# dbt Labs

dbt Labs declares [3 subprocessors](https://thirdpartyindex.com/vendors/dbt-labs#subprocessors) in [its subprocessor list](https://trust.getdbt.com/), which we last checked on 2026-11-11 ([evidence](https://thirdpartyindex.com/evidence/256598)). They are [Amazon Web Services](https://thirdpartyindex.com/vendors/amazon-web-services), [Google Cloud](https://thirdpartyindex.com/vendors/google-cloud) and [Microsoft](https://thirdpartyindex.com/vendors/microsoft). No published changes since we first read it on 2026-09-22. [56 tracked vendors](https://thirdpartyindex.com/vendors/dbt-labs#used-by) name dbt Labs as a subprocessor, including [Fivetran](https://thirdpartyindex.com/vendors/fivetran), [WorkOS](https://thirdpartyindex.com/vendors/workos) and [Pylon](https://thirdpartyindex.com/vendors/pylon).

dbt Labs (getdbt.com): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/dbt-labs
- Documents last verified: 2026-11-11
- Category: data
- Transparency rating: 88/100 (how much it publishes, not how secure it is): Subprocessor list 30/30; Processing locations 8/8; Purposes 7/7; Data processing addendum 12/12; Trust center 8/8; Privacy policy 0/6 (not found); security.txt 0/6 (not found); Security page 5/5; Status page 5/5; Vulnerability disclosure 5/5; Pages still reachable 8/8
- Supply chain: relies on 3 tracked vendors directly, 36 within two hops, 146 within three; 56 tracked vendors rely on it directly, 676 within two hops, 2415 within three
- Cite as: dbt Labs, Third Party Index, https://thirdpartyindex.com/vendors/dbt-labs (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Subprocessor list | https://trust.getdbt.com/ | 2026-11-11 | 2026-11-11 |
| Data processing addendum | https://www.getdbt.com/assets/docs/cloud/dataprocessingaddendum.pdf | 2026-11-11 | 2026-10-19 |
| Terms | https://www.getdbt.com/terms-of-use | 2026-11-11 | 2026-10-19 |
| Security page | https://www.getdbt.com/security | 2026-11-11 | 2026-09-22 |
| Status page | https://status.getdbt.com/ | 2026-11-11 | 2026-09-22 |
| Security advisories | https://www.getdbt.com/security/disclosure | 2026-11-11 | 2026-09-22 |

## Subprocessors (3)

As its own list states them.

| Subprocessor | Purpose | Location | Listed since |
|---|---|---|---|
| [AWS](https://thirdpartyindex.com/vendors/amazon-web-services.md) | Infrastructure Hosting | Australia; Germany; Japan; United States | 2026-09-22 |
| [Google Cloud](https://thirdpartyindex.com/vendors/google-cloud.md) | Infrastructure Hosting | United Kingdom; United States | 2026-09-22 |
| [Microsoft Azure](https://thirdpartyindex.com/vendors/microsoft.md) | Infrastructure Hosting | Ireland; United States | 2026-09-22 |

Read from ([evidence](https://thirdpartyindex.com/evidence/4558)). CSV: https://thirdpartyindex.com/vendors/dbt-labs/subprocessors.csv

## Web Technologies

dbt Labs's homepage made 150 requests to 23 domains, 10 services controlled by another company, and 3 domains not identified. Loaded on 2026-11-05 by a browser that accepted nothing; other visits may load more or less. What a page loads is not a list of who receives customer data.

10 third parties by category: Analytics 6 (Adobe, Amplitude, Google Cloud, LinkedIn, Meta, jsDelivr); Advertising 1 (OpenAI); A/B Testing 1 (Optimizely); Cookie compliance 1 (OneTrust); Unclassified 1 (Fivetran). Each company that appears controlled by another organization is counted once, under the main category of the technologies detected from it on this homepage or, when none was, the category recorded from the company's own page (marked reviewed) or else the one it is usually detected as on other published homepages (marked as such); unclassified: none of these.

### Third parties (10)

- Adobe: 27 requests to typekit.net, bizible.com, bizibly.com; Adobe Marketo Measure
- Amplitude: 11 requests to amplitude.com; Amplitude
- OneTrust: 11 requests to cookielaw.org, onetrust.com; OneTrust
- Google Cloud: 9 requests to googlesyndication.com, googletagmanager.com, google-analytics.com, googleadservices.com; Google Analytics, Google Tag Manager (its subprocessor list names it too)
- Optimizely: 4 requests to optimizely.com; Optimizely
- LinkedIn: 3 requests to linkedin.com, licdn.com; Linkedin Insight Tag
- Meta: 3 requests to facebook.net, facebook.com; Facebook Pixel 2.9.435
- OpenAI: 2 requests to openai.com; ChatGPT Ads Measurement Pixel
- Fivetran: 1 request to fivetran.com
- jsDelivr: 1 request to jsdelivr.net; Snowplow Analytics, jsDelivr

### Unknown (3)

Domains not identified yet: greencolumnhealth.com, mpc2-prod-28-is5qnl632q-ue.a.run.app, s3.amazonaws.com

### First party (1)

- dbt Labs: 67 requests to getdbt.com, sinter-collect.com; Adobe Fonts, Amazon Web Services, HSTS, Next.js 15.5.19, Next.js App Router, Open Graph, Priority Hints, React, Sanity, Sanity.io, Segment 2.11.0, Typekit, Vercel, Webpack, core-js 2.6.12

9 tracked companies loaded by the homepage are not in dbt Labs's subprocessor list. A website can use a service without it processing customer data.

## Subprocessor of (56)

Tracked vendors whose own subprocessor lists name it, and what they say they use it for.

- [Alation](https://thirdpartyindex.com/vendors/alation.md): Data Build tool, used for data analytics
- [Anaconda](https://thirdpartyindex.com/vendors/anaconda.md): Management of data build workflows for cloud tools; dbt cloud; Management of data build workflows for cloud tools
- [Apollo](https://thirdpartyindex.com/vendors/apollo.md)
- [Assent](https://thirdpartyindex.com/vendors/assent.md): Data transformation and modeling for reporting and analytics.
- [Braze](https://thirdpartyindex.com/vendors/braze.md): A tool that enables transformation, modelling and testing United of data in the data warehouse for analytics purposes.
- [Census](https://thirdpartyindex.com/vendors/census.md): Fivetran affiliate company
- [Circle](https://thirdpartyindex.com/vendors/circle-so.md): Data transformation and analytics engineering; Runs data transformation jobs on Circle’s analytics data.
- [Conveyor](https://thirdpartyindex.com/vendors/conveyor.md): Data Warehouse
- [Courier](https://thirdpartyindex.com/vendors/courier.md): Data transformation
- [Culture Amp](https://thirdpartyindex.com/vendors/culture-amp.md): dbt Labs enables our data analysts and engineers to prepare and transform data in our warehouse for analysis in business intelligence tools.
- [Cypress](https://thirdpartyindex.com/vendors/cypress.md)
- [Descript](https://thirdpartyindex.com/vendors/descript.md)
- [Drata](https://thirdpartyindex.com/vendors/drata.md): \[Drata and SafeBase\] GetDBT provides a platform for data transformation, modeling, and analytics, allowing the build, test, and deploy of SQL-based data models …
- [Drivetrain](https://thirdpartyindex.com/vendors/drivetrain.md)
- [EAB](https://thirdpartyindex.com/vendors/eab.md): Cloud data storage and processing solution
- [EdSights](https://thirdpartyindex.com/vendors/edsights.md): Data Warehouse Transformations; Products: Admit, Retain
- [Employment Hero](https://thirdpartyindex.com/vendors/employment-hero.md): Data analytics; Processing Activity: Transformation and modelling of warehouse data for analytics GDPR Transfer Mechanism: Standard Contractual Clauses
- [Fivetran](https://thirdpartyindex.com/vendors/fivetran.md): Fivetran affiliate company
- [Fluid Attacks](https://thirdpartyindex.com/vendors/fluid-attacks.md): Data analytics; dbt allows you to test business logic, ensuring data quality, and fix issues proactively before they impact your business.
- [Flywire](https://thirdpartyindex.com/vendors/flywire.md): Data transformation and modeling platform
- [Forest Admin](https://thirdpartyindex.com/vendors/forest-admin.md)
- [Graphite](https://thirdpartyindex.com/vendors/graphite.md)
- [Helios](https://thirdpartyindex.com/vendors/helios.md): DBT is a transformation tool used to configure data, which may include developer personal data, stored in Snowflake. DBT serves as a tool to provide meaningful …
- [Help Scout](https://thirdpartyindex.com/vendors/help-scout.md): Business analytics
- [Hightouch](https://thirdpartyindex.com/vendors/hightouch.md): Data Analytics
- [Honeycomb](https://thirdpartyindex.com/vendors/honeycomb.md): Business intelligence services
- [HUMAN Security](https://thirdpartyindex.com/vendors/human-security.md): Data Analytics
- [Jasper AI](https://thirdpartyindex.com/vendors/jasper-ai.md): Analytics & Reporting
- [KnoCommerce](https://thirdpartyindex.com/vendors/knocommerce.md): Warehouse processing
- [Knowde](https://thirdpartyindex.com/vendors/knowde.md): Data Analytics
- [Landbot](https://thirdpartyindex.com/vendors/landbot.md): Cloud orchestration for our data transformations. Processes warehouse data during model runs and stores run metadata/artifacts (not full datasets). \*Customer Da…
- [Livestorm](https://thirdpartyindex.com/vendors/livestorm.md)
- [Outreach](https://thirdpartyindex.com/vendors/outreach.md): Product analytics and testing
- [Panther](https://thirdpartyindex.com/vendors/panther.md)
- [Paragon](https://thirdpartyindex.com/vendors/forge-technology-inc-aka-paragon.md): BI and usage data transformation (Customer Metadata)
- [Persona](https://thirdpartyindex.com/vendors/persona.md)
- [Prisma](https://thirdpartyindex.com/vendors/prisma.md): Data Analytics
- [Pylon](https://thirdpartyindex.com/vendors/pylon.md): Data ETL
- [Quartzy](https://thirdpartyindex.com/vendors/quartzy.md)
- [Replicated](https://thirdpartyindex.com/vendors/replicated.md): Data transformation or migration
- [Rubrik](https://thirdpartyindex.com/vendors/rubrik.md)
- [Screencastify](https://thirdpartyindex.com/vendors/screencastify.md): Data Transformation; Data transformation and modeling
- [Shortcut](https://thirdpartyindex.com/vendors/shortcut.md): Data Analytics
- [Snyk](https://thirdpartyindex.com/vendors/snyk.md): DBT is a transformation tool used to configure data, which may include developer personal data, stored in Snowflake. DBT serves as a tool to provide meaningful …
- [Spekit](https://thirdpartyindex.com/vendors/spekit.md): Data management
- [Spond](https://thirdpartyindex.com/vendors/spond.md): Data transformation
- [Sprout Social](https://thirdpartyindex.com/vendors/sprout-social.md)
- [Superside](https://thirdpartyindex.com/vendors/superside.md)
- [Trainual](https://thirdpartyindex.com/vendors/trainual.md): Data transformation orchestrator
- [UserTesting](https://thirdpartyindex.com/vendors/usertesting.md): Data pipeline from UserTesting platform to cloud storage and data warehouse
- [Vendr](https://thirdpartyindex.com/vendors/vendr.md): Data Transformation
- [Warp](https://thirdpartyindex.com/vendors/warp.md)
- [Webflow](https://thirdpartyindex.com/vendors/webflow.md): Data transformation SaaS solution
- [WorkOS](https://thirdpartyindex.com/vendors/workos.md): Data Transformation; Data and analytics
- [ZeeMee](https://thirdpartyindex.com/vendors/zeemee.md)
- [Zeplin](https://thirdpartyindex.com/vendors/zeplin.md): Zeplin uses dbt Cloud for data analytics. Zeplin may provide user information to dbt Cloud.

## Service status

Incidents it reported on its own status page.

- Last 90 days: 33 reported incidents (8 major or critical, 23 minor, 2 with no impact stated)
- Typical time to resolve: 2 h 56 min
- Status page last read: 2026-11-11
- 2026-11-10: Degraded run performance due to dbt State service disruption (no impact stated)
- 2026-11-04: Jobs list and Environment pages failing to load (minor)
- 2026-11-04: Git errors for projects connected to GitHub over SSH (major)
- 2026-11-03: dbt Studio error loop with restarting dbt Studio (minor)
- 2026-11-03: Expired GitLab project access tokens not refreshing causing failures in posting commit statuses (minor)
- 2026-10-29: dbt Wizard SQL execution failing (major)
- 2026-10-28: Degraded performance across dbt platform (minor)
- 2026-10-22: dbt deps failures in dbt job runs and Studio (minor)

The subprocessor list as we read it on any date: https://thirdpartyindex.com/labs/time-machine/dbt-labs

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api
