# Credo AI

Credo AI declares [6 subprocessors](https://thirdpartyindex.com/vendors/credo-ai#subprocessors) in [its subprocessor list](https://trust.credo.ai/subprocessors), which we last checked on 2026-11-12 ([evidence](https://thirdpartyindex.com/evidence/223842)). They include [Amazon Web Services](https://thirdpartyindex.com/vendors/amazon-web-services), [Microsoft](https://thirdpartyindex.com/vendors/microsoft) and [Anthropic](https://thirdpartyindex.com/vendors/anthropic). No published changes since we first read it on 2026-11-06.

Credo AI (credo.ai): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/credo-ai
- Documents last verified: 2026-11-12
- Transparency rating: 72/100 (how much it publishes, not how secure it is): Subprocessor list 30/30; Processing locations 8/8; Purposes 7/7; Data processing addendum 0/12 (not found); Trust center 8/8; Privacy policy 6/6; security.txt 0/6 (not found); Security page 0/5 (not found); Status page 0/5 (not found); Vulnerability disclosure 5/5; Pages still reachable 8/8
- Supply chain: relies on 6 tracked vendors directly, 62 within two hops, 248 within three; 0 tracked vendors rely on it directly, 0 within two hops, 0 within three
- Cite as: Credo AI, Third Party Index, https://thirdpartyindex.com/vendors/credo-ai (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Trust center | https://trust.credo.ai/ | 2026-11-11 | 2026-11-11 |
| Subprocessor list | https://trust.credo.ai/subprocessors | 2026-11-12 | 2026-11-06 |
| Privacy policy | https://www.credo.ai/legal/privacy-policy | 2026-11-12 | 2026-11-06 |
| Terms | https://www.credo.ai/legal/terms-conditions | 2026-11-12 | 2026-11-06 |
| Security advisories | https://www.credo.ai/legal/vulnerability-disclosure-policy | 2026-11-12 | 2026-11-06 |

## Subprocessors (6)

As its own list states them.

| Subprocessor | Purpose | Location | Listed since |
|---|---|---|---|
| [Amazon Web Services](https://thirdpartyindex.com/vendors/amazon-web-services.md) | Cloud infrastructure and data storage; Cloud infrastructure provider for SaaS platform hosting, compute, and data storage. | United States | 2026-11-06 |
| [Anthropic](https://thirdpartyindex.com/vendors/anthropic.md) (AI model provider: Anthropic) | AI model provider; Third-party LLM provider powering optional AI features within the Credo AI platform. | United States | 2026-11-06 |
| [FullStory](https://thirdpartyindex.com/vendors/fullstory.md) | Product analytics | United States | 2026-11-06 |
| [Heap](https://thirdpartyindex.com/vendors/heap.md) | Product analytics | United States | 2026-11-06 |
| [Microsoft Azure](https://thirdpartyindex.com/vendors/microsoft.md) | Cloud infrastructure and data storage; Cloud infrastructure provider for SaaS platform hosting, compute, and data storage (EU region). | Europe | 2026-11-06 |
| [Replicated](https://thirdpartyindex.com/vendors/replicated.md) | Application deployment; Deployment and distribution platform for self-hosted customer environments. | United States | 2026-11-06 |

Read from ([evidence](https://thirdpartyindex.com/evidence/223842)). CSV: https://thirdpartyindex.com/vendors/credo-ai/subprocessors.csv

AI model providers (or a cloud provider's AI model service) among these entries: 1. All vendors that list one: https://thirdpartyindex.com/ai

## Compliance

As its trust center lists them.

- Audited: SOC 2 Type II, TX-RAMP ([evidence](https://thirdpartyindex.com/evidence/225126))
- Claimed: GDPR ([evidence](https://thirdpartyindex.com/evidence/225126))

## Web Technologies

Credo AI's homepage made 83 requests to 19 domains, 7 services controlled by another company, and 2 domains not identified. Loaded on 2026-11-07 by a browser that accepted nothing; other visits may load more or less. What a page loads is not a list of who receives customer data.

7 third parties by category: Analytics 4 (HubSpot, Google Cloud, LinkedIn; usually detected as Analytics: G2.com); Cookie compliance 1 (Usercentrics); CDN 1 (jsDelivr); JavaScript libraries 1 (Webflow). Each company that appears controlled by another organization is counted once, under the main category of the technologies detected from it on this homepage or, when none was, the category recorded from the company's own page (marked reviewed) or else the one it is usually detected as on other published homepages (marked as such); unclassified: none of these.

### Third parties (7)

- Webflow: 36 requests to website-files.com, d3e54v103j8qbb.cloudfront.net; Webflow 1.6.0, jQuery 3.5.1
- Usercentrics: 16 requests to usercentrics.eu; Usercentrics
- HubSpot: 8 requests to hscollectedforms.net, hs-analytics.net, hs-banner.com, hs-scripts.com, hsadspixel.net, hubapi.com, hubspot.com; HubSpot, HubSpot Analytics
- Google Cloud: 5 requests to googletagmanager.com, google-analytics.com; Google Analytics, Google Tag Manager
- G2.com: 3 requests to g2.com
- LinkedIn: 3 requests to linkedin.com, licdn.com; Linkedin Insight Tag
- jsDelivr: 2 requests to jsdelivr.net; jsDelivr

### Unknown (2)

Domains not identified yet: s3.amazonaws.com, 7vhltc.csb.app

### First party (1)

- Credo AI: 6 requests to credo.ai; Cloudflare, GSAP 3.14.2, HSTS, HTTP/3, Open Graph, Swiper, Webflow Ecommerce, Webpack, core-js 3.19.0

7 tracked companies loaded by the homepage are not in Credo AI's subprocessor list. A website can use a service without it processing customer data.

## Subprocessor of (0)

No tracked vendor lists it.

## Incidents reported by Credo AI's subprocessors

Incidents reported in the last 30 days on their own status pages by 4 vendors Credo AI lists as subprocessors. A subprocessor list names a company, not the service an incident touched.

- 2026-11-10: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Credo AI lists as a subprocessor, reported Elevated errors on Fable 52 and Mythos 52 (no impact stated)
- 2026-11-08: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Credo AI lists as a subprocessor, reported Degraded performance for Claude Fable 5.1 (minor)
- 2026-11-08: [Heap](https://thirdpartyindex.com/vendors/heap#status), which Credo AI lists as a subprocessor, reported Temporary Data Latency (minor)
- 2026-11-05: [Heap](https://thirdpartyindex.com/vendors/heap#status), which Credo AI lists as a subprocessor, reported Temporary Data Latency (minor)
- 2026-11-04: [Fullstory](https://thirdpartyindex.com/vendors/fullstory#status), which Credo AI lists as a subprocessor, reported Delays in syncing to S3 data warehouses (EU1) (minor)
- 2026-11-04: [Heap](https://thirdpartyindex.com/vendors/heap#status), which Credo AI lists as a subprocessor, reported Delayed event-data availability in the US (no impact stated)
- 2026-11-03: [Fullstory](https://thirdpartyindex.com/vendors/fullstory#status), which Credo AI lists as a subprocessor, reported \[Resolved\] Delayed Session Data Availability (NA1 & EU1 Data Centers) (no impact stated)
- 2026-11-03: [Heap](https://thirdpartyindex.com/vendors/heap#status), which Credo AI lists as a subprocessor, reported Data latency for some US customers (no impact stated)
- 2026-10-28: [Replicated](https://thirdpartyindex.com/vendors/replicated#status), which Credo AI lists as a subprocessor, reported Vendor Portal unavailable (critical)
- 2026-10-28: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Credo AI lists as a subprocessor, reported Elevated errors affecting the Google Calendar connector (minor)
- 2026-10-28: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Credo AI lists as a subprocessor, reported Elevated errors affecting the Gmail connector (minor)
- 2026-10-27: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Credo AI lists as a subprocessor, reported Elevated errors for Claude Sonnet 5.5 (major)
- 2026-10-27: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Credo AI lists as a subprocessor, reported Elevated errors for Claude Sonnet 5.5 (major)
- 2026-10-26: [Replicated](https://thirdpartyindex.com/vendors/replicated#status), which Credo AI lists as a subprocessor, reported Recurrence of degraded access to Enterprise Portal V2 sites (minor)
- 2026-10-26: [Replicated](https://thirdpartyindex.com/vendors/replicated#status), which Credo AI lists as a subprocessor, reported Degraded access to Enterprise Portal V2 Sites (minor)
- 2026-10-25: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Credo AI lists as a subprocessor, reported Elevated errors for Claude Fable 5.1 (major)
- 2026-10-25: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Credo AI lists as a subprocessor, reported Elevated errors for Claude Sonnet 5.5 and other models (major)
- 2026-10-24: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Credo AI lists as a subprocessor, reported Elevated errors for Claude Fable 5 and Claude Fable 5.1 (major)
- 2026-10-24: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Credo AI lists as a subprocessor, reported Elevated errors for Claude Opus 5.5 (major)
- 2026-10-23: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Credo AI lists as a subprocessor, reported Elevated errors for Claude Fable 5.1, Sonnet 5.5, and Haiku 5.5 (critical)
- 2026-10-22: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Credo AI lists as a subprocessor, reported Elevated errors affecting Connectors (minor)
- 2026-10-21: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Credo AI lists as a subprocessor, reported Degraded performance for Claude Fable 5 (minor)
- 2026-10-14: [Heap](https://thirdpartyindex.com/vendors/heap#status), which Credo AI lists as a subprocessor, reported User property data delayed in Heap connect syncs (US customers only) (minor)

The subprocessor list as we read it on any date: https://thirdpartyindex.com/labs/time-machine/credo-ai

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api