# Databox

Databox (databox.com): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/databox
- Documents last verified: 2026-09-30
- Transparency rating: 84/100 (how much it publishes, not how secure it is)
- Cite as: Databox, Third Party Index, https://thirdpartyindex.com/vendors/databox (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Trust center | https://trust.databox.com/ | 2026-09-30 | 2026-09-30 |
| Subprocessor list | https://trust.databox.com/?itemUid=e3fae2ca-94a9-416b-b577-5c90e382df57 | 2026-09-30 | 2026-09-30 |
| Data processing addendum | https://databox.com/data-processing-agreement | 2026-09-30 | 2026-09-30 |
| Privacy policy | https://databox.com/privacy-policy | 2026-09-30 | 2026-09-30 |
| Terms | https://databox.com/terms-of-service | 2026-09-30 | 2026-09-30 |
| Status page | https://status.databox.com/ | 2026-09-30 | 2026-09-30 |

## Subprocessors (16)

As its own list states them.

| Subprocessor | Purpose | Location | Listed since |
|---|---|---|---|
| [Anthropic](https://thirdpartyindex.com/vendors/anthropic.md) | Provides large language model processing via APIs for customers using Databox's AI Products. | US | 2026-09-30 |
| [Asana](https://thirdpartyindex.com/vendors/asana.md) | Project and task management platform, user ticket handling. | US | 2026-09-30 |
| [Bird](https://thirdpartyindex.com/vendors/bird.md) | Pusher by Bird is a real-time messaging platform used to deliver real-time events and updates to application users. | US | 2026-09-30 |
| [FusionAuth](https://thirdpartyindex.com/vendors/fusionauth.md) | Identity and access management platform used to authenticate users and manage customer identities using OAuth and OpenID Connect. | US | 2026-09-30 |
| [HubSpot](https://thirdpartyindex.com/vendors/hubspot.md) | CRM and marketing automation platform used to manage leads, customer contacts, and sales communications. | US | 2026-09-30 |
| [Intercom](https://thirdpartyindex.com/vendors/intercom.md) | Customer support and user ticket management platform used to communicate with users and manage support requests. | US | 2026-09-30 |
| [LangChain](https://thirdpartyindex.com/vendors/langchain.md) | Platform for tracing, debugging, evaluation, testing, and monitoring LLM/agent apps. | US | 2026-09-30 |
| [LiveSession](https://thirdpartyindex.com/vendors/livesession.md) | User experience analytics platform used to record and analyse user sessions to improve product usability. | EU | 2026-09-30 |
| [Mixpanel](https://thirdpartyindex.com/vendors/mixpanel.md) | Product analytics platform used to track and analyze user interactions with the application. | US | 2026-09-30 |
| n8n.io | Internal process automation. | EU | 2026-09-30 |
| [OpenAI](https://thirdpartyindex.com/vendors/openai.md) | AI platform used to power conversational agents and automated responses using large language models. | US | 2026-09-30 |
| [Segment](https://thirdpartyindex.com/vendors/segment.md) | Customer data platform used to collect, process, and route application event data to analytics and customer engagement tools. | US | 2026-09-30 |
| [SendGrid](https://thirdpartyindex.com/vendors/sendgrid.md) | An email delivery platform | EU | 2026-09-30 |
| [Stripe](https://thirdpartyindex.com/vendors/stripe.md) | Payment processing platform used to handle customer payments, billing, and subscription management. | US | 2026-09-30 |
| [SurveyMonkey](https://thirdpartyindex.com/vendors/surveymonkey.md) | Online survey platform used to collect feedback from customers and internal users. | US | 2026-09-30 |
| [Twilio](https://thirdpartyindex.com/vendors/twilio.md) | Cloud communications platform used to send transactional SMS messages to users, including notifications and verification codes. | US | 2026-09-30 |

Read from ([evidence](https://thirdpartyindex.com/evidence/21908)). CSV: https://thirdpartyindex.com/vendors/databox/subprocessors.csv

## Compliance

As its trust center lists them.

- Audited: SOC 2 Type I ([evidence](https://thirdpartyindex.com/evidence/21905))
- Claimed: GDPR ([evidence](https://thirdpartyindex.com/evidence/21905))

## Listed as a subprocessor by (0)

No tracked vendor lists it.

## Service status

Incidents it reported on its own status page.

- Last 90 days: 2 reported incidents (1 major or critical, 0 minor, 1 with no impact stated)
- Typical time to resolve: 3 days
- 2026-08-16: GitHub integration temporarily unavailable (no impact stated)
- 2026-07-16: Issue with loading the Databox App (critical)
- 2026-06-22: Scorecard delivery delays (no impact stated)
- 2026-05-15: Issues with accessing Databox app (no impact stated)

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api