# Estuary Estuary declares [6 subprocessors](https://thirdpartyindex.com/vendors/estuary#subprocessors) in [its subprocessor list](https://estuary.dev/legal/subprocessors), which we last checked on 2026-11-11 ([evidence](https://thirdpartyindex.com/evidence/7635)). They include [Amazon Web Services](https://thirdpartyindex.com/vendors/amazon-web-services), [Google Cloud](https://thirdpartyindex.com/vendors/google-cloud) and [Microsoft](https://thirdpartyindex.com/vendors/microsoft). No published changes since we first read it on 2026-09-23. [4 tracked vendors](https://thirdpartyindex.com/vendors/estuary#used-by) name Estuary as a subprocessor, including [Resend](https://thirdpartyindex.com/vendors/resend), [Salesloft](https://thirdpartyindex.com/vendors/salesloft) and [Clarity](https://thirdpartyindex.com/vendors/clarity). Estuary (estuary.dev): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index. - Page: https://thirdpartyindex.com/vendors/estuary - Documents last verified: 2026-11-11 - Transparency rating: 87/100 (how much it publishes, not how secure it is): Subprocessor list 30/30; Processing locations 8/8; Purposes 7/7; Data processing addendum 12/12; Trust center 0/8 (not found); Privacy policy 6/6; security.txt 6/6; Security page 5/5; Status page 5/5; Vulnerability disclosure 0/5 (not found); Pages still reachable 8/8 - Supply chain: relies on 6 tracked vendors directly, 70 within two hops, 308 within three; 4 tracked vendors rely on it directly, 144 within two hops, 538 within three - Cite as: Estuary, Third Party Index, https://thirdpartyindex.com/vendors/estuary (data CC BY 4.0) ## Documents | Document | URL | Last verified | Last changed | |---|---|---|---| | Subprocessor list | https://estuary.dev/legal/subprocessors | 2026-11-11 | 2026-09-23 | | Data processing addendum | https://estuary.dev/legal/dpa | 2026-11-11 | 2026-09-23 | | Privacy policy | https://estuary.dev/privacy-policy/ | 2026-11-11 | 2026-09-23 | | Terms | https://estuary.dev/terms/ | 2026-11-11 | 2026-09-23 | | Security page | https://estuary.dev/security/ | 2026-11-11 | 2026-10-21 | | security.txt | https://estuary.dev/.well-known/security.txt | 2026-11-11 | 2026-09-23 | | Status page | https://status.estuary.dev/ | 2026-11-11 | 2026-11-01 | ## Subprocessors (6) As its own list states them. | Subprocessor | Purpose | Location | Listed since | |---|---|---|---| | [Amazon Web Services](https://thirdpartyindex.com/vendors/amazon-web-services.md) | Cloud Infrastructure | Customer Selected Regions | 2026-09-23 | | [Google Cloud Platform](https://thirdpartyindex.com/vendors/google-cloud.md) | Cloud Infrastructure | US and Customer Selected Regions | 2026-09-23 | | [Logrocket](https://thirdpartyindex.com/vendors/logrocket.md) | Customer Support | United States | 2026-09-23 | | [Microsoft Azure](https://thirdpartyindex.com/vendors/microsoft.md) | Cloud Infrastructure | Customer Selected Regions | 2026-09-23 | | [Pylon](https://thirdpartyindex.com/vendors/pylon.md) | Customer Support | United States | 2026-09-23 | | [Supabase](https://thirdpartyindex.com/vendors/supabase.md) | Database & API Services | United States | 2026-09-23 | Read from ([evidence](https://thirdpartyindex.com/evidence/7635)). CSV: https://thirdpartyindex.com/vendors/estuary/subprocessors.csv ## Web Technologies Estuary's homepage made 86 requests to 14 domains, and 5 services controlled by another company. Loaded on 2026-11-10 by a browser that accepted nothing; other visits may load more or less. What a page loads is not a list of who receives customer data. 5 third parties by category: Analytics 3 (HubSpot, Google Cloud; usually detected as Analytics: posthog); Cookie compliance 1 (CookieFirst); Documentation 1 (Zendesk). Each company that appears controlled by another organization is counted once, under the main category of the technologies detected from it on this homepage or, when none was, the category recorded from the company's own page (marked reviewed) or else the one it is usually detected as on other published homepages (marked as such); unclassified: none of these. ### Third parties (5) - Zendesk: 14 requests to zdassets.com, zendesk.com; Zendesk, Zendesk Widget - HubSpot: 11 requests to hubspot.com, hscollectedforms.net, hs-analytics.net, hs-banner.com, hs-scripts.com, hsadspixel.net, hsforms.com, hubapi.com; HubSpot, HubSpot Analytics - CookieFirst: 9 requests to cookiefirst.com; CookieFirst - posthog: 2 requests to posthog.com - Google Cloud: 1 request to googletagmanager.com; Google Analytics, Google Tag Manager (its subprocessor list names it too) ### First party (1) - Estuary: 49 requests to estuary.dev; Emotion, Firebase, Gatsby 5.15.0, HSTS, HTTP/3, Linkedin Ads, MUI, Material UI, Open Graph, PostHog, React, Webpack 3 tracked companies loaded by the homepage are not in Estuary's subprocessor list. A website can use a service without it processing customer data. ## Subprocessor of (4) Tracked vendors whose own subprocessor lists name it, and what they say they use it for. - [Clarity](https://thirdpartyindex.com/vendors/clarity.md) - [Gem](https://thirdpartyindex.com/vendors/gem.md): Data warehouse & analytics infrastructure - [Resend](https://thirdpartyindex.com/vendors/resend.md): Data pipeline - [Salesloft](https://thirdpartyindex.com/vendors/salesloft.md): Data integration and data change management platform that is used to bring various internal systems data to a central data repository; Service provider ## Service status Incidents it reported on its own status page. - Last 90 days: 5 reported incidents (1 major or critical, 4 minor, 0 with no impact stated) - Typical time to resolve: 1 h 45 min - Status page last read: 2026-11-12 - 2026-10-26: Publication and reporting delays (minor) - 2026-10-19: Reporting Delays on AWS aws-us-east-1 Data Plane (minor) - 2026-10-15: Reporting, inferred schemas, and GCP-us-central1 c2 outage (major) - 2026-10-06: Stats Delayed (minor) - 2026-09-03: Delayed Data for Redshift Materializations (minor) - 2026-07-29: An individual private data plane is experiencing no data movement (major) - 2026-07-22: Dekaf materializations stalled on public AWS us-east-1 & GCP us-central1 data planes (major) - 2026-07-12: Stalled Tasks in GCP Public Dataplane (minor) ## Incidents reported by Estuary's subprocessors Incidents reported in the last 30 days on their own status pages by 3 vendors Estuary lists as subprocessors. A subprocessor list names a company, not the service an incident touched. - 2026-11-11: [Supabase](https://thirdpartyindex.com/vendors/supabase#status), which Estuary lists as a subprocessor, reported Project Lifecycle Issues in ap-northeast-1 (minor) - 2026-11-11: [Pylon](https://thirdpartyindex.com/vendors/pylon#status), which Estuary lists as a subprocessor, reported Slack Integration Connection Issues (major) - 2026-11-08: [Supabase](https://thirdpartyindex.com/vendors/supabase#status), which Estuary lists as a subprocessor, reported Interruption in connections to Supavisor in eu-west-2 (no impact stated) - 2026-11-06: [Supabase](https://thirdpartyindex.com/vendors/supabase#status), which Estuary lists as a subprocessor, reported Increased Errors with Project Lifecycle Operations in US-West-2 (minor) - 2026-11-05: [Supabase](https://thirdpartyindex.com/vendors/supabase#status), which Estuary lists as a subprocessor, reported Intermittent 502/503 errors for pg\_net calls to Edge Functions (minor) - 2026-11-05: [Pylon](https://thirdpartyindex.com/vendors/pylon#status), which Estuary lists as a subprocessor, reported Delay in Analytics Data (minor) - 2026-11-04: [Supabase](https://thirdpartyindex.com/vendors/supabase#status), which Estuary lists as a subprocessor, reported Storage issues in us-east-1 and eu-central-1 (minor) - 2026-11-04: [Pylon](https://thirdpartyindex.com/vendors/pylon#status), which Estuary lists as a subprocessor, reported Inbound Email Delays (minor) - 2026-11-04: [Supabase](https://thirdpartyindex.com/vendors/supabase#status), which Estuary lists as a subprocessor, reported Intermittent errors on Supavisor Shared Pooler in us-east-2 (minor) - 2026-11-03: [Supabase](https://thirdpartyindex.com/vendors/supabase#status), which Estuary lists as a subprocessor, reported Management API Postgres config updates overwriting previous updates (no impact stated) - 2026-11-02: [Supabase](https://thirdpartyindex.com/vendors/supabase#status), which Estuary lists as a subprocessor, reported Storage uploads failing in us-east-1 (minor) - 2026-10-31: [Supabase](https://thirdpartyindex.com/vendors/supabase#status), which Estuary lists as a subprocessor, reported PG15 -> PG17 Upgrade Failures (no impact stated) - 2026-10-30: [Supabase](https://thirdpartyindex.com/vendors/supabase#status), which Estuary lists as a subprocessor, reported Logs degraded in multiple regions (no impact stated) - 2026-10-28: [Supabase](https://thirdpartyindex.com/vendors/supabase#status), which Estuary lists as a subprocessor, reported Delayed Log Delivery from 14:10 - 15:30 UTC (minor) - 2026-10-24: [LogRocket](https://thirdpartyindex.com/vendors/logrocket#status), which Estuary lists as a subprocessor, reported Analytics Ingestion Delays (minor) - 2026-10-22: [Supabase](https://thirdpartyindex.com/vendors/supabase#status), which Estuary lists as a subprocessor, reported Log Drain Issues (minor) - 2026-10-22: [Supabase](https://thirdpartyindex.com/vendors/supabase#status), which Estuary lists as a subprocessor, reported Elevated Mgmt API Error Rates in Multiple Regions (minor) - 2026-10-22: [Supabase](https://thirdpartyindex.com/vendors/supabase#status), which Estuary lists as a subprocessor, reported Elevated Mgmt API Error Rates in Multiple Regions (major) - 2026-10-22: [Supabase](https://thirdpartyindex.com/vendors/supabase#status), which Estuary lists as a subprocessor, reported Project lifecycle operation errors in the EU region (major) - 2026-10-21: [Supabase](https://thirdpartyindex.com/vendors/supabase#status), which Estuary lists as a subprocessor, reported Intermittent connection errors via the connection pooler in us-east-1 (no impact stated) - 2026-10-21: [Supabase](https://thirdpartyindex.com/vendors/supabase#status), which Estuary lists as a subprocessor, reported Project lifecycle operations such as project creation, pausing, and restoration, in all regions (major) - 2026-10-20: [Supabase](https://thirdpartyindex.com/vendors/supabase#status), which Estuary lists as a subprocessor, reported Projects stuck in restarting state (no impact stated) - 2026-10-19: [Supabase](https://thirdpartyindex.com/vendors/supabase#status), which Estuary lists as a subprocessor, reported Support Form Errors (minor) - 2026-10-17: [Supabase](https://thirdpartyindex.com/vendors/supabase#status), which Estuary lists as a subprocessor, reported Project creation errors ap-ne1 (minor) - 2026-10-14: [Pylon](https://thirdpartyindex.com/vendors/pylon#status), which Estuary lists as a subprocessor, reported Platform loading issues (no impact stated) The subprocessor list as we read it on any date: https://thirdpartyindex.com/labs/time-machine/estuary ## Security contact From its security.txt (https://estuary.dev/.well-known/security.txt) ([evidence](https://thirdpartyindex.com/evidence/7643)): - Contact: mailto:security@estuary.dev - Disclosure policy: https://raw.githubusercontent.com/estuary/.github/refs/heads/main/SECURITY.md - Languages: en - Valid until 2027-09-07 --- Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api