | — | EU (Germany) | 2026-10-04 |
| [ElevenLabs](https://thirdpartyindex.com/vendors/elevenlabs.md) (AI model provider: ElevenLabs) | — | USA | 2026-10-04 |
| [GitHub](https://thirdpartyindex.com/vendors/github.md) | — | USA | 2026-10-04 |
| [GitLab](https://thirdpartyindex.com/vendors/gitlab.md) | — | USA | 2026-10-04 |
| [Glean](https://thirdpartyindex.com/vendors/glean.md) | — | USA | 2026-10-04 |
| [Go1](https://thirdpartyindex.com/vendors/go1.md) | — | USA | 2026-10-04 |
| [Google Workspace](https://thirdpartyindex.com/vendors/google-cloud.md) (AI model provider: Google Vertex AI / Gemini) | — | UK, Ireland, Europe, USA | 2026-10-04 |
| [HubSpot](https://thirdpartyindex.com/vendors/hubspot.md) | — | USA | 2026-10-04 |
| [Intercom](https://thirdpartyindex.com/vendors/intercom.md) | — | USA, EEA, and UK | 2026-10-04 |
| [LaunchDarkly](https://thirdpartyindex.com/vendors/launchdarkly.md) | — | USA | 2026-10-04 |
| [Mailgun](https://thirdpartyindex.com/vendors/mailgun.md) | — | USA | 2026-10-04 |
| [Mandrill](https://thirdpartyindex.com/vendors/mailchimp.md) | — | USA | 2026-10-04 |
| [Merge.dev](https://thirdpartyindex.com/vendors/merge-api.md) | — | USA, EU (Berlin) | 2026-10-04 |
| [Microsoft Azure](https://thirdpartyindex.com/vendors/microsoft.md) | — | Multiple regions, depending on product | 2026-10-04 |
| [Mixpanel](https://thirdpartyindex.com/vendors/mixpanel.md) | — | USA | 2026-10-04 |
| [MongoDB Atlas](https://thirdpartyindex.com/vendors/mongodb.md) | — | Multiple regions, depending on product | 2026-10-04 |
| Nikalogic (Onix) | — | Ukraine | 2026-10-04 |
| [Omni](https://thirdpartyindex.com/vendors/omni.md) | — | USA | 2026-10-04 |
| [OpenAI](https://thirdpartyindex.com/vendors/openai.md) (AI model provider: OpenAI) | — | Worldwide | 2026-10-04 |
| [Pendo](https://thirdpartyindex.com/vendors/pendo.md) | — | USA | 2026-10-04 |
| [Prequel](https://thirdpartyindex.com/vendors/prequel.md) | — | USA | 2026-10-04 |
| Rustici Software | — | USA | 2026-10-04 |
| [Salesforce](https://thirdpartyindex.com/vendors/salesforce.md) | — | EU | 2026-10-04 |
| [Segment](https://thirdpartyindex.com/vendors/segment.md) | — | USA | 2026-10-04 |
| [SendGrid](https://thirdpartyindex.com/vendors/sendgrid.md) | — | USA | 2026-10-04 |
| [Sisense](https://thirdpartyindex.com/vendors/sisense.md) | — | USA, EU | 2026-10-04 |
| [Slack](https://thirdpartyindex.com/vendors/slack.md) | — | USA, EU | 2026-10-04 |
| [Stripe](https://thirdpartyindex.com/vendors/stripe.md) | — | USA | 2026-10-04 |
| [Twilio](https://thirdpartyindex.com/vendors/twilio.md) | — | USA | 2026-10-04 |
| Ziggeo | — | USA | 2026-10-04 |
| [Zoom](https://thirdpartyindex.com/vendors/zoom.md) | — | USA | 2026-10-04 |

Read from ([evidence](https://thirdpartyindex.com/evidence/43846)). CSV: https://thirdpartyindex.com/vendors/confirm/subprocessors.csv

AI model providers (or a cloud provider's AI model service) among these entries: 4. All vendors that list one: https://thirdpartyindex.com/ai

## Compliance

As its trust center lists them.

- Audited: SOC 2, ISO/IEC 27001 ([evidence](https://thirdpartyindex.com/evidence/43844))
- Claimed: GDPR, CCPA/CPRA ([evidence](https://thirdpartyindex.com/evidence/43844))

## Subprocessor of (0)

No tracked vendor lists it.

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api