# Exa Labs

We monitor the [subprocessor list Exa Labs publishes](https://trust.exa.ai/subprocessors), which we last checked on 2026-11-11, but have not read any entries from it. [34 tracked vendors](https://thirdpartyindex.com/vendors/exa-labs#used-by) name Exa Labs as a subprocessor, including [HubSpot](https://thirdpartyindex.com/vendors/hubspot), [Vercel](https://thirdpartyindex.com/vendors/vercel) and [DigitalOcean](https://thirdpartyindex.com/vendors/digitalocean).

Exa Labs (exa.ai): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/exa-labs
- Documents last verified: 2026-11-12
- Transparency rating: 44/100 (how much it publishes, not how secure it is): Subprocessor list 0/30 (published; no entries could be read); Processing locations 0/8 (no list); Purposes 0/7 (no list); Data processing addendum 12/12; Trust center 8/8; Privacy policy 6/6; security.txt 0/6 (not found); Security page 5/5; Status page 5/5; Vulnerability disclosure 0/5 (not found); Pages still reachable 8/8
- Supply chain: relies on 0 tracked vendors directly, 0 within two hops, 0 within three; 34 tracked vendors rely on it directly, 1064 within two hops, 2534 within three
- Cite as: Exa Labs, Third Party Index, https://thirdpartyindex.com/vendors/exa-labs (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Trust center | https://trust.exa.ai/ | 2026-11-11 | 2026-11-11 |
| Subprocessor list | https://trust.exa.ai/subprocessors | 2026-11-11 | 2026-10-03 |
| Data processing addendum | https://exa.ai/dpa | 2026-11-12 | 2026-10-31 |
| Privacy policy | https://exa.ai/privacy-policy | 2026-11-11 | 2026-10-31 |
| Terms | https://exa.ai/assets/Exa\_Labs\_Terms\_of\_Service.pdf | 2026-11-11 | 2026-09-22 |
| Security page | https://exa.ai/security | 2026-11-11 | 2026-10-31 |
| Status page | https://status.exa.ai/ | 2026-11-11 | 2026-11-03 |

## Subprocessors (0)

No subprocessor list has been found or read for this vendor.

## Compliance

As its trust center lists them.

- Audited: SOC 2 Type II ([evidence](https://thirdpartyindex.com/evidence/13853))
- Claimed: HIPAA ([evidence](https://thirdpartyindex.com/evidence/13853))

## Web Technologies

Exa Labs's homepage made 172 requests to 29 domains, 14 services controlled by another company, and 2 domains not identified. Loaded on 2026-11-04 by a browser that accepted nothing; other visits may load more or less. What a page loads is not a list of who receives customer data.

14 third parties by category: Advertising 5 (Google Cloud, Freebuff, Inc., Reddit, Inc., X Corp., Gravity); Marketing automation 2 (GetVector, Inc., HubSpot); CDN 2 (jsDelivr; reviewed: imgix); Analytics 1 (LinkedIn); Affiliate programs 1 (Tolt); Form builders 1 (Default); Issue trackers 1 (usually detected as Issue trackers: Sentry); Security 1 (usually detected as Security: Amazon Web Services). Each company that appears controlled by another organization is counted once, under the main category of the technologies detected from it on this homepage or, when none was, the category recorded from the company's own page (marked reviewed) or else the one it is usually detected as on other published homepages (marked as such); unclassified: none of these.

### Third parties (14)

- GetVector, Inc.: 13 requests to vector.co; Vector
- Google Cloud: 12 requests to doubleclick.net, google.com, googleadservices.com, googletagmanager.com; DoubleClick Floodlight, Google Analytics, Google Tag Manager
- imgix: 9 requests to imgix.net
- HubSpot: 7 requests to hscollectedforms.net, hs-analytics.net, hs-banner.com, hs-scripts.com, hsforms.com, hubspot.com; HubSpot
- Freebuff, Inc.: 5 requests to freebuff.com; Freebuff Ads
- LinkedIn: 3 requests to linkedin.com, licdn.com; Linkedin Insight Tag
- Reddit, Inc.: 3 requests to reddit.com, redditstatic.com; Reddit Ads
- Sentry: 3 requests to sentry.io
- X Corp.: 3 requests to ads-twitter.com, t.co, twitter.com; Twitter Ads
- Amazon Web Services: 1 request to s3-us-west-2.amazonaws.com
- Default: 1 request to default.com; Default (default.com)
- Gravity: 1 request to trygravity.ai; Gravity Ads
- Tolt: 1 request to tolt.io; Tolt
- jsDelivr: 1 request to jsdelivr.net; jsDelivr

### Unknown (2)

Domains not identified yet: cr-relay.com, usbrowserspeed.com

### First party (1)

- Exa Labs: 106 requests to exa.ai; HSTS, Lucide, Next.js 16.2.6, Next.js App Router, Open Graph, Priority Hints, React, Sentry, Vercel, Vercel Speed Insights, Webpack

8 tracked companies loaded by the homepage are not in Exa Labs's subprocessor list. A website can use a service without it processing customer data.

## Subprocessor of (34)

Tracked vendors whose own subprocessor lists name it, and what they say they use it for.

- [Aaru](https://thirdpartyindex.com/vendors/aaru.md): Engineering; Knowledge / web search
- [Anaconda](https://thirdpartyindex.com/vendors/anaconda.md): Built-in search provider; may subprocess user-provided data
- [Apollo](https://thirdpartyindex.com/vendors/apollo.md)
- [Arrows](https://thirdpartyindex.com/vendors/arrows.md): Web scraping and search; Web search and content retrieval for AI-powered features
- [AutogenAI](https://thirdpartyindex.com/vendors/autogenai.md): Internet-based searching & retrieval (Zero Data Retention; transient in-memory processing)
- [Bento](https://thirdpartyindex.com/vendors/bentonow-com.md): Signup screening: researches the domain of a new signup's email
- [Browser Use](https://thirdpartyindex.com/vendors/browser-use.md)
- [Clarify](https://thirdpartyindex.com/vendors/clarify.md): Web Search
- [ClickUp™](https://thirdpartyindex.com/vendors/clickuptm.md): Application AI Functionality
- [CodeRabbit](https://thirdpartyindex.com/vendors/coderabbit.md): AI-powered web search services
- [Cursor](https://thirdpartyindex.com/vendors/cursor.md): Web Search; Web search API provider for retrieving web content and search results.
- [Day AI](https://thirdpartyindex.com/vendors/day-ai.md): Web search & enrichment
- [DigitalOcean](https://thirdpartyindex.com/vendors/digitalocean.md): Web based search
- [Factors.ai](https://thirdpartyindex.com/vendors/factors-ai.md): Ongoing
- [Fireworks](https://thirdpartyindex.com/vendors/fireworks.md): Web search provider (Fireworks Nexus); \[Exa Trust Center\](
- [Gamma](https://thirdpartyindex.com/vendors/gamma.md): Search functionality
- [Glean](https://thirdpartyindex.com/vendors/glean.md): Web crawling and rendering
- [Groq](https://thirdpartyindex.com/vendors/groq.md): Search API services
- [HubSpot](https://thirdpartyindex.com/vendors/hubspot.md): Web Search Results
- [Intapp](https://thirdpartyindex.com/vendors/intapp.md): Web grounding services
- [Legora](https://thirdpartyindex.com/vendors/legora.md): Web Search
- [Levenza](https://thirdpartyindex.com/vendors/levenza.md): Web Search
- [Modem](https://thirdpartyindex.com/vendors/modem.md): Web search provider.
- [monday.com](https://thirdpartyindex.com/vendors/monday-com.md)
- [Nomic](https://thirdpartyindex.com/vendors/nomic.md): Web search capabilities.
- [Notion](https://thirdpartyindex.com/vendors/notion-com.md): Service provider for providing web search results.
- [Nutshell](https://thirdpartyindex.com/vendors/nutshell.md): AI services; Webpage crawling for chatbot context knowledge documents
- [RingCentral](https://thirdpartyindex.com/vendors/ringcentral.md): Search engine API
- [Synthesia](https://thirdpartyindex.com/vendors/synthesia-io.md): Web search and content retrieval based on queries submitted within the product.
- [Trellis Tech](https://thirdpartyindex.com/vendors/trellis-tech.md): AI-powered semantic web search used by AI agents for research and information retrieval
- [Vercel](https://thirdpartyindex.com/vendors/vercel.md): AI search services
- [Viktor](https://thirdpartyindex.com/vendors/viktor.md): Web search for research tasks
- [WebFX](https://thirdpartyindex.com/vendors/webfx.md): Used to enhance web search and content retrieval.
- [Writer](https://thirdpartyindex.com/vendors/writer.md): Web Search

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api