GitGuardian
Certifications and attestations: SOC 2 Type II
Says it complies with: GDPR
As listed on GitGuardian's trust center (evidence) ; reports themselves are usually shared on request.
Transparency
Breakdown
| Subprocessor list | 30 / 30 | |
| Processing locations | 8 / 8 | |
| Purposes | 7 / 7 | |
| Data processing addendum | not found | 0 / 12 |
| Trust center | 8 / 8 | |
| Privacy policy | 6 / 6 | |
| security.txt | 6 / 6 | |
| Security page | not found | 0 / 5 |
| Status page | 5 / 5 | |
| Vulnerability disclosure | not found | 0 / 5 |
| Pages still reachable | 8 / 8 | |
| Total | 78 / 100 |
Only documents we can retrieve count: a page behind a login or a broken link scores nothing.
Badge
For GitGuardian's own site; it updates with the rating.
<a href="https://thirdpartyindex.com/vendors/gitguardian"><img src="https://thirdpartyindex.com/badge/gitguardian.svg" alt="GitGuardian transparency rating on Third Party Index" height="20"></a>[](https://thirdpartyindex.com/vendors/gitguardian)Not listed by any tracked vendor.
Documents
| Document | Verified | Changed | Evidence |
|---|---|---|---|
| Trust center vanta | snapshot | ||
| Subprocessor list | snapshot | ||
| Privacy policy | snapshot | ||
| Terms | snapshot | ||
| security.txt | snapshot | ||
| Status page incident.io | snapshot |
Subprocessors
| Name | Purpose | Location | Listed since |
|---|---|---|---|
| Amazon Web services (AWS) | Cloud Service provider, hosting Platform and Public Monitoring; Generative AI technology used to enhance AI features (AWS Bedrock) | United States & Germany | |
| Amplitude | Product usage data visualization | United States | |
| Anthropic, PBC | AI model hosting and inference used to enhance AI features (Claude); AI assistant used for internal business operations | United States | |
| Auth0 | Authentication service for Public Monitoring customers | United States | |
| Beamer | In-app notifications and surveys | United States | |
| ClickHouse, Inc. | Managed OLAP database for high-scale analytics, search and feature computation across the GitGuardian platform | United States & Europe | |
| Cloudflare Inc. | Web Application Firewall (WAF) | United States & Germany | |
| Coralogix | Observability (log analytics, monitoring, and error tracking) | Sweden | |
| Customer.io | Data analytics allowing user dashboard, behavior monitoring and profile data on Platform and Public Monitoring | United States | |
| Datadog | Workload monitoring | United States | |
| FUEL SASU (BlackFuel) | AI model hosting and inference for open-weight models, used to enhance AI features and for internal engineering operations | United States & Europe | |
| GitHub | Source code management for ggshield | United States | |
| Google LLC | Cloud Infrastructure, email and office applications; AI model hosting and inference used to enhance AI features (Gemini and Vertex AI) | United States & Europe | |
| LangChain, Inc. (LangSmith) | LLM observability and evaluation for Al-assisted features | United States & Europe | |
| OpenAI | AI/ML services for specific AI-driven capabilities | United States | |
| OVH | Cloud and bare metal hosting provider that hosts development servers, and internal services such as our main source code management instance. | Europe & Canada | |
| Railway Corp. | Platform-as-a-service hosting for internal applications and proof-of-concepts | United States & Europe | |
| Segment | Customer data platform | United States | |
| Sendgrid | Email sending service | United States | |
| Sentry | Cloud service monitoring errors and performance for our web applications | United States | |
| Snowflake | Data Warehouse (Dwaas) | United States | |
| Supabase | Backend database services for internal operational tooling | United States | |
| Zendesk | Customer Support Platform | United States & Europe |
Service status
4 incidents in the last 90 days (1 major or critical, 3 minor, 0 with no stated impact) · typically resolved in 1 h 4 min · longest major: 57 min
| Began | Incident | Impact | Lasted |
|---|---|---|---|
| Delayed check runs | minor | 23 min evidence | |
| Delayed check runs | minor | 2 days evidence | |
| Degraded public ingestion due to GitHub API outage | major | 57 min evidence | |
| Check runs slowness | minor | 1 h 4 min evidence | |
| Data collector issue on Public Monitoring | none | — evidence | |
| Public Monitoring - Auth0 is unavailable | critical | — evidence | |
| Internal Monitoring - Dashboard issue | none | — evidence | |
| Ongoing incident due to hosting issue since 7:20 UTC approximatively | major | — evidence |
As GitGuardian's status page reports its own incidents (scheduled maintenance left out), read every few hours since .
Changes
None since tracking began.