# Dremio

Dremio declares [8 subprocessors](https://thirdpartyindex.com/vendors/dremio#subprocessors) in [its subprocessor list](https://trust.dremio.com/subprocessors), which we last checked on 2026-11-11 ([evidence](https://thirdpartyindex.com/evidence/224203)). They include [Amazon Web Services](https://thirdpartyindex.com/vendors/amazon-web-services), [Google Cloud](https://thirdpartyindex.com/vendors/google-cloud) and [Microsoft](https://thirdpartyindex.com/vendors/microsoft). No published changes since we first read it on 2026-11-06.

Dremio (dremio.com): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/dremio
- Documents last verified: 2026-11-12
- Transparency rating: 93/100 (how much it publishes, not how secure it is): Subprocessor list 30/30; Processing locations 8/8; Purposes 5/7 (partial); Data processing addendum 12/12; Trust center 8/8; Privacy policy 6/6; security.txt 6/6; Security page 5/5; Status page 5/5; Vulnerability disclosure 0/5 (not found); Pages still reachable 8/8
- Supply chain: relies on 7 tracked vendors directly, 95 within two hops, 371 within three; 0 tracked vendors rely on it directly, 0 within two hops, 0 within three
- Cite as: Dremio, Third Party Index, https://thirdpartyindex.com/vendors/dremio (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Trust center | https://trust.dremio.com/ | 2026-11-11 | 2026-11-11 |
| Subprocessor list | https://trust.dremio.com/subprocessors | 2026-11-11 | 2026-11-06 |
| Data processing addendum | https://www.dremio.com/legal/data-processing-addendum/ | 2026-11-12 | 2026-11-06 |
| Privacy policy | https://www.dremio.com/legal/privacy-policy/ | 2026-11-12 | 2026-11-06 |
| Terms | https://www.dremio.com/legal/terms-of-service/ | 2026-11-12 | 2026-11-06 |
| Security page | https://www.dremio.com/cloud/security/ | 2026-11-12 | 2026-11-06 |
| security.txt | https://www.dremio.com/.well-known/security.txt | 2026-11-12 | 2026-11-06 |
| Status page | https://status.dremio.com/ | 2026-11-12 | 2026-11-12 |

## Subprocessors (8)

As its own list states them.

| Subprocessor | Purpose | Location | Listed since |
|---|---|---|---|
| [Amazon Web Services](https://thirdpartyindex.com/vendors/amazon-web-services.md) | Dremio Cloud Control Plane Infrastructure | United States, EMEA | 2026-11-06 |
| [Auth0](https://thirdpartyindex.com/vendors/okta.md) | Dremio Cloud Control Plane Authentication Infrastructure | United States, EMEA | 2026-11-06 |
| [Google Cloud Platform](https://thirdpartyindex.com/vendors/google-cloud.md) | Dremio Cloud Control Plane Infrastructure | United States, EMEA | 2026-11-06 |
| [Microsoft Azure](https://thirdpartyindex.com/vendors/microsoft.md) | Dremio Cloud Control Plane Infrastructure | United States, EMEA | 2026-11-06 |
| Observe | — | observability platform | 2026-11-06 |
| [Sparkpost](https://thirdpartyindex.com/vendors/sparkpost.md) | Dremio Cloud email communication platform; Dremio Cloud email communication platform. | United States, EMEA | 2026-11-06 |
| [Stripe](https://thirdpartyindex.com/vendors/stripe.md) | Dremio Cloud billing and payment processing platform | United States, EMEA | 2026-11-06 |
| [Vanta](https://thirdpartyindex.com/vendors/vanta.md) | — | Continuous security and compliance monitoring | 2026-11-06 |

Read from ([evidence](https://thirdpartyindex.com/evidence/224203)). CSV: https://thirdpartyindex.com/vendors/dremio/subprocessors.csv

## Compliance

As its trust center lists them.

- Audited: SOC 2 Type II, ISO/IEC 27001 ([evidence](https://thirdpartyindex.com/evidence/224206))
- Claimed: HIPAA, GDPR, CCPA/CPRA ([evidence](https://thirdpartyindex.com/evidence/224206))

## Web Technologies

Dremio's homepage made 58 requests to 1 domain. Loaded on 2026-11-07 by a browser that accepted nothing; other visits may load more or less. What a page loads is not a list of who receives customer data.

### First party (1)

- Dremio: 58 requests to dremio.com; Cloudflare, Enhanced Responsive Images 1.7.0, Google Font API, Google Tag Manager, HSTS, HTTP/3, Highlight.js, Max Mega Menu, Modern Image Formats 2.6.1, MySQL, Open Graph, PHP, Priority Hints, RSS, Reveal.js, WP Engine, WP Rocket 3.21.3, WordPress, Yoast SEO 28.2, Yoast SEO Premium 28.2, jQuery 3.7.1, jQuery Migrate 3.4.1, jsDelivr

## Subprocessor of (0)

No tracked vendor lists it.

## Service status

Incidents it reported on its own status page.

- Last 90 days: 2 reported incidents (1 major or critical, 0 minor, 1 with no impact stated)
- Typical time to resolve: 30 min
- Status page last read: 2026-11-11
- 2026-10-05: Query failures in Dremio Cloud (US & EU) (no impact stated)
- 2026-08-26: Engine scaling issues in Dremio Cloud (US) (major)
- 2026-08-05: Dremio Cloud US app and login unavailable (major)
- 2026-06-20: Query failures in Dremio Cloud (US) (minor)
- 2026-06-18: Network Connectivity Errors in Dremio Cloud (US) (minor)
- 2026-06-12: Email delivery failures in Dremio Cloud (EU) (minor)
- 2026-04-08: Query failures in Dremio Cloud (US) (major)
- 2026-04-02: Query failures in Dremio Cloud (US & EU) (no impact stated)

## Incidents reported by Dremio's subprocessors

Incidents reported in the last 30 days on their own status pages by 2 vendors Dremio lists as subprocessors. A subprocessor list names a company, not the service an incident touched.

- 2026-11-03: [Vanta](https://thirdpartyindex.com/vendors/vanta#status), which Dremio lists as a subprocessor, reported Missing check results for GitHub pull requests (minor)
- 2026-11-01: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Dremio lists as a subprocessor, reported Elevated Instant Payouts failures (no impact stated)
- 2026-10-29: [Vanta](https://thirdpartyindex.com/vendors/vanta#status), which Dremio lists as a subprocessor, reported Incorrect security-training and background-check test results (no impact stated)
- 2026-10-28: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Dremio lists as a subprocessor, reported Elevated Issuing errors from 17:13 - 20:41 UTC (minor)
- 2026-10-24: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Dremio lists as a subprocessor, reported Elevated Blik errors (no impact stated)
- 2026-10-22: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Dremio lists as a subprocessor, reported Elevated Bancontact errors (no impact stated)
- 2026-10-22: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Dremio lists as a subprocessor, reported Elevated Bancontact errors (no impact stated)
- 2026-10-21: [Vanta](https://thirdpartyindex.com/vendors/vanta#status), which Dremio lists as a subprocessor, reported Stale data for CloudflareDomainInventory and CloudflareZoneRule (major)
- 2026-10-20: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Dremio lists as a subprocessor, reported Spike in cancellations and expired errors with PayByBank payments (no impact stated)
- 2026-10-20: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Dremio lists as a subprocessor, reported Elevated Revolut Pay errors (no impact stated)
- 2026-10-15: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Dremio lists as a subprocessor, reported Elevated declines on Mastercard (no impact stated)
- 2026-10-15: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Dremio lists as a subprocessor, reported Elevated declines on Visa (no impact stated)
- 2026-10-15: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Dremio lists as a subprocessor, reported Elevated Amazon Pay errors (no impact stated)

The subprocessor list as we read it on any date: https://thirdpartyindex.com/labs/time-machine/dremio

## Security contact

From its security.txt (https://www.dremio.com/.well-known/security.txt) ([evidence](https://thirdpartyindex.com/evidence/223486)):

- Contact: mailto:security@dremio.com
- Disclosure policy: https://www.dremio.com/platform/security/responsible-disclosure-limitations/
- Security jobs: https://www.dremio.com/careers/
- No expiry date

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api