# Evervault

Evervault (evervault.com): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/evervault
- Documents last verified: 2026-09-30
- Transparency rating: 78/100 (how much it publishes, not how secure it is)
- Cite as: Evervault, Third Party Index, https://thirdpartyindex.com/vendors/evervault (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Trust center | https://trust.evervault.com/ | 2026-09-30 | 2026-09-30 |
| Subprocessor list | https://trust.evervault.com/subprocessors | 2026-09-30 | 2026-09-30 |
| Privacy policy | https://evervault.com/legal/privacy | 2026-09-30 | 2026-09-30 |
| Terms | https://evervault.com/legal/terms | 2026-09-30 | 2026-09-30 |
| security.txt | https://evervault.com/.well-known/security.txt | 2026-09-30 | 2026-09-30 |
| Status page | https://status.evervault.com/ | 2026-09-30 | 2026-09-30 |

## Subprocessors (13)

As its own list states them.

| Subprocessor | Purpose | Location | Listed since |
|---|---|---|---|
| 3DSecure.io | 3D Secure Server provider; Failover provider for 3D-Secure authentications | EU | 2026-09-30 |
| Alguna | Invoicing | US | 2026-09-30 |
| [Amazon Web Services](https://thirdpartyindex.com/vendors/amazon-web-services.md) | AWS is our primary CSP, providing multi-AZ, Multi-Region services. | US East, EU West | 2026-09-30 |
| [Auth0](https://thirdpartyindex.com/vendors/okta.md) | Auth0 is our user authentication provider. | US | 2026-09-30 |
| Clone Systems | Vulnerability Scanning; Vulnerability scanning service (PCI ASV) | EU | 2026-09-30 |
| [Cloudflare](https://thirdpartyindex.com/vendors/cloudflare.md) | Cloudflare provide Zero Trust Network Access and DNS Security | US, Global | 2026-09-30 |
| [Datadog](https://thirdpartyindex.com/vendors/datadog.md) | Cloud monitoring | US | 2026-09-30 |
| [GitHub](https://thirdpartyindex.com/vendors/github.md) | GitHub is a web-based software development platform built on the Git version control software. Primarily used for software code, GitHub offers the distributed version control and source code management functionality of Git with additional features and enhancements. Specifically, it provides access control and several collaboration features including bug tracking, feature requests, task management, and wikis.; Version control | US, EU | 2026-09-30 |
| [Google Workspace](https://thirdpartyindex.com/vendors/google-cloud.md) | Google Workspace | US, EU | 2026-09-30 |
| [Hubspot](https://thirdpartyindex.com/vendors/hubspot.md) | CRM; Marketing | US, EU | 2026-09-30 |
| [SendGrid](https://thirdpartyindex.com/vendors/sendgrid.md) | Email Service; SendGrid is an email service provider allowing Evervault to send transactional emails to our users. | US, EU | 2026-09-30 |
| [Vercel](https://thirdpartyindex.com/vendors/vercel.md) | Cloud provider; Hosting of website, UI, and docs | US | 2026-09-30 |
| Visa Acceptance Solutions | Payment Services; Payments Services | US, EU | 2026-09-30 |

Read from ([evidence](https://thirdpartyindex.com/evidence/19643)). CSV: https://thirdpartyindex.com/vendors/evervault/subprocessors.csv

### Its own affiliates (1)

- Evervault Inc. (US; USA)

## Compliance

As its trust center lists them.

- Audited: SOC 2, PCI DSS ([evidence](https://thirdpartyindex.com/evidence/19642))
- Claimed: HIPAA, GDPR ([evidence](https://thirdpartyindex.com/evidence/19642))

## Listed as a subprocessor by (0)

No tracked vendor lists it.

## Service status

Incidents it reported on its own status page.

- Last 90 days: 7 reported incidents (5 major or critical, 2 minor, 0 with no impact stated)
- Typical time to resolve: 2 h 23 min
- 2026-09-24: Delay on Logs on the dashboard (minor)
- 2026-09-03: Network Token Service Degradation \[Mastercard\] (minor)
- 2026-08-19: Mastercard network token provisioning degradation (major)
- 2026-08-07: Increase error in Enclave attestations (major)
- 2026-08-07: Increased errors on Configuration API (major)
- 2026-07-15: Mastercard Identity Check Outage (major)
- 2026-07-10: Disrupted Enclave Deployments and Webhook Deliveries (major)
- 2026-03-12: Degraded visibility into Logs (minor)

## Security contact

From its security.txt (https://evervault.com/.well-known/security.txt):

- Contact: mailto:security@evervault.com
- Encryption key: https://evervault.com/pgp.pub
- Security jobs: https://evervault.com/careers

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api