# Grata

Grata (grata.com): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/grata
- Documents last verified: 2026-09-29
- Transparency rating: 71/100 (how much it publishes, not how secure it is)
- Cite as: Grata, Third Party Index, https://thirdpartyindex.com/vendors/grata (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Trust center | https://trust.grata.com/ | 2026-09-29 | 2026-09-29 |
| Subprocessor list | https://trust.grata.com/subprocessors | 2026-09-29 | 2026-09-29 |
| Privacy policy | https://grata.com/legal/privacy-policy | 2026-09-29 | 2026-09-29 |
| Terms | https://grata.com/legal/terms-of-service | 2026-09-29 | 2026-09-29 |
| Security page | https://grata.com/technology/security | 2026-09-29 | 2026-09-29 |

## Subprocessors (9)

As its own list states them.

| Subprocessor | Purpose | Location | Listed since |
|---|---|---|---|
| [Amazon Web Services](https://thirdpartyindex.com/vendors/amazon-web-services.md) | Cloud provider; Cloud-based Data Center | US East 1 - Northern Virginia; EU Central 1 - Frankfurt, Germany | 2026-09-29 |
| [Auth0](https://thirdpartyindex.com/vendors/okta.md) | Identity provider; Registration, administration, identity and authentication | US East | 2026-09-29 |
| [Databricks](https://thirdpartyindex.com/vendors/databricks.md) | SaaS application for data storage | Data storage and processing | 2026-09-29 |
| [Datadog](https://thirdpartyindex.com/vendors/datadog.md) | — | SaaS application for monitoring | 2026-09-29 |
| Datasite Costa Rica SRL | Customer Support | San José, Costa Rica | 2026-09-29 |
| [Elasticsearch](https://thirdpartyindex.com/vendors/elasticsearch.md) | Used to store application data specifically companies profile data | Data storage and processing | 2026-09-29 |
| [MongoDB Atlas](https://thirdpartyindex.com/vendors/mongodb.md) | Data storage and processing; Managed Database Services | US East 1 - Northern Virginia; EU Central 1 - Frankfurt, Germany | 2026-09-29 |
| [Snowflake](https://thirdpartyindex.com/vendors/snowflake.md) | SaaS application for data storage | Data storage and processing | 2026-09-29 |
| [Twilio, Inc](https://thirdpartyindex.com/vendors/twilio.md) | Cloud-based communication services; SMS for Multi-Factor Authentication | US East - Ashburn, Virginia | 2026-09-29 |

Read from ([evidence](https://thirdpartyindex.com/evidence/18324)). CSV: https://thirdpartyindex.com/vendors/grata/subprocessors.csv

## Compliance

As its trust center lists them.

- Audited: SOC 2 ([evidence](https://thirdpartyindex.com/evidence/18325))
- Claimed: GDPR ([evidence](https://thirdpartyindex.com/evidence/18325))

## Listed as a subprocessor by (1)

Tracked vendors whose own subprocessor lists name it, and what they say they use it for.

- [Intapp](https://thirdpartyindex.com/vendors/intapp.md): Content Provider

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api
