GitHub
GitHub declares 25 subprocessors, plus 5 of its own affiliates, in its subprocessor list, which we last checked on Nov 11, 2026 (evidence). They include Amazon Web Services, Google Cloud and OpenAI. No published changes since we first read it on Sep 21, 2026. 307 tracked vendors name GitHub as a subprocessor, including Microsoft, ClickHouse and Supabase.
Subprocessors CSV of GitHub's subprocessors · Atom feed of GitHub's subprocessors DORA draft CSV of GitHub's subprocessors as declared by GitHub what's this? ·
25 third parties, 5 affiliates.
| Name | Purpose | Location | Listed since |
|---|---|---|---|
| Amazon Web Services Inc (AWS) | Cloud Hosted Infrastructure, Data Hosting, AI Inference and AI Services | Corporate: United States; Location of Processing: United States | |
| Anthropic PBC AI | AI Inference and AI Services | Corporate: United States; Location of Processing: United States | |
| Cerebras Systems Inc. AI | AI Inference and AI Services | Corporate: United States; Location of Processing: United States | |
| Cloudflare | Content delivery service | Corporate: United States; Location of Processing: United States | |
| DataDome Solutions, Inc. | Security management | Corporate: United States; Location of Processing: United States, France | |
| Elasticsearch, Inc. | Cloud Hosted Infrastructure | Corporate: United States; Location of Processing: United States | |
| Fastly | Content delivery service | Corporate: United States; Location of Processing: United States | |
| Fireworks AI AI | AI Inference and AI Services | Corporate: United States; Location of Processing: United States, Germany, Iceland | |
| FullStory, Inc. | Customer support ticketing analysis | Corporate: United States; Location of Processing: United States | |
| Google Cloud Platform (GCP) | Cloud Hosted Infrastructure, AI Inference and AI Services | Corporate: United States; Location of Processing: United States, Belgium, Singapore | |
| Hewlett-Packard Limited | Cloud Hosted Infrastructure | Corporate: United States; Location of Processing: United States | |
| LambdaTest | Cloud Hosted Infrastructure | Corporate: United States; Location of Processing: United States | |
| Microsoft (Azure) | Cloud Hosted Infrastructure, Data Hosting, AI Inference and AI Services; Cognitive Services and customer support ticketing analysis; Technical Services | Corporate: United States; Location of Processing: United States; Location of Processing: United States, Australia, Brazil, Canada, France, Japan, Norway, Spain, Sweden, Switzerland, United Kingdom; Location of Processing: United States, Canada, Chile, Mexico | |
| Moveworks | Customer support ticketing analysis | Corporate: United States; Location of Processing: United States | |
| NexMo Inc (aka Vonage) | SMS notification provider for 2 Factor Authentication | Corporate: United States; Location of Processing: United States | |
| npm Inc | GitHub Subsidiary | Corporate: United States; Location of Processing: United States | |
| Obsidian Security | Security management | Corporate: United States; Location of Processing: United States | |
| OpenAI AI | AI Inference and AI Services | Corporate: United States; Location of Processing: United States | |
| Oracle America, Inc. | Cloud Hosted Infrastructure | Corporate: United States; Location of Processing: United States | |
| Pusher | Building and managing real-time infrastructure for web and mobile applications | Corporate: United States; Location of Processing: United States | |
| Semmle Inc | GitHub Subsidiary | Corporate: United States; Location of Processing: United States | |
| Tines Automation Inc. | Security management | Corporate: United States; Location of Processing: United States | |
| Twilio (SendGrid) | SMS notification provider for 2 Factor Authentication | Corporate: United States; Location of Processing: United States | |
| xAI AI | AI Inference and AI Services | Corporate: United States; Location of Processing: United States | |
| Zendesk | Customer support ticketing system | Corporate: United States; Location of Processing: United States |
GitHub affiliates (5)
Web TechnologiesCSV of GitHub's web technologies · Atom feed of GitHub's web technologies
GitHub's homepage made 178 requests to 3 domains, and 1 service controlled by another company.
1 third party by category: Other 1
Third parties 1 · 12 requests
Contentful ctfassets.net 12
First party 1 · 166 requests
GitHub Contentful GSAP HSTS Open Graph PWA Priority Hints React React Router 8 Three.js 148 Turbo lit-html 1.1.2 166
Subprocessor of (307)CSV of the companies listing GitHub · Atom feed of the companies listing GitHub
Addingwell addingwell.com
Aditude aditude.com Code storage
AegisGate Security aegisgatesecurity.io Open-source repository hosting for the AegisGate platform (github.com/aegisgatesecurity) and CI/CD pipelines (GitHub Actions)
Aimdoc aimdoc.ai
Air air.inc Contact: DPO dpo@github.com DPA:; Version control
Airbyte airbyte.com Customer Support; Customer support issue tracking, source code hosting, and CI/CD workflow automation.
Akuity akuity.io
AllCode allcode.com Source code management, software development, and CI/CD workflows
Allvue Systems allvuesystems.com
Ampersand ampersand.ai Hosts Ampersand's source code repositories and development workflows.; Version control
Amplemarket amplemarket.com Engineering; Used to host and manage our software development lifecycle
Anaconda anaconda.com Source code storage and version control
Apica apica.io Integrations for script repositories USA
Apollo GraphQL apollographql.com
- Appamondo appamondo.com Source Control and storage
Arctic Wolf arcticwolf.com Code and Configuration Repository
Artie artie.com
AuthZed authzed.com Code hosting, community support, and communication services
Autohive autohive.com
aXcelerate axcelerate.com.au ###### Service Provided Source code hosting, version control, and software development lifecycle management ###### Data Accessed Source code, development metadata, issue and pull request records. (No customer data) ###### Safeguards ISO 27001, SOC 2; Version control
Aztec Software aztecsoftware.com Source code control
Belvo belvo.com Source Code Management and Security Tooling; Source Code Repositories, Static Application Security Testing (SAST), Software Composition Analysis (SCA)
BeyondTrust beyondtrust.com CICD code management platform (Entitle)
Binti binti.com Code Versioning Repository; Code versioning repository
Black Forest Labs bfl.ai
Blinq blinq.me
Blooket blooket.com Code version control and deployments
Breakout getbreakout.ai Development software
Browser Use browser-use.com
BuildBetter buildbetter.ai
Bullseye bullseye.so Code repository, CI/CD, version control, secrets management
C3 AI c3.ai Code hosting platform for Customer-built Extensions
CamelAI camelai.com GitHub is our Git service provider. It is used to store application code across environments and manage deployments.
Camino joincamino.com Source code repository and container image registry
Campfire campfire.ai Source code hosting and CI/CD. Stores Campfire's application code; no customer data is processed.
Campsite campsite.com Developer tooling
CardinalHQ cardinalhq.io
CellDelta celldelta.ai Source-code hosting. Not part of the customer-content processing path in normal operation.
Cerebrium cerebrium.ai
Chaser trychaser.com
Chatwoot chatwoot.com Code hosting and development; Hosts Chatwoot source code and supports version control, code review, and development workflows.
Checkr checkr.com Issue Management
- Cien cien.ai Development software
CITCON citcon.com Source code repository
ClickHouse clickhouse.com Support escalations
Cloudamize cloudamize.com Code Management and Repository; GitHub is a web-based platform that utilizes Git, an open-source distributed version control system, to facilitate software development and collaboration. It serves as a central hub for developers to store, manage, and share their code repositories.
CloudResearch cloudresearch.com
Cloudshelf cloudshelf.ai Version Control Systems
Clueso clueso.io Customer-authorised repository access, read-only
CodeAnt AI codeant.ai Development software
- Show next 50
ComplianceCSV of GitHub's compliance · Atom feed of GitHub's compliance
FedRAMP Marketplace
| Offering | Status | Impact | Agencies | Since |
|---|---|---|---|---|
| GitHub Enterprise Cloud | Authorized | LI-SaaS | 23 |
FedRAMP status from the FedRAMP Marketplace (evidence)
Service statusCSV of GitHub's status page incidents · Atom feed of GitHub's status page incidents
90 days agotoday
- 67 incidents in 90 days
- 27 major or critical
- 1 h 16 min typical time to resolve
- 10 h 27 min longest major
| Began | Incident | Impact | Lasted |
|---|---|---|---|
| Incident with Git Operations and Pull Requests | critical | 1 h 44 min | |
| Degraded availability for GPT-5.3 Codex and GPT-5.6 models in Copilot | major | 49 min | |
| Incident with Actions and Checks API | critical | 46 min | |
| Incident with Webhooks and Actions | major | 1 h 50 min | |
| Increased timeouts due to surge in anonymous users | minor | 3 h 10 min | |
| Increase in timeouts for some unauthenticated users | minor | 1 h 56 min | |
| Degraded performance for multiple GitHub services | minor | 44 min | |
| Incident with Actions | minor | 52 min |
Incidents per month
critical major minor no impact stated
Components affected
| Component | Incidents | Bar |
|---|---|---|
| Actions | 21 | |
| Pull Requests | 11 | |
| Issues | 10 | |
| Pages | 8 | |
| Webhooks | 8 | |
| API Requests | 7 | |
| Copilot AI Model Providers | 6 | |
| Git Operations | 5 |
As GitHub's status page reports its own incidents (scheduled maintenance left out), read every few hours since (evidence)
Incidents reported by GitHub's subprocessorsCSV of incidents reported by vendors GitHub lists · Atom feed of incidents reported by vendors GitHub lists
316 reported incidents in the last 30 days, by 8 of the vendors GitHub lists as subprocessors.
A subprocessor list names a company, not the service an incident touched. This does not show that GitHub was involved.
And 291 more. All of them: CSV · Who is around them.
Federal contractsCSV of GitHub's federal contracts · Atom feed of GitHub's federal contracts
By funding agency. UEI WR2ZN519GFX4 · checked Nov 7, 2026 · snapshot
| Agency | Prime awards | Obligated | Subawards | Subaward total | Years |
|---|---|---|---|---|---|
| Executive Office of the President | 1 | $158.7K | — | — | 2023–2026 |
| Consumer Financial Protection Bureau | 4 | $150.2K | — | — | 2011–2016 |
| Department of the Air Force Department of Defense | — | — | 3 | $118.4K | 2024–2026 |
| Department of the Army Department of Defense | 4 | $100.2K | — | — | 2012–2022 |
| Department of State | 2 | $58.0K | — | — | 2014–2015 |
| Federal Aviation Administration Department of Transportation | — | — | 1 | $47.9K | 2023 |
| Immediate Office of the Secretary of Defense Department of Defense | 1 | $40.6K | — | — | 2017–2018 |
| Department of the Navy Department of Defense | 8 | $40.0K | — | — | 2012–2016 |
| Federal Communications Commission | 14 | $30.0K | — | — | 2013–2026 |
| National Institutes of Health Department of Health and Human Services | 5 | $28.4K | — | — | 2013–2016 |
| National Telecommunications and Information Administration Department of Commerce | 2 | $27.7K | — | — | 2016–2021 |
| National Institute of Standards and Technology Department of Commerce | 3 | $24.3K | — | — | 2016–2020 |
| Department of Energy | 1 | $7.5K | — | — | 2017 |
| Office of the Chief Information Officer General Services Administration | 1 | $5.4K | — | — | 2017 |
| National Aeronautics and Space Administration | 1 | $5.0K | — | — | 2013 |
1 more agencies · All 52 records
Prime awards and subawards reported by prime contractors. Purchases through a reseller name the reseller, not the vendor.
ChangesCSV of GitHub's changes · Atom feed of GitHub's changes
See the list as we read it on any date: Time machine
- Changed registry listing: fedramp:FR1812058188 evidence: registry listing: fedramp:FR1812058188
- Changed registry listing: fedramp:FR1812058188 evidence: registry listing: fedramp:FR1812058188
- Changed registry listing: fedramp:FR1812058188 evidence: registry listing: fedramp:FR1812058188
- Changed registry listing: fedramp:FR1812058188 evidence: registry listing: fedramp:FR1812058188
- Changed registry listing: fedramp:FR1812058188 evidence: registry listing: fedramp:FR1812058188
- Changed registry listing: fedramp:FR1812058188 evidence: registry listing: fedramp:FR1812058188
Rating badge for GitHub's site
It updates with the rating.
<a href="https://thirdpartyindex.com/vendors/github"><img src="https://thirdpartyindex.com/badge/github.svg" alt="GitHub transparency rating on Third Party Index" height="20"></a>[](https://thirdpartyindex.com/vendors/github)