GitHub
GitHub declares 25 subprocessors, plus 5 of its own affiliates, in its subprocessor list, which we last checked on Nov 11, 2026 (evidence). They include Amazon Web Services, Google Cloud and OpenAI. No published changes since we first read it on Sep 21, 2026. 307 tracked vendors name GitHub as a subprocessor, including Microsoft, ClickHouse and Supabase.
Subprocessors CSV of GitHub's subprocessors · Atom feed of GitHub's subprocessors DORA draft CSV of GitHub's subprocessors as declared by GitHub what's this? ·
25 third parties, 5 affiliates.
| Name | Purpose | Location | Listed since |
|---|---|---|---|
| Amazon Web Services Inc (AWS) | Cloud Hosted Infrastructure, Data Hosting, AI Inference and AI Services | Corporate: United States; Location of Processing: United States | |
| Anthropic PBC AI | AI Inference and AI Services | Corporate: United States; Location of Processing: United States | |
| Cerebras Systems Inc. AI | AI Inference and AI Services | Corporate: United States; Location of Processing: United States | |
| Cloudflare | Content delivery service | Corporate: United States; Location of Processing: United States | |
| DataDome Solutions, Inc. | Security management | Corporate: United States; Location of Processing: United States, France | |
| Elasticsearch, Inc. | Cloud Hosted Infrastructure | Corporate: United States; Location of Processing: United States | |
| Fastly | Content delivery service | Corporate: United States; Location of Processing: United States | |
| Fireworks AI AI | AI Inference and AI Services | Corporate: United States; Location of Processing: United States, Germany, Iceland | |
| FullStory, Inc. | Customer support ticketing analysis | Corporate: United States; Location of Processing: United States | |
| Google Cloud Platform (GCP) | Cloud Hosted Infrastructure, AI Inference and AI Services | Corporate: United States; Location of Processing: United States, Belgium, Singapore | |
| Hewlett-Packard Limited | Cloud Hosted Infrastructure | Corporate: United States; Location of Processing: United States | |
| LambdaTest | Cloud Hosted Infrastructure | Corporate: United States; Location of Processing: United States | |
| Microsoft (Azure) | Cloud Hosted Infrastructure, Data Hosting, AI Inference and AI Services; Cognitive Services and customer support ticketing analysis; Technical Services | Corporate: United States; Location of Processing: United States; Location of Processing: United States, Australia, Brazil, Canada, France, Japan, Norway, Spain, Sweden, Switzerland, United Kingdom; Location of Processing: United States, Canada, Chile, Mexico | |
| Moveworks | Customer support ticketing analysis | Corporate: United States; Location of Processing: United States | |
| NexMo Inc (aka Vonage) | SMS notification provider for 2 Factor Authentication | Corporate: United States; Location of Processing: United States | |
| npm Inc | GitHub Subsidiary | Corporate: United States; Location of Processing: United States | |
| Obsidian Security | Security management | Corporate: United States; Location of Processing: United States | |
| OpenAI AI | AI Inference and AI Services | Corporate: United States; Location of Processing: United States | |
| Oracle America, Inc. | Cloud Hosted Infrastructure | Corporate: United States; Location of Processing: United States | |
| Pusher | Building and managing real-time infrastructure for web and mobile applications | Corporate: United States; Location of Processing: United States | |
| Semmle Inc | GitHub Subsidiary | Corporate: United States; Location of Processing: United States | |
| Tines Automation Inc. | Security management | Corporate: United States; Location of Processing: United States | |
| Twilio (SendGrid) | SMS notification provider for 2 Factor Authentication | Corporate: United States; Location of Processing: United States | |
| xAI AI | AI Inference and AI Services | Corporate: United States; Location of Processing: United States | |
| Zendesk | Customer support ticketing system | Corporate: United States; Location of Processing: United States |
GitHub affiliates (5)
Web TechnologiesCSV of GitHub's web technologies · Atom feed of GitHub's web technologies
GitHub's homepage made 178 requests to 3 domains, and 1 service controlled by another company.
1 third party by category: Other 1
Third parties 1 · 12 requests
Contentful ctfassets.net 12
First party 1 · 166 requests
GitHub Contentful GSAP HSTS Open Graph PWA Priority Hints React React Router 8 Three.js 148 Turbo lit-html 1.1.2 166
Subprocessor of (307)CSV of the companies listing GitHub · Atom feed of the companies listing GitHub
Addingwell addingwell.com
Aditude aditude.com Code storage
AegisGate Security aegisgatesecurity.io Open-source repository hosting for the AegisGate platform (github.com/aegisgatesecurity) and CI/CD pipelines (GitHub Actions)
Aimdoc aimdoc.ai
Air air.inc Contact: DPO dpo@github.com DPA:; Version control
Airbyte airbyte.com Customer Support; Customer support issue tracking, source code hosting, and CI/CD workflow automation.
Akuity akuity.io
AllCode allcode.com Source code management, software development, and CI/CD workflows
Allvue Systems allvuesystems.com
Ampersand ampersand.ai Hosts Ampersand's source code repositories and development workflows.; Version control
Amplemarket amplemarket.com Engineering; Used to host and manage our software development lifecycle
Anaconda anaconda.com Source code storage and version control
Apica apica.io Integrations for script repositories USA
Apollo GraphQL apollographql.com
- Appamondo appamondo.com Source Control and storage
Arctic Wolf arcticwolf.com Code and Configuration Repository
Artie artie.com
AuthZed authzed.com Code hosting, community support, and communication services
Autohive autohive.com
aXcelerate axcelerate.com.au ###### Service Provided Source code hosting, version control, and software development lifecycle management ###### Data Accessed Source code, development metadata, issue and pull request records. (No customer data) ###### Safeguards ISO 27001, SOC 2; Version control
Aztec Software aztecsoftware.com Source code control
Belvo belvo.com Source Code Management and Security Tooling; Source Code Repositories, Static Application Security Testing (SAST), Software Composition Analysis (SCA)
BeyondTrust beyondtrust.com CICD code management platform (Entitle)
Binti binti.com Code Versioning Repository; Code versioning repository
Black Forest Labs bfl.ai
Blinq blinq.me
Blooket blooket.com Code version control and deployments
Breakout getbreakout.ai Development software
Browser Use browser-use.com
BuildBetter buildbetter.ai
Bullseye bullseye.so Code repository, CI/CD, version control, secrets management
C3 AI c3.ai Code hosting platform for Customer-built Extensions
CamelAI camelai.com GitHub is our Git service provider. It is used to store application code across environments and manage deployments.
Camino joincamino.com Source code repository and container image registry
Campfire campfire.ai Source code hosting and CI/CD. Stores Campfire's application code; no customer data is processed.
Campsite campsite.com Developer tooling
CardinalHQ cardinalhq.io
CellDelta celldelta.ai Source-code hosting. Not part of the customer-content processing path in normal operation.
Cerebrium cerebrium.ai
Chaser trychaser.com
Chatwoot chatwoot.com Code hosting and development; Hosts Chatwoot source code and supports version control, code review, and development workflows.
Checkr checkr.com Issue Management
- Cien cien.ai Development software
CITCON citcon.com Source code repository
ClickHouse clickhouse.com Support escalations
Cloudamize cloudamize.com Code Management and Repository; GitHub is a web-based platform that utilizes Git, an open-source distributed version control system, to facilitate software development and collaboration. It serves as a central hub for developers to store, manage, and share their code repositories.
CloudResearch cloudresearch.com
Cloudshelf cloudshelf.ai Version Control Systems
Clueso clueso.io Customer-authorised repository access, read-only
CodeAnt AI codeant.ai Development software
CodeRabbit coderabbit.ai Version control
Coefficient coefficient.io development tracking and issue management tool
Collibra collibra.com Environment operational management
Cometly cometly.com Code repository for our software development. Occasionally minimal user info (e.g., reference IDs) may appear in logs or commit messages, but we aim to exclude personal data. GitHub Privacy
Confident AI confident-ai.com Code repository and version control
Confirm confirm.com
Contour usecontour.ai
Conveo conveo.ai Processing Activity Description Hosting of Conveo's codebase and deployment of code (source control, CI/CD pipelines, and code review workflows). Data Residency / Processing Location United States Headquarters Location San Francisco, United States (subsidiary of Microsoft Corporation); Version control
Convertr convertr.io Source code repository; Version control
Crossdeck cross-deck.com Source code hosting; the publicly-mirrored SDK repositories that customers consume via SwiftPM, npm, and Maven. Does not process Customer Personal Data.
Cube Dev cube.dev Customer-enabled integration: when a customer connects their own GitHub repository, Cube reads and writes data model files and configuration there. Processes source code and data model definitions only for customers who enable it.; Git Integration & Version Control
Cyara cyara.com Project Management
Datafi datafi.co Version control
DataScoop datascoop.ai Development software
Day AI day.ai Code hosting, artifact hosting, CI/CD
DeepScribe deepscribe.ai GitHub is used by DeepScribe’s engineering team to develop, maintain, and deploy application code through version control and CI/CD pipelines.
Delphina delphina.ai Software development
Demi demi.ai
Depot depot.dev Code Repository
Designmodo designmodo.com
Devenue devenue.ai Development software
Digital Realty digitalrealty.com Telephony and video conferencing services
Dirac diracinc.com
Dock dock.us Issue management
Donut donut.com Code management and version control
dotCMS dotcms.com
Double doublehq.com Application hosting; Cloud service that stores the application codebase.
Double the Donation doublethedonation.com
Driven driven.work
Dromo dromo.io
Dust dust.tt Source code repository
Dynamiq getdynamiq.ai Code repository and CI/CD pipelines
Easol easol.com
EasyPost easypost.com Version Control Systems
EdSights edsights.com Products: Admit, Retain; Version Control System & CI/CD
Elevarq elevarq.com source code hosting and CI/CD
Ema ema.ai Code, Version Control
Emphere emphere.com Version Control Systems
Evervault evervault.com GitHub is a web-based software development platform built on the Git version control software. Primarily used for software code, GitHub offers the distributed version control and source code management functionality of Git with additional features and enhancements. Specifically, it provides access control and several collaboration features including bug tracking, feature requests, task management, and wikis.; Version control
EverWorker integrail.ai GitHub is used by Everworker for secure source code management, version control, and collaboration within the software development lifecycle.
EverWorker everworker.ai GitHub is used by Everworker for secure source code management, version control, and collaboration within the software development lifecycle.
Expensify expensify.com Sales and Support; Support and Account Management
Expertly expertly.com
Expo expo.dev Code, bug reports, contributions
Factory factory.ai GitHub is a critical subprocessor in our software development lifecycle. We use it as a repository for our codebase, and it also serves as a platform for continuous integration and continuous deployment (CI/CD), enabling us to maintain high standards of code quality and streamline our deployment process.
Falconer falconer.com
Fastmail fastmail.com Hosting of code as an open source tool
Featurebase featurebase.app Developer tooling
Figure figure.com
Filevine filevine.com Cloud source control repository
- Show next 50
ComplianceCSV of GitHub's compliance · Atom feed of GitHub's compliance
FedRAMP Marketplace
| Offering | Status | Impact | Agencies | Since |
|---|---|---|---|---|
| GitHub Enterprise Cloud | Authorized | LI-SaaS | 23 |
FedRAMP status from the FedRAMP Marketplace (evidence)
Service statusCSV of GitHub's status page incidents · Atom feed of GitHub's status page incidents
90 days agotoday
- 67 incidents in 90 days
- 27 major or critical
- 1 h 16 min typical time to resolve
- 10 h 27 min longest major
| Began | Incident | Impact | Lasted |
|---|---|---|---|
| Incident with Git Operations and Pull Requests | critical | 1 h 44 min | |
| Degraded availability for GPT-5.3 Codex and GPT-5.6 models in Copilot | major | 49 min | |
| Incident with Actions and Checks API | critical | 46 min | |
| Incident with Webhooks and Actions | major | 1 h 50 min | |
| Increased timeouts due to surge in anonymous users | minor | 3 h 10 min | |
| Increase in timeouts for some unauthenticated users | minor | 1 h 56 min | |
| Degraded performance for multiple GitHub services | minor | 44 min | |
| Incident with Actions | minor | 52 min |
Incidents per month
critical major minor no impact stated
Components affected
| Component | Incidents | Bar |
|---|---|---|
| Actions | 21 | |
| Pull Requests | 11 | |
| Issues | 10 | |
| Pages | 8 | |
| Webhooks | 8 | |
| API Requests | 7 | |
| Copilot AI Model Providers | 6 | |
| Git Operations | 5 |
As GitHub's status page reports its own incidents (scheduled maintenance left out), read every few hours since (evidence)
Incidents reported by GitHub's subprocessorsCSV of incidents reported by vendors GitHub lists · Atom feed of incidents reported by vendors GitHub lists
316 reported incidents in the last 30 days, by 8 of the vendors GitHub lists as subprocessors.
A subprocessor list names a company, not the service an incident touched. This does not show that GitHub was involved.
And 291 more. All of them: CSV · Who is around them.
Federal contractsCSV of GitHub's federal contracts · Atom feed of GitHub's federal contracts
By funding agency. UEI WR2ZN519GFX4 · checked Nov 7, 2026 · snapshot
| Agency | Prime awards | Obligated | Subawards | Subaward total | Years |
|---|---|---|---|---|---|
| Executive Office of the President | 1 | $158.7K | — | — | 2023–2026 |
| Consumer Financial Protection Bureau | 4 | $150.2K | — | — | 2011–2016 |
| Department of the Air Force Department of Defense | — | — | 3 | $118.4K | 2024–2026 |
| Department of the Army Department of Defense | 4 | $100.2K | — | — | 2012–2022 |
| Department of State | 2 | $58.0K | — | — | 2014–2015 |
| Federal Aviation Administration Department of Transportation | — | — | 1 | $47.9K | 2023 |
| Immediate Office of the Secretary of Defense Department of Defense | 1 | $40.6K | — | — | 2017–2018 |
| Department of the Navy Department of Defense | 8 | $40.0K | — | — | 2012–2016 |
| Federal Communications Commission | 14 | $30.0K | — | — | 2013–2026 |
| National Institutes of Health Department of Health and Human Services | 5 | $28.4K | — | — | 2013–2016 |
| National Telecommunications and Information Administration Department of Commerce | 2 | $27.7K | — | — | 2016–2021 |
| National Institute of Standards and Technology Department of Commerce | 3 | $24.3K | — | — | 2016–2020 |
| Department of Energy | 1 | $7.5K | — | — | 2017 |
| Office of the Chief Information Officer General Services Administration | 1 | $5.4K | — | — | 2017 |
| National Aeronautics and Space Administration | 1 | $5.0K | — | — | 2013 |
1 more agencies · All 52 records
Prime awards and subawards reported by prime contractors. Purchases through a reseller name the reseller, not the vendor.
ChangesCSV of GitHub's changes · Atom feed of GitHub's changes
See the list as we read it on any date: Time machine
- Changed registry listing: fedramp:FR1812058188 evidence: registry listing: fedramp:FR1812058188
- Changed registry listing: fedramp:FR1812058188 evidence: registry listing: fedramp:FR1812058188
- Changed registry listing: fedramp:FR1812058188 evidence: registry listing: fedramp:FR1812058188
- Changed registry listing: fedramp:FR1812058188 evidence: registry listing: fedramp:FR1812058188
- Changed registry listing: fedramp:FR1812058188 evidence: registry listing: fedramp:FR1812058188
- Changed registry listing: fedramp:FR1812058188 evidence: registry listing: fedramp:FR1812058188
Rating badge for GitHub's site
It updates with the rating.
<a href="https://thirdpartyindex.com/vendors/github"><img src="https://thirdpartyindex.com/badge/github.svg" alt="GitHub transparency rating on Third Party Index" height="20"></a>[](https://thirdpartyindex.com/vendors/github)