# Ema Ema declares [15 subprocessors](https://thirdpartyindex.com/vendors/ema#subprocessors) in [its subprocessor list](https://trust.ema.ai/subprocessors), which we last checked on 2026-11-11 ([evidence](https://thirdpartyindex.com/evidence/204053)). They include [Google Cloud](https://thirdpartyindex.com/vendors/google-cloud), [Microsoft](https://thirdpartyindex.com/vendors/microsoft) and [Cloudflare](https://thirdpartyindex.com/vendors/cloudflare). No published changes since we first read it on 2026-11-03. [1 tracked vendor](https://thirdpartyindex.com/vendors/ema#used-by), [Envoy Global](https://thirdpartyindex.com/vendors/envoy-global), names Ema as a subprocessor. Ema (ema.ai): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index. - Page: https://thirdpartyindex.com/vendors/ema - Documents last verified: 2026-11-11 - Transparency rating: 85/100 (how much it publishes, not how secure it is): Subprocessor list 30/30; Processing locations 8/8; Purposes 7/7; Data processing addendum 12/12; Trust center 8/8; Privacy policy 6/6; security.txt 6/6; Security page 0/5 (not found); Status page 0/5 (not found); Vulnerability disclosure 0/5 (not found); Pages still reachable 8/8 - Supply chain: relies on 13 tracked vendors directly, 137 within two hops, 462 within three; 1 tracked vendors rely on it directly, 1 within two hops, 1 within three - Cite as: Ema, Third Party Index, https://thirdpartyindex.com/vendors/ema (data CC BY 4.0) ## Documents | Document | URL | Last verified | Last changed | |---|---|---|---| | Trust center | https://trust.ema.ai/ | 2026-11-11 | 2026-11-11 | | Subprocessor list | https://trust.ema.ai/subprocessors | 2026-11-11 | 2026-11-03 | | Data processing addendum | https://www.ema.ai/dpa | 2026-11-11 | 2026-11-07 | | Privacy policy | https://www.ema.ai/privacy-policy | 2026-11-11 | 2026-11-07 | | security.txt | https://www.ema.ai/.well-known/security.txt | 2026-11-11 | 2026-11-03 | ## Subprocessors (15) As its own list states them. | Subprocessor | Purpose | Location | Listed since | |---|---|---|---| | [Atlassian Jira](https://thirdpartyindex.com/vendors/atlassian.md) | Ticketing | USA | 2026-11-03 | | [Cloudflare](https://thirdpartyindex.com/vendors/cloudflare.md) | Protects our website and services from malicious activity, spam, and other cyber threats. | USA | 2026-11-03 | | [Deepgram](https://thirdpartyindex.com/vendors/deepgram.md) (AI model provider: Deepgram) | Automatic Speech Recognition | USA | 2026-11-03 | | [Fathom](https://thirdpartyindex.com/vendors/fathom.md) | Meeting recording, transcription and note-taking | United States | 2026-11-03 | | [GitHub](https://thirdpartyindex.com/vendors/github.md) | Code, Version Control | USA | 2026-11-03 | | [Google Cloud Platform](https://thirdpartyindex.com/vendors/google-cloud.md) | Cloud computing | USA | 2026-11-03 | | [Google Drive](https://thirdpartyindex.com/vendors/google-cloud.md) | Storing and sharing documents | USA | 2026-11-03 | | [Google Workspace](https://thirdpartyindex.com/vendors/google-cloud.md) | Calendar, Email, Meetings | USA | 2026-11-03 | | [Merge.dev](https://thirdpartyindex.com/vendors/merge-api.md) | Integration | USA | 2026-11-03 | | [Microsoft Azure](https://thirdpartyindex.com/vendors/microsoft.md) | Cloud Computing | USA | 2026-11-03 | | [Paragon](https://thirdpartyindex.com/vendors/forge-technology-inc-aka-paragon.md) | Integration | USA | 2026-11-03 | | [Simplismart](https://thirdpartyindex.com/vendors/simplismart.md) | Model Hosting | India | 2026-11-03 | | [Slack](https://thirdpartyindex.com/vendors/slack.md) | Communication | USA | 2026-11-03 | | [Statsig](https://thirdpartyindex.com/vendors/statsig.md) | Monitoring and Analytics | USA | 2026-11-03 | | [Work OS](https://thirdpartyindex.com/vendors/workos.md) | Authentication Provider for magic links | USA | 2026-11-03 | Read from ([evidence](https://thirdpartyindex.com/evidence/204053)). CSV: https://thirdpartyindex.com/vendors/ema/subprocessors.csv AI model providers (or a cloud provider's AI model service) among these entries: 1. All vendors that list one: https://thirdpartyindex.com/ai ## Compliance As its trust center lists them. - Audited: SOC 2 Type II, ISO/IEC 27001, ISO/IEC 27017, ISO/IEC 27701, ISO/IEC 42001, PCI DSS, CSA STAR, Cyber Essentials Plus ([evidence](https://thirdpartyindex.com/evidence/204059)) - Claimed: HIPAA, GDPR, NIST SP 800-171, NIST CSF ([evidence](https://thirdpartyindex.com/evidence/204059)) ## Web Technologies Ema's homepage made 156 requests to 24 domains, and 13 services controlled by another company. Loaded on 2026-11-05 by a browser that accepted nothing; other visits may load more or less. What a page loads is not a list of who receives customer data. 13 third parties by category: Analytics 5 (HubSpot, LinkedIn, Cloudflare; reviewed: Mixpanel; usually detected as Analytics: posthog); Advertising 3 (Google Cloud, Podscribe; usually detected as Advertising: Microsoft); Marketing automation 1 (Apollo); CMS 1 (usually detected as CMS: Sanity); Email 1 (LiveIntent); Security 1 (DataGrail); UI frameworks 1 (Tailwind Labs). Each company that appears controlled by another organization is counted once, under the main category of the technologies detected from it on this homepage or, when none was, the category recorded from the company's own page (marked reviewed) or else the one it is usually detected as on other published homepages (marked as such); unclassified: none of these. ### Third parties (13) - Google Cloud: 10 requests to google.com, doubleclick.net, googletagmanager.com; DoubleClick Floodlight, Google Analytics, Google Tag Manager (its subprocessor list names it too) - Microsoft: 7 requests to clarity.ms (its subprocessor list names it too) - posthog: 6 requests to posthog.com - HubSpot: 4 requests to hs-analytics.net, hs-banner.com, hs-scripts.com, hubspot.com; HubSpot, HubSpot Analytics - LiveIntent: 4 requests to liadm.com; LiveIntent - Mixpanel: 4 requests to mixpanel.com, mxpnl.com - Apollo: 3 requests to aplo-evnt.com, apollo.io; Apollo.io - LinkedIn: 3 requests to linkedin.com, licdn.com; Linkedin Insight Tag - Podscribe: 3 requests to pdscrb.com, d34r8q7sht0t9k.cloudfront.net; Podscribe - Tailwind Labs: 2 requests to tailwindcss.com; Tailwind CSS - Cloudflare: 1 request to cloudflareinsights.com; Cloudflare Browser Insights (its subprocessor list names it too) - DataGrail: 1 request to datagrail.io; DataGrail - Sanity: 1 request to sanity.io ### First party (1) - Ema: 107 requests to ema.ai, ema.co; Cloudflare, Framer Motion, HSTS, Microsoft Clarity, Next.js 15.5.22, Open Graph, PostHog, Priority Hints, React, Sanity, Sanity.io, Vercel, Vercel Analytics, Webpack, core-js 3.50.0 7 tracked companies loaded by the homepage are not in Ema's subprocessor list. A website can use a service without it processing customer data. ## Subprocessor of (1) Tracked vendors whose own subprocessor lists name it, and what they say they use it for. - [Envoy Global](https://thirdpartyindex.com/vendors/envoy-global.md): Workflow optimization ## Incidents reported by Ema's subprocessors Incidents reported in the last 30 days on their own status pages by 5 vendors Ema lists as subprocessors. A subprocessor list names a company, not the service an incident touched. - 2026-11-11: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Ema lists as a subprocessor, reported Impact across multiple GitHub products including Actions, Pages, and Copilot products. (critical) - 2026-11-11: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Ema lists as a subprocessor, reported Incident with Webhooks (minor) - 2026-11-10: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Ema lists as a subprocessor, reported Incident with Git Operations and Pull Requests (critical) - 2026-11-10: [Deepgram](https://thirdpartyindex.com/vendors/deepgram#status), which Ema lists as a subprocessor, reported Flux TTS high latency and websocket disconnects (major) - 2026-11-09: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Ema lists as a subprocessor, reported Degraded availability for GPT-5.3 Codex and GPT-5.6 models in Copilot (major) - 2026-11-09: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Ema lists as a subprocessor, reported Incident with Actions and Checks API (critical) - 2026-11-09: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Ema lists as a subprocessor, reported Incident with Webhooks and Actions (major) - 2026-11-09: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Ema lists as a subprocessor, reported Increased timeouts due to surge in anonymous users (minor) - 2026-11-08: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Ema lists as a subprocessor, reported Increase in timeouts for some unauthenticated users (minor) - 2026-11-07: [WorkOS](https://thirdpartyindex.com/vendors/workos#status), which Ema lists as a subprocessor, reported Intermittent 503 errors in certain regions (minor) - 2026-11-05: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Ema lists as a subprocessor, reported Degraded performance for multiple GitHub services (minor) - 2026-11-05: [Deepgram](https://thirdpartyindex.com/vendors/deepgram#status), which Ema lists as a subprocessor, reported Elevated errors for Flux streaming STT and Voice Agent sessions (no impact stated) - 2026-11-05: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Ema lists as a subprocessor, reported Incident with Actions (minor) - 2026-11-04: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Ema lists as a subprocessor, reported Incident with Actions (major) - 2026-11-04: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Ema lists as a subprocessor, reported Incident with Actions and Pages (major) - 2026-11-04: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Ema lists as a subprocessor, reported Incident with Pull Requests, Git Operations and Issues (major) - 2026-11-04: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Ema lists as a subprocessor, reported Increased task-related errors for Copilot Mission Control (minor) - 2026-11-03: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Ema lists as a subprocessor, reported Incident with Git Operations (minor) - 2026-11-03: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Ema lists as a subprocessor, reported Incident with API, Git, and Copilot requests (minor) - 2026-11-02: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Ema lists as a subprocessor, reported Elevated errors on GPT-5.4 Nano (minor) - 2026-10-30: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Ema lists as a subprocessor, reported Incident with Dependabot (minor) - 2026-10-30: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Ema lists as a subprocessor, reported Incident with Actions, Pages, and Webhooks (major) - 2026-10-30: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Ema lists as a subprocessor, reported Disruption with GitHub services (critical) - 2026-10-29: [Paragon](https://thirdpartyindex.com/vendors/forge-technology-inc-aka-paragon#status), which Ema lists as a subprocessor, reported Degraded Performance - Cloudflare Endpoint Latency (minor) - 2026-10-29: [WorkOS](https://thirdpartyindex.com/vendors/workos#status), which Ema lists as a subprocessor, reported SSO Profile API Timeouts (major) - 2026-10-29: [Paragon](https://thirdpartyindex.com/vendors/forge-technology-inc-aka-paragon#status), which Ema lists as a subprocessor, reported Paragon Dashboard Errors (major) - 2026-10-29: [Deepgram](https://thirdpartyindex.com/vendors/deepgram#status), which Ema lists as a subprocessor, reported Elevated errors from authentication services at one datacenter (minor) - 2026-10-29: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Ema lists as a subprocessor, reported Disruption with Copilot Cloud services (minor) - 2026-10-28: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Ema lists as a subprocessor, reported Disruption with some Copilot services (critical) - 2026-10-27: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Ema lists as a subprocessor, reported Elevated 404s for GitHub App s2s tokens in git/API (no impact stated) - 2026-10-26: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Ema lists as a subprocessor, reported Incident with Actions, Issues, API Requests and Pull Requests (minor) - 2026-10-23: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Ema lists as a subprocessor, reported Grok 4.6 and Grok 4.7 Service Issues (minor) - 2026-10-23: [Paragon](https://thirdpartyindex.com/vendors/forge-technology-inc-aka-paragon#status), which Ema lists as a subprocessor, reported US Cloud: Degraded Service (Cloudflare Incident) - Recurrence (minor) - 2026-10-23: [Paragon](https://thirdpartyindex.com/vendors/forge-technology-inc-aka-paragon#status), which Ema lists as a subprocessor, reported US Cloud: Degraded Service (Cloudflare Incident) (major) - 2026-10-23: [WorkOS](https://thirdpartyindex.com/vendors/workos#status), which Ema lists as a subprocessor, reported Elevated errors across SSO and AuthKit (major) - 2026-10-23: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Ema lists as a subprocessor, reported Disruption with Dependabot Alerts (minor) - 2026-10-23: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Ema lists as a subprocessor, reported Delayed Actions status check results (minor) - 2026-10-22: [Deepgram](https://thirdpartyindex.com/vendors/deepgram#status), which Ema lists as a subprocessor, reported Elevated Latency and Errors for Batch STT (minor) - 2026-10-22: [Deepgram](https://thirdpartyindex.com/vendors/deepgram#status), which Ema lists as a subprocessor, reported Elevated 5xx Errors (major) - 2026-10-22: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Ema lists as a subprocessor, reported Project updates delayed (minor) - 2026-10-22: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Ema lists as a subprocessor, reported Incident with Actions (minor) - 2026-10-21: [Merge API](https://thirdpartyindex.com/vendors/merge-api#status), which Ema lists as a subprocessor, reported Intermittent 429s (no impact stated) - 2026-10-21: [Merge API](https://thirdpartyindex.com/vendors/merge-api#status), which Ema lists as a subprocessor, reported Temporary Integration Downtime (no impact stated) - 2026-10-21: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Ema lists as a subprocessor, reported Delays for Pull Requests and Webhook deliveries (critical) - 2026-10-19: [WorkOS](https://thirdpartyindex.com/vendors/workos#status), which Ema lists as a subprocessor, reported Elevated AuthKit Error Rates (major) - 2026-10-19: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Ema lists as a subprocessor, reported Degraded availability for GitHub Actions, GitHub Pages and Webhooks (critical) - 2026-10-15: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Ema lists as a subprocessor, reported CCA Automations are delayed when starting an Automation (minor) - 2026-10-15: [WorkOS](https://thirdpartyindex.com/vendors/workos#status), which Ema lists as a subprocessor, reported Radar SMS challenge failures for phone numbers in mainland China (+86) (major) - 2026-10-14: [Deepgram](https://thirdpartyindex.com/vendors/deepgram#status), which Ema lists as a subprocessor, reported Elevated 503 errors for bath Flux TTS requests (minor) - 2026-10-13: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Ema lists as a subprocessor, reported \[Retroactive\] Actions workflow run logs delayed (minor) - 2026-10-13: [Deepgram](https://thirdpartyindex.com/vendors/deepgram#status), which Ema lists as a subprocessor, reported Elevated 503 errors for Aura-2 TTS (minor) The subprocessor list as we read it on any date: https://thirdpartyindex.com/labs/time-machine/ema ## Security contact From its security.txt (https://www.ema.ai/.well-known/security.txt) ([evidence](https://thirdpartyindex.com/evidence/204051)): - Contact: mailto:security@ema.co - Disclosure policy: https://www.ema.ai/privacy-policy - Security jobs: https://www.ema.ai/careers - Languages: en - Valid until 2027-09-01 --- Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api