# Drieam

Drieam declares [14 subprocessors](https://thirdpartyindex.com/vendors/drieam#subprocessors) in [its subprocessor list](https://drieam.com/en/security-and-privacy/), which we last checked on 2026-11-11 ([evidence](https://thirdpartyindex.com/evidence/2368)). They include [Amazon Web Services](https://thirdpartyindex.com/vendors/amazon-web-services), [Google Cloud](https://thirdpartyindex.com/vendors/google-cloud) and [Microsoft](https://thirdpartyindex.com/vendors/microsoft). No published changes since we first read it on 2026-09-22. [2 tracked vendors](https://thirdpartyindex.com/vendors/drieam#used-by) name Drieam as a subprocessor, including [Qualtrics](https://thirdpartyindex.com/vendors/qualtrics) and [D2L](https://thirdpartyindex.com/vendors/d2l).

Drieam (drieam.com): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/drieam
- Documents last verified: 2026-11-11
- Transparency rating: 72/100 (how much it publishes, not how secure it is): Subprocessor list 30/30; Processing locations 8/8; Purposes 7/7; Data processing addendum 0/12 (not found); Trust center 8/8; Privacy policy 6/6; security.txt 0/6 (not found); Security page 0/5 (not found); Status page 5/5; Vulnerability disclosure 0/5 (not found); Pages still reachable 8/8
- Supply chain: relies on 10 tracked vendors directly, 113 within two hops, 349 within three; 2 tracked vendors rely on it directly, 27 within two hops, 319 within three
- Cite as: Drieam, Third Party Index, https://thirdpartyindex.com/vendors/drieam (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Trust center | https://drieam.com/en/solutions/portflow/trust/ | 2026-11-11 | 2026-10-20 |
| Subprocessor list | https://drieam.com/en/security-and-privacy/ | 2026-11-11 | 2026-09-22 |
| Privacy policy | https://drieam.com/en/security-and-privacy/privacy-policy/ | 2026-11-11 | 2026-09-22 |
| Status page | https://status.drieam.com/ | 2026-11-11 | 2026-10-29 |

## Subprocessors (14)

As its own list states them.

| Subprocessor | Purpose | Location | Listed since |
|---|---|---|---|
| [Amazon Cloudfront](https://thirdpartyindex.com/vendors/amazon-web-services.md) | CDN Services | Country entity: US; Country of processing: Global – Nearest edge to end user | 2026-09-22 |
| [Amazon Web Services (AWS)](https://thirdpartyindex.com/vendors/amazon-web-services.md) | AWS is used to host, backup and process Drieam’s web applications and all its data. | Country entity: Ireland; Country of processing: EEA / US (Qualtrics LTI hosted in US) / AUS (Portflow Australia) | 2026-09-22 |
| [Appsignal](https://thirdpartyindex.com/vendors/appsignal.md) | Application performance monitoring | Country entity: NL; Country of processing: EU | 2026-09-22 |
| [Freshdesk](https://thirdpartyindex.com/vendors/freshworks.md) | Helpdesk software | Country entity: US; Country of processing: EU | 2026-09-22 |
| [Google Workspace](https://thirdpartyindex.com/vendors/google-cloud.md) | Used for email communication, calendar events and cloud storage of our team. | Country entity: US; Country of processing: EU | 2026-09-22 |
| Heroku \[Salesforce\] | Cloudplatform as a service (PaaS) to build, run and operate Drieam’s web applications. | Country entity: US; Country of processing: Europe / US (Qualtrics LTI hosted in US) / AUS (Portflow Australia) | 2026-09-22 |
| [HubSpot](https://thirdpartyindex.com/vendors/hubspot.md) | Store leads info, establish; communication channels and track progress along the buying lifecycle. | Country entity: US; Country of processing: EU | 2026-09-22 |
| [Instructure](https://thirdpartyindex.com/vendors/instructure.md) | Learning Management System (LMS) | Country entity: US; Country of processing: EU | 2026-09-22 |
| [Mailgun](https://thirdpartyindex.com/vendors/mailgun.md) | Transaction email service to send, receive and track emails | Country entity: US; Country of processing: EU/US | 2026-09-22 |
| [Microsoft \[Azure\]](https://thirdpartyindex.com/vendors/microsoft.md) | AI / LLM Services | Country entity: US; Country of processing: EU | 2026-09-22 |
| Moneybird | Utilized for issuing invoices to customers. | Country entity: NL; Country of processing: NL | 2026-09-22 |
| [Pylon Labs, Inc.](https://thirdpartyindex.com/vendors/pylon.md) | Helpdesk & Knowledge Base | Country entity: US; Country of processing: EU | 2026-09-22 |
| Qualtrics XM | Distribution of surveys and saving and reporting of survey results | Country entity: US; Country of processing: EU | 2026-09-22 |
| [QuickBooks](https://thirdpartyindex.com/vendors/intuit.md) | Utilized solely for issuing invoices to customers in the US & Canada. | Country entity: US; Country of processing: US | 2026-09-22 |

Read from ([evidence](https://thirdpartyindex.com/evidence/2368)). CSV: https://thirdpartyindex.com/vendors/drieam/subprocessors.csv

## Web Technologies

Drieam's homepage made 19 requests to 1 domain. Loaded on 2026-11-04 by a browser that accepted nothing; other visits may load more or less. What a page loads is not a list of who receives customer data.

### First party (1)

- Drieam: 19 requests to drieam.com; Google Font API, Google Tag Manager, HSTS, HubSpot, HubSpot Analytics, HubSpot WordPress plugin 11.3.75, LottieFiles, MySQL, Nginx, Open Graph, PHP 8.3.36, Priority Hints, RSS, Site Kit 1.191.0, Slider Revolution 6.8.1, Swiper, WP Rocket 3.23.5.1, WPML 5.2.0, WordPress 7.1.4, Yoast SEO 28.8

## Subprocessor of (2)

Tracked vendors whose own subprocessor lists name it, and what they say they use it for.

- [D2L](https://thirdpartyindex.com/vendors/d2l.md): Optional third-party product available for purchase. Product(s): Eduframe SIS; Student Information System (SIS) and Online Storefront
- [Qualtrics](https://thirdpartyindex.com/vendors/qualtrics.md): Learning management system integration.

## Service status

Incidents it reported on its own status page.

- Last 90 days: 1 reported incidents (0 major or critical, 0 minor, 1 with no impact stated)
- Typical time to resolve: 6 h 2 min
- Status page last read: 2026-11-12
- 2026-10-21: PHP security vulnerabilities (CVE announcement of 20 October) – Drieam applications not affected (no impact stated)
- 2026-05-08: Instructure Canvas security incident (no impact stated)
- 2026-05-01: Incident related to Instructure Inherited Keys affecting parts of app (no impact stated)
- 2026-03-30: Portflow: some features are not working correctly. (no impact stated)

## Incidents reported by Drieam's subprocessors

Incidents reported in the last 30 days on their own status pages by 4 vendors Drieam lists as subprocessors. A subprocessor list names a company, not the service an incident touched.

- 2026-11-11: [Instructure](https://thirdpartyindex.com/vendors/instructure#status), which Drieam lists as a subprocessor, reported Users May Be Unable to Query Data in Canvas Data 2 (minor)
- 2026-11-11: [Pylon](https://thirdpartyindex.com/vendors/pylon#status), which Drieam lists as a subprocessor, reported Slack Integration Connection Issues (major)
- 2026-11-10: [HubSpot](https://thirdpartyindex.com/vendors/hubspot#status), which Drieam lists as a subprocessor, reported Some HubSpot tools may be unavailable for some users (no impact stated)
- 2026-11-05: [Pylon](https://thirdpartyindex.com/vendors/pylon#status), which Drieam lists as a subprocessor, reported Delay in Analytics Data (minor)
- 2026-11-04: [Pylon](https://thirdpartyindex.com/vendors/pylon#status), which Drieam lists as a subprocessor, reported Inbound Email Delays (minor)
- 2026-11-04: [Instructure](https://thirdpartyindex.com/vendors/instructure#status), which Drieam lists as a subprocessor, reported Portfolium is unavailable in the Sydney region (major)
- 2026-11-02: [HubSpot](https://thirdpartyindex.com/vendors/hubspot#status), which Drieam lists as a subprocessor, reported HubSpot is experiencing issues (no impact stated)
- 2026-10-30: [Instructure](https://thirdpartyindex.com/vendors/instructure#status), which Drieam lists as a subprocessor, reported Some users may experience slow page loads when using new quizzes. (minor)
- 2026-10-28: [Mailgun](https://thirdpartyindex.com/vendors/mailgun#status), which Drieam lists as a subprocessor, reported Route delays in EU Region (minor)
- 2026-10-26: [Instructure](https://thirdpartyindex.com/vendors/instructure#status), which Drieam lists as a subprocessor, reported Some ChromeOS users were unable to log into Canvas (minor)
- 2026-10-26: [Instructure](https://thirdpartyindex.com/vendors/instructure#status), which Drieam lists as a subprocessor, reported Some users may be experiencing slow load times or errors when accessing New Quizzes (minor)
- 2026-10-23: [HubSpot](https://thirdpartyindex.com/vendors/hubspot#status), which Drieam lists as a subprocessor, reported Some HubSpot tools may be unavailable for some users (no impact stated)
- 2026-10-22: [Instructure](https://thirdpartyindex.com/vendors/instructure#status), which Drieam lists as a subprocessor, reported New Quizzes Regrading Giving Errors on Ordering Questions (minor)
- 2026-10-22: [Instructure](https://thirdpartyindex.com/vendors/instructure#status), which Drieam lists as a subprocessor, reported Some users are experiencing slow load times when accessing Canvas (minor)
- 2026-10-22: [Instructure](https://thirdpartyindex.com/vendors/instructure#status), which Drieam lists as a subprocessor, reported Some users may be experiencing slow load times or errors when previewing files in Canvas (minor)
- 2026-10-22: [HubSpot](https://thirdpartyindex.com/vendors/hubspot#status), which Drieam lists as a subprocessor, reported Update on PHP security vulnerability (no impact stated)
- 2026-10-21: [Instructure](https://thirdpartyindex.com/vendors/instructure#status), which Drieam lists as a subprocessor, reported PHP Awareness (no impact stated)
- 2026-10-21: [Instructure](https://thirdpartyindex.com/vendors/instructure#status), which Drieam lists as a subprocessor, reported 500 errors when accessing Canvas Data 2 (major)
- 2026-10-20: [Instructure](https://thirdpartyindex.com/vendors/instructure#status), which Drieam lists as a subprocessor, reported Edit discussion page error when Checkpoints disabled (minor)
- 2026-10-15: [Instructure](https://thirdpartyindex.com/vendors/instructure#status), which Drieam lists as a subprocessor, reported Some Users May Be Unable To Log Into Canvas (minor)
- 2026-10-14: [Pylon](https://thirdpartyindex.com/vendors/pylon#status), which Drieam lists as a subprocessor, reported Platform loading issues (no impact stated)

The subprocessor list as we read it on any date: https://thirdpartyindex.com/labs/time-machine/drieam

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api