# Gorgias Gorgias (gorgias.com): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index. - Page: https://thirdpartyindex.com/vendors/gorgias - Documents last verified: 2026-09-29 - Transparency rating: 100/100 (how much it publishes, not how secure it is) - Cite as: Gorgias, Third Party Index, https://thirdpartyindex.com/vendors/gorgias (data CC BY 4.0) ## Documents | Document | URL | Last verified | Last changed | |---|---|---|---| | Trust center | https://trust.gorgias.com/ | 2026-09-29 | 2026-09-29 | | Subprocessor list | https://www.gorgias.com/legal/list-of-data-subprocessors | 2026-09-29 | 2026-09-29 | | Data processing addendum | https://www.gorgias.com/legal/data-processing-agreement | 2026-09-29 | 2026-09-29 | | Privacy policy | https://www.gorgias.com/legal/privacy | 2026-09-29 | 2026-09-29 | | Terms | https://www.gorgias.com/legal/terms-of-use | 2026-09-29 | 2026-09-29 | | Security page | https://www.gorgias.com/security | 2026-09-29 | 2026-09-29 | | security.txt | https://www.gorgias.com/.well-known/security.txt | 2026-09-29 | 2026-09-29 | | Status page | https://status.gorgias.com/ | 2026-09-29 | 2026-09-29 | | Security advisories | https://www.gorgias.com/legal/vulnerability-disclosure-policy | 2026-09-29 | 2026-09-29 | ## Subprocessors (20) As its own list states them. | Subprocessor | Purpose | Location | Listed since | |---|---|---|---| | [Amplitude](https://thirdpartyindex.com/vendors/amplitude.md) | Product analytics | United States | 2026-09-29 | | [Appcues](https://thirdpartyindex.com/vendors/appcues.md) | Survey and onboarding | United States | 2026-09-29 | | [Chargebee](https://thirdpartyindex.com/vendors/chargebee.md) | Subscription billing and revenue management platform | United States | 2026-09-29 | | Circle | Community hosting platform | United States | 2026-09-29 | | [Cloudflare](https://thirdpartyindex.com/vendors/cloudflare.md) | Third-party content delivery network | United States | 2026-09-29 | | [Confluent](https://thirdpartyindex.com/vendors/confluent.md) | Full-scale data streaming platform | United States | 2026-09-29 | | [Customer io.](https://thirdpartyindex.com/vendors/customer-io.md) | Customer communication | United States | 2026-09-29 | | [Datadog](https://thirdpartyindex.com/vendors/datadog.md) | Querying and performing analytics | United States | 2026-09-29 | | [Fivetran](https://thirdpartyindex.com/vendors/fivetran.md) | Data ingestion for analytics purpose | United States | 2026-09-29 | | [Google Cloud Platform](https://thirdpartyindex.com/vendors/google-cloud.md) | Cloud Service Provider | United States, European Union and Australia | 2026-09-29 | | Google Workspace and Analytics | Email, file storage, video | United States | 2026-09-29 | | [Hubspot](https://thirdpartyindex.com/vendors/hubspot.md) | Third-party CRM | United States | 2026-09-29 | | [Microsoft](https://thirdpartyindex.com/vendors/microsoft.md) | Product analytics | United States | 2026-09-29 | | [OpenAi](https://thirdpartyindex.com/vendors/openai.md) | AI research and deployment company | United States | 2026-09-29 | | [Pandadoc](https://thirdpartyindex.com/vendors/pandadoc.md) | E-Signature legal | United States | 2026-09-29 | | [Segment](https://thirdpartyindex.com/vendors/segment.md) | Data Infrastructure | United States | 2026-09-29 | | [Sentry](https://thirdpartyindex.com/vendors/sentry.md) | Application error logging | United States | 2026-09-29 | | Smooch | Chat data | United States | 2026-09-29 | | [Stripe](https://thirdpartyindex.com/vendors/stripe.md) | Customer payments | United States | 2026-09-29 | | [Twilio, Inc.](https://thirdpartyindex.com/vendors/twilio.md) | Voice functionality and SMS | United States | 2026-09-29 | Read from ([evidence](https://thirdpartyindex.com/evidence/18785)). CSV: https://thirdpartyindex.com/vendors/gorgias/subprocessors.csv ### Its own affiliates (3) - Gorgias SAS (Australia; France; Netherlands) - Gorgias d.o.o. (Serbia) - Gorgias Helpdesk Inc (Canada) ## Compliance As its trust center lists them. - Audited: SOC 2 ([evidence](https://thirdpartyindex.com/evidence/18794)) - Claimed: HIPAA, GDPR, CCPA/CPRA ([evidence](https://thirdpartyindex.com/evidence/18794)) ## Listed as a subprocessor by (1) Tracked vendors whose own subprocessor lists name it, and what they say they use it for. - [Relay Commerce](https://thirdpartyindex.com/vendors/relay-commerce.md) ## Service status Incidents it reported on its own status page. - Last 90 days: 19 reported incidents (14 major or critical, 3 minor, 2 with no impact stated) - Typical time to resolve: 1 h 14 min - 2026-09-16: Customer sidebar search not working (major) - 2026-09-15: Issues with closing tickets (major) - 2026-09-14: Notifications not playing sound in the browser (no impact stated) - 2026-09-08: Help Center creation not working for new Gorgias accounts (minor) - 2026-09-02: Instagram direct message delayed ingestion (major) - 2026-09-01: Voice/SMS functionality degraded due to a Twilio incident (major) - 2026-09-01: Cloud service provider network incident may affect a subset of Gorgias Customers (major) - 2026-08-27: Ticket, order and product search showing outdated results (major) ## Security contact From its security.txt (https://www.gorgias.com/.well-known/security.txt): - Contact: mailto:security@gorgias.com - Disclosure policy: https://www.gorgias.com/security --- Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api