Crisp
Transparency
Breakdown
| Subprocessor list | 30 / 30 | |
| Processing locations | 8 / 8 | |
| Purposes | 7 / 7 | |
| Data processing addendum | not found | 0 / 12 |
| Trust center | not found | 0 / 8 |
| Privacy policy | 6 / 6 | |
| security.txt | not found | 0 / 6 |
| Security page | 5 / 5 | |
| Status page | 5 / 5 | |
| Vulnerability disclosure | not found | 0 / 5 |
| Pages still reachable | 8 / 8 | |
| Total | 69 / 100 |
Only documents we can retrieve count: a page behind a login or a broken link scores nothing.
Badge
For Crisp's own site; it updates with the rating.
<a href="https://thirdpartyindex.com/vendors/crisp"><img src="https://thirdpartyindex.com/badge/crisp.svg" alt="Crisp transparency rating on Third Party Index" height="20"></a>[](https://thirdpartyindex.com/vendors/crisp)Documents
| Document | Verified | Changed | Evidence |
|---|---|---|---|
| Subprocessor list | snapshot | ||
| Privacy policy | snapshot | ||
| Terms | snapshot | ||
| Security page | snapshot | ||
| Status page | snapshot |
Subprocessors
| Name | Purpose | Location | Listed since |
|---|---|---|---|
| Amazon Web Services, Inc. | Encrypted backups storage; Hosting | Location of the Company: US; Location where Customer Data is held: EU (IE) | |
| Anthropic | AI-powered message processing (natural language understanding and response generation); API Provider; This processing is optional and performed only upon documented instruction and activation by the Customer. | Location of the Company: US; Location where Customer Data is held: Data is processed transiently for the sole purpose of generating responses and is not retained | |
| Cloudflare, Inc. | DNS, CDN & DDoS protection; Network | Location of the Company: US; Location where Customer Data is held: No data held | |
| DigitalOcean, LLC | Hosting; Main servers & data (i.e. Most data) | Location of the Company: US; Location where Customer Data is held: EU (NL + DE) | |
| Gemini | AI-powered message processing (natural language understanding and response generation); API Provider; This processing is optional and performed only upon documented instruction and activation by the Customer. | Location of the Company: US; Location where Customer Data is held: Data is processed transiently for the sole purpose of generating responses and is not retained | |
| Google LLC (Firebase Cloud Messaging) | API Provider; Push notifications delivery; This processing is optional and performed only when the Customer enables push notifications. | Location of the Company: US; Location where Customer Data is held: No data held | |
| Microsoft Corporation (Microsoft Azure) | API Provider; On-demand translation of messages and AI-powered message processing; This processing is optional and performed only when the Customer enables these features. | Location of the Company: US; Location where Customer Data is held: No data held | |
| Mistral | AI-powered message processing (natural language understanding and response generation); API Provider; This processing is optional and performed only upon documented instruction and activation by the Customer. | Location of the Company: EU; Location where Customer Data is held: Data is processed transiently for the sole purpose of generating responses and is not retained | |
| OpenAI | AI-powered message processing (natural language understanding and response generation); API Provider; This processing is optional and performed only upon documented instruction and activation by the Customer. | Location of the Company: US; Location where Customer Data is held: Data is processed transiently for the sole purpose of generating responses and is not retained | |
| PayPal (Europe) S.à r.l. & Cie, S.C.A. | Payment; Payment processing | Location of the Company: EU (LU); Location where Customer Data is held: No data held | |
| Scaleway | Hosting; Infrastructure hosting | Location of the Company: EU (FR); Location where Customer Data is held: EU (FR) | |
| Stripe Payments Europe, Ltd. | Credit-card processing; Payment | Location of the Company: EU (IE); Location where Customer Data is held: US | |
| Vultr Holdings Corporation | Email relay servers; Hosting | Location of the Company: US; Location where Customer Data is held: No data held |
Listed as a subprocessor by (2)
Purposes as each company states them.
Changes
None since tracking began.