# Cypress

Cypress (cypress.io): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/cypress
- Documents last verified: 2026-09-30
- Transparency rating: 70/100 (how much it publishes, not how secure it is)
- Cite as: Cypress, Third Party Index, https://thirdpartyindex.com/vendors/cypress (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Trust center | https://trust.cypress.io/ | 2026-09-30 | 2026-09-30 |
| Subprocessor list | https://www.cypress.io/subprocessors | 2026-09-30 | 2026-09-30 |
| Privacy policy | https://www.cypress.io/privacy-policy | 2026-09-30 | 2026-09-30 |
| Terms | https://www.cypress.io/terms-of-use | 2026-09-30 | 2026-09-30 |
| Security page | https://www.cypress.io/security | 2026-09-30 | 2026-09-30 |
| Status page | https://www.cypressstatus.com/ | 2026-09-30 | 2026-09-30 |

## Subprocessors (10)

As its own list states them.

| Subprocessor | Purpose | Location | Listed since |
|---|---|---|---|
| Castor | — | U.S. | 2026-09-30 |
| [Clearbit](https://thirdpartyindex.com/vendors/clearbit.md) | — | U.S. | 2026-09-30 |
| dbt | — | U.S. | 2026-09-30 |
| [FullStory](https://thirdpartyindex.com/vendors/fullstory.md) | — | U.S. | 2026-09-30 |
| [Hex](https://thirdpartyindex.com/vendors/hex.md) | — | U.S. | 2026-09-30 |
| [Hightouch](https://thirdpartyindex.com/vendors/hightouch.md) | — | U.S. | 2026-09-30 |
| [Hubspot](https://thirdpartyindex.com/vendors/hubspot.md) | — | U.S. | 2026-09-30 |
| [Metabase](https://thirdpartyindex.com/vendors/metabase.md) | — | U.S. | 2026-09-30 |
| [Snowflake](https://thirdpartyindex.com/vendors/snowflake.md) | — | U.S. | 2026-09-30 |
| StitchData | — | U.S. | 2026-09-30 |

Read from ([evidence](https://thirdpartyindex.com/evidence/21897)). CSV: https://thirdpartyindex.com/vendors/cypress/subprocessors.csv

## Compliance

As its trust center lists them.

- Audited: SOC 2 Type II ([evidence](https://thirdpartyindex.com/evidence/21893))
- Claimed: GDPR, CCPA/CPRA ([evidence](https://thirdpartyindex.com/evidence/21893))

## Listed as a subprocessor by (0)

No tracked vendor lists it.

## Service status

Incidents it reported on its own status page.

- Last 90 days: 6 reported incidents (5 major or critical, 0 minor, 1 with no impact stated)
- Typical time to resolve: 1 h 15 min
- 2026-08-17: Github Outage (major)
- 2026-08-13: Enterprise Reporting degradation (major)
- 2026-08-06: Enterprise Reporting Data Extract API experiencing issues (major)
- 2026-08-05: Cypress Cloud incident (no impact stated)
- 2026-07-17: Cypress Cloud incident (major)
- 2026-07-16: Cypress Cloud incident (critical)
- 2026-06-29: Test Replay rendering errors (minor)
- 2026-06-25: Performance Degradation (minor)

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api