# Dropbox Dropbox declares [11 subprocessors](https://thirdpartyindex.com/vendors/dropbox#subprocessors), plus 1 of its own affiliates, in [its subprocessor list](https://www.dropbox.com/privacy/subprocessor/dropbox), which we last checked on 2026-11-11 ([evidence](https://thirdpartyindex.com/evidence/2817)). They include [Amazon Web Services](https://thirdpartyindex.com/vendors/amazon-web-services), [Google Cloud](https://thirdpartyindex.com/vendors/google-cloud) and [OpenAI](https://thirdpartyindex.com/vendors/openai). No published changes since we first read it on 2026-09-22. [42 tracked vendors](https://thirdpartyindex.com/vendors/dropbox#used-by) name Dropbox as a subprocessor, including [HubSpot](https://thirdpartyindex.com/vendors/hubspot), [Freshworks](https://thirdpartyindex.com/vendors/freshworks) and [SolarWinds](https://thirdpartyindex.com/vendors/solarwinds). Dropbox (dropbox.com): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index. - Page: https://thirdpartyindex.com/vendors/dropbox - Documents last verified: 2026-11-11 - Transparency rating: 77/100 (how much it publishes, not how secure it is): Subprocessor list 30/30; Processing locations 8/8; Purposes 7/7; Data processing addendum 0/12 (not found); Trust center 8/8; Privacy policy 6/6; security.txt 0/6 (not found); Security page 5/5; Status page 5/5; Vulnerability disclosure 0/5 (not found); Pages still reachable 8/8 - Companies part of it: [DocSend](https://thirdpartyindex.com/vendors/docsend), [Dropbox Sign](https://thirdpartyindex.com/vendors/dropbox-sign) - Supply chain: relies on 10 tracked vendors directly, 115 within two hops, 396 within three; 42 tracked vendors rely on it directly, 817 within two hops, 1868 within three - Cite as: Dropbox, Third Party Index, https://thirdpartyindex.com/vendors/dropbox (data CC BY 4.0) ## Documents | Document | URL | Last verified | Last changed | |---|---|---|---| | Trust center | https://trust.dropbox.com/ | 2026-11-11 | 2026-11-10 | | Subprocessor list | https://www.dropbox.com/privacy/subprocessor/dropbox | 2026-11-11 | 2026-09-22 | | Privacy policy | https://www.dropbox.com/privacy | 2026-11-11 | 2026-09-21 | | Terms | https://www.dropbox.com/terms | 2026-11-11 | 2026-09-21 | | Security page | https://www.dropbox.com/features/security | 2026-11-11 | 2026-11-09 | | Status page | https://status.dropbox.com/ | 2026-11-11 | 2026-11-11 | ## Subprocessors (11) As its own list states them. | Subprocessor | Purpose | Location | Listed since | |---|---|---|---| | [Amazon Web Services, Inc.](https://thirdpartyindex.com/vendors/amazon-web-services.md) | Infrastructure, Customer Support, Search, Large Language Model Processing (e.g. summarization, enhanced search) | United States | 2026-09-22 | | [Google LLC](https://thirdpartyindex.com/vendors/google-cloud.md) | Customer Support, Large Language Model Processing (e.g. summarization, enhanced search) | United States | 2026-09-22 | | [Groq, Inc.](https://thirdpartyindex.com/vendors/groq.md) (AI model provider: Groq) | Large Language Model Processing (e.g. summarization, enhanced search) | United States | 2026-09-22 | | [Microsoft Corporation](https://thirdpartyindex.com/vendors/microsoft.md) | Large Language Model Processing (e.g. summarization, enhanced search) | United States | 2026-09-22 | | [OpenAI](https://thirdpartyindex.com/vendors/openai.md) (AI model provider: OpenAI) | Large Language Model Processing (e.g. video captioning, summarization, enhanced search) | United States | 2026-09-22 | | [Oracle America, Inc.](https://thirdpartyindex.com/vendors/oracle.md) | Billing and Customer Support | United States | 2026-09-22 | | [Parallel Web Systems Inc.](https://thirdpartyindex.com/vendors/parallel-web-systems.md) | Large Language Model Processing (e.g. summarization, enhanced search) | United States | 2026-09-22 | | [Salesforce.com, Inc.](https://thirdpartyindex.com/vendors/salesforce.md) | Customer Support | United States | 2026-09-22 | | Teleperformance A.E. | Customer Support | Greece | 2026-09-22 | | [Zendesk, Inc.](https://thirdpartyindex.com/vendors/zendesk.md) | Customer Support | United States | 2026-09-22 | | [Zoom Video Communications, Inc.](https://thirdpartyindex.com/vendors/zoom.md) | Customer Support | United States | 2026-09-22 | Read from ([evidence](https://thirdpartyindex.com/evidence/2817)). CSV: https://thirdpartyindex.com/vendors/dropbox/subprocessors.csv AI model providers (or a cloud provider's AI model service) among these entries: 2. All vendors that list one: https://thirdpartyindex.com/ai ### Its own affiliates (1) - Dropbox, Inc. (United States) ## Compliance As its trust center lists them. - Audited: SOC 1, SOC 2, SOC 3, ISO/IEC 27001, ISO/IEC 27701, ISO 22301, PCI DSS, CSA STAR, ISMAP, EU Cloud Code of Conduct ([evidence](https://thirdpartyindex.com/evidence/250526)) - Claimed: HIPAA, GDPR, CCPA/CPRA, Data Privacy Framework ([evidence](https://thirdpartyindex.com/evidence/8911)) ## Security program What DROPBOX, INC.'s Form 10-K for fiscal 2025, filed Feb 20, 2026 (Item 1C) says, in its words (https://www.sec.gov/Archives/edgar/data/1467623/000146762326000008/0001467623-26-000008-index.htm). - Led by: Head of Security - Leader's experience: 25+ years - Board oversight: Audit Committee - Frameworks named: ISO 27001, SOC 2 - Practices named: Incident response plan, Tabletop exercises, Penetration testing, Red team, Bug bounty, Vulnerability management, Threat intelligence, Security training - Engages outside assessors or consultants - Reviews its suppliers' security ## Web Technologies Dropbox's homepage made 462 requests to 33 domains, 15 services controlled by another company, and 4 domains not identified. Loaded on 2026-11-03 by a browser that accepted nothing; other visits may load more or less. What a page loads is not a list of who receives customer data. 15 third parties by category: Advertising 6 (Google Cloud, X Corp., StackAdapt, Reddit, Inc., LY Corporation; reviewed: Bidtellect Inc); Analytics 3 (LinkedIn, Meta, ZoomInfo); Marketing automation 2 (Adobe; usually detected as Marketing automation: 6Sense Insights, Inc.); A/B Testing 1 (Coframe); Recruitment & staffing 1 (reviewed: XING); Search engines 1 (Coveo); Surveys 1 (Qualtrics). Each company that appears controlled by another organization is counted once, under the main category of the technologies detected from it on this homepage or, when none was, the category recorded from the company's own page (marked reviewed) or else the one it is usually detected as on other published homepages (marked as such); unclassified: none of these. ### Third parties (15) - Google Cloud: 41 requests to doubleclick.net, google.com, googletagmanager.com, googleadservices.com; DoubleClick Floodlight, Google Analytics, Google Sign-in, Google Tag Manager (its subprocessor list names it too) - Adobe: 35 requests to adobedtm.com, marketo.net, mktoresp.com; Marketo - 6Sense Insights, Inc.: 16 requests to 6sc.co - Bidtellect Inc: 13 requests to bttrack.com - X Corp.: 9 requests to t.co, twitter.com, ads-twitter.com; Twitter Ads - LinkedIn: 7 requests to linkedin.com, licdn.com; Linkedin Insight Tag - Coframe: 6 requests to coframe.com, cofra.me; Coframe - StackAdapt: 4 requests to stackadapt.com; StackAdapt - Meta: 3 requests to facebook.net, facebook.com; Facebook Pixel 2.9.433 - Qualtrics: 3 requests to qualtrics.com; Qualtrics - Reddit, Inc.: 3 requests to reddit.com, redditstatic.com; Reddit Ads - ZoomInfo: 3 requests to zi-scripts.com, zoominfo.com; Zoominfo - Coveo: 1 request to coveo.com; Coveo - LY Corporation: 1 request to yimg.jp; Yahoo! JAPAN Ads - XING: 1 request to xingcdn.com ### Unknown (4) Domains not identified yet: knotch-cdn.com, emjcd.com, knotch.com, mpc-prod-28-1053047382554.us-central1.run.app ### First party (1) - Dropbox: 309 requests to dropboxstatic.com, dropbox.com; Envoy, HSTS, HTTP/3, Lenis 1.0.42, Lodash, Priority Hints, Sentry, core-js 3.45.1 7 tracked companies loaded by the homepage are not in Dropbox's subprocessor list. A website can use a service without it processing customer data. ## Subprocessor of (42) Tracked vendors whose own subprocessor lists name it, and what they say they use it for. - [Ahrefs](https://thirdpartyindex.com/vendors/ahrefs.md): Cloud storage - [Anaphora](https://thirdpartyindex.com/vendors/anaphora.md): Digital signatures for forms and waivers in the Anaphora platform - [Archbee](https://thirdpartyindex.com/vendors/archbee.md): Collaboration & Productivity - [Ashby](https://thirdpartyindex.com/vendors/ashby.md): Electronic Signatures via Dropbox Sign - [Blissbook](https://thirdpartyindex.com/vendors/blissbook.md): Cloud storage - [ClearlyRated](https://thirdpartyindex.com/vendors/clearlyrated.md) - [Cloudmersive](https://thirdpartyindex.com/vendors/cloudmersive.md): Productivity Software - [CS DISCO](https://thirdpartyindex.com/vendors/cs-disco.md): File transfer tool - [DocSend](https://thirdpartyindex.com/vendors/docsend.md): Affiliate - [Dot Compliance](https://thirdpartyindex.com/vendors/dot-compliance.md) - [Dropbox Sign](https://thirdpartyindex.com/vendors/dropbox-sign.md): Affiliate - [Eptura](https://thirdpartyindex.com/vendors/eptura.md): Optional file sharing service - [EventUp Planner](https://thirdpartyindex.com/vendors/eventup-planner.md) - [EverTrue](https://thirdpartyindex.com/vendors/evertrue.md): Cloud file storage & management - [Fastmail](https://thirdpartyindex.com/vendors/fastmail.md): Support services and Business operations - [Freshworks](https://thirdpartyindex.com/vendors/freshworks.md): Share the quote for signature, the quote is sent for signature through DropboxSign. Only Opt out facility for the customers is not to send for signatory. - [Friendbuy](https://thirdpartyindex.com/vendors/friendbuy.md): File storage provider - [GaggleAMP](https://thirdpartyindex.com/vendors/gaggleamp.md): File storage tool - [Greenhouse](https://thirdpartyindex.com/vendors/greenhouse.md): E-signature platform for Greenhouse Onboarding - [HubSpot](https://thirdpartyindex.com/vendors/hubspot.md): E-Signature Functionality - [Klaviyo](https://thirdpartyindex.com/vendors/klaviyo.md): File Hosting for Professional Services and Enablement - [Leapsome](https://thirdpartyindex.com/vendors/leapsome.md): Digital signature provider - [LearnUpon](https://thirdpartyindex.com/vendors/learnupon.md): Document storage and file transfer - [MangoApps](https://thirdpartyindex.com/vendors/mangoapps.md): Documents (optional) - [Massed Compute](https://thirdpartyindex.com/vendors/massed-compute.md): File storage and collaboration - [Maxio](https://thirdpartyindex.com/vendors/maxio.md): File storage and collaboration; File storage integration - [Meltwater](https://thirdpartyindex.com/vendors/meltwater.md): Facilitating e-signatures - [Moqups](https://thirdpartyindex.com/vendors/moqups.md): Cloud Drive - [Noonlight](https://thirdpartyindex.com/vendors/noonlight.md): Cloud Services – Document Storage - [Ontra](https://thirdpartyindex.com/vendors/ontra.md): File Sharing Provider; File sharing and document management - [Pin Payments](https://thirdpartyindex.com/vendors/pin-payments.md): File storage - [Podfather](https://thirdpartyindex.com/vendors/podfather.md): Dropbox International Unlimited Company, One Park Place, Floor 5 Upper Hatch Street, Dublin 2, Ireland Cloud storage and file sharing. - [SalesScreen](https://thirdpartyindex.com/vendors/salesscreen.md) - [Sign In Solutions](https://thirdpartyindex.com/vendors/sign-in-solutions.md): SIC: Signatures and Verifications - [SolarWinds](https://thirdpartyindex.com/vendors/solarwinds.md): Secure file sharing, Analytics & E-Signatures - [Spekit](https://thirdpartyindex.com/vendors/spekit.md): Document signing - [Swantide](https://thirdpartyindex.com/vendors/swantide.md): Cloud Storage - [Telnyx](https://thirdpartyindex.com/vendors/telnyx.md): Cloud storage for file sharing and collaboration; personal data processed could include names, email addresses, and any data contained in files stored on Dropbo… - [Together AI](https://thirdpartyindex.com/vendors/together-ai.md): Contract administration and signature tool and file sharing - [Tropic](https://thirdpartyindex.com/vendors/tropicapp-io.md): Data storage and secure data transfer - [Verda](https://thirdpartyindex.com/vendors/verda.md): Document management; Privacy policy: - [Zearn](https://thirdpartyindex.com/vendors/zearn.md): Provides secure file transfer for School Account partners that choose to roster students using spreadsheets. ## Security record Material cybersecurity incidents reported to the SEC (Form 8-K Item 1.05): - Form 8-K filed 2024-05-01: On April 24, 2024, Dropbox, Inc. (“Dropbox” or “we”) became aware of unauthorized access to the Dropbox Sign (formerly HelloSign) production environment. We immediately activated our cybersecurity incident response process to investigate, contain, and remediate the incident. Upon further inv… (https://www.sec.gov/Archives/edgar/data/1467623/000146762324000024/0001467623-24-000024-index.htm) Breaches listed by Have I Been Pwned (CC BY 4.0, haveibeenpwned.com): - Dropbox, 2012-07-01: 68648009 accounts; data: Email addresses, Passwords ## Service status Incidents it reported on its own status page. - Last 90 days: 4 reported incidents (1 major or critical, 3 minor, 0 with no impact stated) - Typical time to resolve: 6 h 49 min - Status page last read: 2026-11-12 - 2026-09-09: Some customers are unable to access certain website routes and features. (major) - 2026-09-03: Customer support via telephone may be unavailable for some users (minor) - 2026-08-25: Some Dropbox Protect features are not working correctly (minor) - 2026-08-21: Dropbox is not working as expected for some users (minor) - 2026-07-23: Dropbox is not working as expected for some users (minor) - 2026-06-08: Shared content downloads are degraded (minor) - 2026-05-27: Opening a video or audio file might not be working for users (minor) - 2026-05-18: Availability was impacted across a number of services (no impact stated) ## Incidents reported by Dropbox's subprocessors Incidents reported in the last 30 days on their own status pages by 3 vendors Dropbox lists as subprocessors. A subprocessor list names a company, not the service an incident touched. - 2026-11-11: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Dropbox lists as a subprocessor, reported Unable to start new Workspace Agent runs (critical) - 2026-11-11: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Dropbox lists as a subprocessor, reported Elevated errors affecting logins, sign-ups, and ChatGPT features (minor) - 2026-11-10: [Zoom](https://thirdpartyindex.com/vendors/zoom#status), which Dropbox lists as a subprocessor, reported Service Degradation Affecting Zoom Conference Room Connector Services Endpoints in the AMS region. (minor) - 2026-11-10: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Dropbox lists as a subprocessor, reported Incorrect cost data in Costs API exports (no impact stated) - 2026-11-10: [Zoom](https://thirdpartyindex.com/vendors/zoom#status), which Dropbox lists as a subprocessor, reported Service Degradation Affecting a subset of users with ZVA and ZoomMate (no impact stated) - 2026-11-09: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Dropbox lists as a subprocessor, reported Elevated Errors On API (minor) - 2026-11-09: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Dropbox lists as a subprocessor, reported Elevated ChatGPT Conversation Errors (minor) - 2026-11-09: [Zoom](https://thirdpartyindex.com/vendors/zoom#status), which Dropbox lists as a subprocessor, reported Service Degradation Affecting Zoom Inbound SMS Service in the AU region (minor) - 2026-11-08: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Dropbox lists as a subprocessor, reported Elevated errors with image generation (minor) - 2026-11-06: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Dropbox lists as a subprocessor, reported Elevated error rates with some U.S. business Mastercards (no impact stated) - 2026-11-06: [Zoom](https://thirdpartyindex.com/vendors/zoom#status), which Dropbox lists as a subprocessor, reported Service Degradation Affecting Zoom Mail, Calendar and Scheduler. (minor) - 2026-11-06: [Parallel Web Systems](https://thirdpartyindex.com/vendors/parallel-web-systems#status), which Dropbox lists as a subprocessor, reported brief increase in 5xx errors (no impact stated) - 2026-11-05: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Dropbox lists as a subprocessor, reported ChatGPT Work and Dots Errors (minor) - 2026-11-04: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Dropbox lists as a subprocessor, reported Elevated error rates across paid ChatGPT plans (minor) - 2026-11-03: [Zoom](https://thirdpartyindex.com/vendors/zoom#status), which Dropbox lists as a subprocessor, reported Service Degradation Affecting Outbound MMS Services in the US region (minor) - 2026-11-03: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Dropbox lists as a subprocessor, reported File upload errors in ChatGPT (minor) - 2026-10-30: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Dropbox lists as a subprocessor, reported Elevated errors with search in Dots, ChatGPT Work, and certain ChatGPT thinking experiences (minor) - 2026-10-30: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Dropbox lists as a subprocessor, reported Elevated errors for GPT Image 2 API image edits (minor) - 2026-10-28: [Zoom](https://thirdpartyindex.com/vendors/zoom#status), which Dropbox lists as a subprocessor, reported Service Degradation Affecting the Evaluations Acknowledge Button in Zoom Quality Management in the US Region (minor) - 2026-10-27: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Dropbox lists as a subprocessor, reported 6.1 Sol Degraded Model Performance (minor) - 2026-10-27: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Dropbox lists as a subprocessor, reported Elevated error rates for most hosted Code Reviews and Security Reviews on private GitHub repositories (no impact stated) - 2026-10-26: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Dropbox lists as a subprocessor, reported Elevated error rates for Ads POST requests (minor) - 2026-10-23: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Dropbox lists as a subprocessor, reported Degraded experience with ChatGPT app connections using CIMD (minor) - 2026-10-23: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Dropbox lists as a subprocessor, reported Help Center Chat Support Degraded (no impact stated) - 2026-10-23: [Zoom](https://thirdpartyindex.com/vendors/zoom#status), which Dropbox lists as a subprocessor, reported Service Degradation Affecting Multiple Zoom Services (minor) - 2026-10-23: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Dropbox lists as a subprocessor, reported Delays in customer support responses (no impact stated) - 2026-10-22: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Dropbox lists as a subprocessor, reported New Ad Accounts failing to provision admins (minor) - 2026-10-22: [Zoom](https://thirdpartyindex.com/vendors/zoom#status), which Dropbox lists as a subprocessor, reported Service Degradation Affecting Zoom Meetings Services in the US. (minor) - 2026-10-22: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Dropbox lists as a subprocessor, reported Degraded Performance of Dots on Enterprise (minor) - 2026-10-22: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Dropbox lists as a subprocessor, reported Elevated ChatGPT conversation and Responses API errors (minor) - 2026-10-21: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Dropbox lists as a subprocessor, reported Authentication errors for some users (major) - 2026-10-21: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Dropbox lists as a subprocessor, reported Elevated error rates for gpt-5.6-luna API requests (minor) - 2026-10-21: [Zoom](https://thirdpartyindex.com/vendors/zoom#status), which Dropbox lists as a subprocessor, reported Service Degradation Affecting Zoom Learning Webpage (minor) - 2026-10-21: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Dropbox lists as a subprocessor, reported Elevated FedRAMP API error rates for Astra and Sol (minor) - 2026-10-21: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Dropbox lists as a subprocessor, reported Degraded performance in ChatGPT, Codex, and APIs (minor) - 2026-10-19: [Zoom](https://thirdpartyindex.com/vendors/zoom#status), which Dropbox lists as a subprocessor, reported Service Degradation Affecting Meeting Summaries Via Email. (minor) - 2026-10-19: [Zoom](https://thirdpartyindex.com/vendors/zoom#status), which Dropbox lists as a subprocessor, reported Service Degradation Affecting Zoom Website in UK region (minor) - 2026-10-19: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Dropbox lists as a subprocessor, reported File Download errors (minor) - 2026-10-19: [Zoom](https://thirdpartyindex.com/vendors/zoom#status), which Dropbox lists as a subprocessor, reported Service Degradation Affecting ZP SMS Australia Mobile Numbers (no impact stated) - 2026-10-17: [Zoom](https://thirdpartyindex.com/vendors/zoom#status), which Dropbox lists as a subprocessor, reported Service Degradation Affecting Zoom Chat Compose and SMS Summarisation with AI Companion (minor) - 2026-10-15: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Dropbox lists as a subprocessor, reported Widespread feature degradation (major) - 2026-10-14: [Zoom](https://thirdpartyindex.com/vendors/zoom#status), which Dropbox lists as a subprocessor, reported Service degradation affected Zoom AI Companion in US region (no impact stated) - 2026-10-14: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Dropbox lists as a subprocessor, reported Delayed Costs data in the Compliance API (minor) - 2026-10-14: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Dropbox lists as a subprocessor, reported Limited availability on gpt-image-2.5-flare and gpt-image-2.5-sunburst (minor) - 2026-10-14: [Zoom](https://thirdpartyindex.com/vendors/zoom#status), which Dropbox lists as a subprocessor, reported Service Degradation Affected Sandbox Creation in ZoomMate (no impact stated) - 2026-10-14: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Dropbox lists as a subprocessor, reported Degraded performance in Codex and ChatGPT Work (minor) - 2026-10-14: [Zoom](https://thirdpartyindex.com/vendors/zoom#status), which Dropbox lists as a subprocessor, reported Service Degradation Affecting Zoom Clips (minor) - 2026-10-13: [Zoom](https://thirdpartyindex.com/vendors/zoom#status), which Dropbox lists as a subprocessor, reported Service degradation affecting Zoom Meeting API in US region (no impact stated) - 2026-10-13: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Dropbox lists as a subprocessor, reported Degraded performance in GPT-6.1 Sol Codex and Work mode (minor) ## Recent changes Changes to its documents and subprocessor list since monitoring began. - 2026-11-10: Removed certification: ISO/IEC 27018 ([evidence](https://thirdpartyindex.com/evidence/250526)) - 2026-11-10: Removed certification: SOC 2 Type II ([evidence](https://thirdpartyindex.com/evidence/250526)) - 2026-11-10: Added certification: CSA STAR ([evidence](https://thirdpartyindex.com/evidence/250526)) - 2026-11-10: Added certification: EU Cloud Code of Conduct ([evidence](https://thirdpartyindex.com/evidence/250526)) - 2026-11-10: Added certification: ISMAP ([evidence](https://thirdpartyindex.com/evidence/250526)) - 2026-11-10: Added certification: ISO 22301 ([evidence](https://thirdpartyindex.com/evidence/250526)) - 2026-11-10: Added certification: ISO/IEC 27701 ([evidence](https://thirdpartyindex.com/evidence/250526)) - 2026-11-10: Added certification: SOC 1 ([evidence](https://thirdpartyindex.com/evidence/250526)) - 2026-11-10: Added certification: SOC 2 ([evidence](https://thirdpartyindex.com/evidence/250526)) - 2026-11-08: Removed certification: CSA STAR ([evidence](https://thirdpartyindex.com/evidence/238732)) - 2026-11-08: Removed certification: EU Cloud Code of Conduct ([evidence](https://thirdpartyindex.com/evidence/238732)) - 2026-11-08: Removed certification: ISMAP ([evidence](https://thirdpartyindex.com/evidence/238732)) - 2026-11-08: Removed certification: ISO 22301 ([evidence](https://thirdpartyindex.com/evidence/238732)) - 2026-11-08: Removed certification: ISO/IEC 27701 ([evidence](https://thirdpartyindex.com/evidence/238732)) - 2026-11-08: Removed certification: SOC 1 ([evidence](https://thirdpartyindex.com/evidence/238732)) - 2026-11-08: Removed certification: SOC 2 ([evidence](https://thirdpartyindex.com/evidence/238732)) - 2026-11-08: Added certification: ISO/IEC 27018 ([evidence](https://thirdpartyindex.com/evidence/238732)) - 2026-11-08: Added certification: SOC 2 Type II ([evidence](https://thirdpartyindex.com/evidence/238732)) - 2026-11-04: Removed certification: ISO/IEC 27018 ([evidence](https://thirdpartyindex.com/evidence/212235)) - 2026-11-04: Removed certification: SOC 2 Type II ([evidence](https://thirdpartyindex.com/evidence/212235)) - 2026-11-04: Added certification: CSA STAR ([evidence](https://thirdpartyindex.com/evidence/212235)) - 2026-11-04: Added certification: EU Cloud Code of Conduct ([evidence](https://thirdpartyindex.com/evidence/212235)) - 2026-11-04: Added certification: ISMAP ([evidence](https://thirdpartyindex.com/evidence/212235)) - 2026-11-04: Added certification: ISO 22301 ([evidence](https://thirdpartyindex.com/evidence/212235)) - 2026-11-04: Added certification: ISO/IEC 27701 ([evidence](https://thirdpartyindex.com/evidence/212235)) - 2026-11-04: Added certification: SOC 1 ([evidence](https://thirdpartyindex.com/evidence/212235)) - 2026-11-04: Added certification: SOC 2 ([evidence](https://thirdpartyindex.com/evidence/212235)) - 2026-11-03: Removed certification: EU Cloud Code of Conduct ([evidence](https://thirdpartyindex.com/evidence/206515)) - 2026-11-03: Removed certification: ISMAP ([evidence](https://thirdpartyindex.com/evidence/206515)) - 2026-11-03: Removed certification: CSA STAR ([evidence](https://thirdpartyindex.com/evidence/206515)) Feed: https://thirdpartyindex.com/vendors/dropbox/changes.atom The subprocessor list as we read it on any date: https://thirdpartyindex.com/labs/time-machine/dropbox --- Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api