# Guesty Guesty declares [20 subprocessors](https://thirdpartyindex.com/vendors/guesty#subprocessors) in [its subprocessor list](https://trust.guesty.com/subprocessors), which we last checked on 2026-11-11 ([evidence](https://thirdpartyindex.com/evidence/53832)). They include [Amazon Web Services](https://thirdpartyindex.com/vendors/amazon-web-services), [Google Cloud](https://thirdpartyindex.com/vendors/google-cloud) and [Stripe](https://thirdpartyindex.com/vendors/stripe). No published changes since we first read it on 2026-09-22. Guesty (guesty.com): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index. - Page: https://thirdpartyindex.com/vendors/guesty - Documents last verified: 2026-11-11 - Transparency rating: 70/100 (how much it publishes, not how secure it is): Subprocessor list 30/30; Processing locations 6/8 (partial); Purposes 0/7 (partial); Data processing addendum 12/12; Trust center 8/8; Privacy policy 6/6; security.txt 0/6 (not found); Security page 0/5 (not found); Status page 0/5 (not found); Vulnerability disclosure 0/5 (not found); Pages still reachable 8/8 - Supply chain: relies on 15 tracked vendors directly, 124 within two hops, 442 within three; 0 tracked vendors rely on it directly, 0 within two hops, 0 within three - Cite as: Guesty, Third Party Index, https://thirdpartyindex.com/vendors/guesty (data CC BY 4.0) ## Documents | Document | URL | Last verified | Last changed | |---|---|---|---| | Trust center | https://trust.guesty.com/ | 2026-11-11 | 2026-11-10 | | Subprocessor list | https://trust.guesty.com/subprocessors | 2026-11-11 | 2026-10-06 | | Data processing addendum | https://www.guesty.com/data-processing-addendum/ | 2026-11-11 | 2026-09-22 | | Privacy policy | https://www.guesty.com/privacy-policy/ | 2026-11-11 | 2026-09-22 | | Terms | https://www.guesty.com/terms-of-service/ | 2026-11-11 | 2026-09-22 | ## Subprocessors (20) As its own list states them. | Subprocessor | Purpose | Location | Listed since | |---|---|---|---| | [Amazon Web Services](https://thirdpartyindex.com/vendors/amazon-web-services.md) | — | Cloud provider | 2026-10-01 | | [Bob](https://thirdpartyindex.com/vendors/hibob.md) | — | Employee management | 2026-10-01 | | Comeet | — | — | 2026-10-01 | | [CrowdStrike](https://thirdpartyindex.com/vendors/crowdstrike.md) | — | Security | 2026-10-01 | | [Datadog](https://thirdpartyindex.com/vendors/datadog.md) | — | Cloud monitoring | 2026-10-01 | | [GitHub](https://thirdpartyindex.com/vendors/github.md) | — | Version control | 2026-10-01 | | [Google Drive](https://thirdpartyindex.com/vendors/google-cloud.md) | — | Document management | 2026-10-01 | | [Google Workspace](https://thirdpartyindex.com/vendors/google-cloud.md) | — | Identity provider | 2026-10-01 | | [Jira](https://thirdpartyindex.com/vendors/atlassian.md) | — | Collaboration | 2026-10-01 | | [JumpCloud](https://thirdpartyindex.com/vendors/jumpcloud.md) | — | IT | 2026-10-01 | | [Kandji](https://thirdpartyindex.com/vendors/iru.md) | — | IT | 2026-10-01 | | [MongoDB Atlas](https://thirdpartyindex.com/vendors/mongodb.md) | — | Data storage and processing | 2026-10-01 | | [Okta](https://thirdpartyindex.com/vendors/okta.md) | — | Identity provider | 2026-10-01 | | [\[PCI TPSP\] Checkout Technology LTD](https://thirdpartyindex.com/vendors/checkout-com.md) | — | — | 2026-10-01 | | \[PCI TPSP\] First Data Merchant Services | — | — | 2026-10-01 | | \[PCI TPSP\] Forter | — | — | 2026-10-01 | | \[PCI TPSP\] Payfacto | — | — | 2026-10-01 | | [\[PCI TPSP\] Stripe](https://thirdpartyindex.com/vendors/stripe.md) | — | Finance and payments | 2026-10-01 | | [Slack](https://thirdpartyindex.com/vendors/slack.md) | — | Collaboration | 2026-10-01 | | [Vanta](https://thirdpartyindex.com/vendors/vanta.md) | Continuous security and compliance monitoring | Security | 2026-10-01 | Read from ([evidence](https://thirdpartyindex.com/evidence/8971)). CSV: https://thirdpartyindex.com/vendors/guesty/subprocessors.csv ## Compliance As its trust center lists them. - Audited: SOC 1, SOC 2, PCI DSS ([evidence](https://thirdpartyindex.com/evidence/10920)) - Claimed: GDPR, CCPA/CPRA ([evidence](https://thirdpartyindex.com/evidence/10920)) ## Web Technologies Guesty's homepage made 266 requests to 29 domains, 15 services controlled by another company, and 1 domain not identified. Loaded on 2026-11-09 by a browser that accepted nothing; other visits may load more or less. What a page loads is not a list of who receives customer data. 15 third parties by category: Analytics 5 (HubSpot, Wingify, LinkedIn, STAPE; reviewed: Mixpanel); Advertising 2 (Google Cloud, Capterra Inc.); Marketing automation 1 (OptinMonster); Cookie compliance 1 (Cookiebot); CDN 1 (jsDelivr); Affiliate programs 1 (PartnerStack); Geolocation 1 (ipify); Personalisation 1 (Trendemon); RUM 1 (Datadog); Unclassified 1 (Heyflow). Each company that appears controlled by another organization is counted once, under the main category of the technologies detected from it on this homepage or, when none was, the category recorded from the company's own page (marked reviewed) or else the one it is usually detected as on other published homepages (marked as such); unclassified: none of these. ### Third parties (15) - Google Cloud: 25 requests to google.com, doubleclick.net; DoubleClick Floodlight (its subprocessor list names it too) - OptinMonster: 20 requests to omappapi.com; OptinMonster - HubSpot: 13 requests to hubspot.com, hs-analytics.net, hs-banner.com, hs-scripts.com, hsadspixel.net, hsforms.com, hsforms.net, hubapi.com; HubSpot, HubSpot Analytics - Wingify: 9 requests to visualwebsiteoptimizer.com; VWO - Cookiebot: 4 requests to cookiebot.com; Cookiebot 1 - Capterra Inc.: 3 requests to capterra.com; Capterra - LinkedIn: 3 requests to linkedin.com, licdn.com; Linkedin Insight Tag - Mixpanel: 3 requests to mxpnl.com, mixpanel.com - PartnerStack: 3 requests to grsm.io, partnerlinks.io, partnerstack.com; PartnerStack - Trendemon: 2 requests to trendemon.com; Trendemon - ipify: 2 requests to ipify.org; ipify - Datadog: 1 request to datadoghq-browser-agent.com; Datadog (its subprocessor list names it too) - Heyflow: 1 request to heyflow.com - STAPE: 1 request to stapecdn.com; Stape - jsDelivr: 1 request to jsdelivr.net; jsDelivr ### Unknown (1) Domains not identified yet: withmesh.com ### First party (1) - Guesty: 170 requests to guesty.com; Amazon CloudFront, Amazon Web Services, Cybot, Google Analytics, Google Tag Manager, Guesty, HSTS, HTTP/3, Next.js 15.5.9, Next.js App Router, Open Graph, PWA, Priority Hints, Qualified, React, Vercel, Vercel Analytics, Webpack, jQuery 3.6.1, lit-element 3.3.3, lit-html 2.8.0 10 tracked companies loaded by the homepage are not in Guesty's subprocessor list. A website can use a service without it processing customer data. ## Subprocessor of (0) No tracked vendor lists it. ## Incidents reported by Guesty's subprocessors Incidents reported in the last 30 days on their own status pages by 6 vendors Guesty lists as subprocessors. A subprocessor list names a company, not the service an incident touched. - 2026-11-11: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Guesty lists as a subprocessor, reported Impact across multiple GitHub products including Actions, Pages, and Copilot products. (critical) - 2026-11-11: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Guesty lists as a subprocessor, reported Incident with Webhooks (minor) - 2026-11-10: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Guesty lists as a subprocessor, reported Incident with Git Operations and Pull Requests (critical) - 2026-11-09: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Guesty lists as a subprocessor, reported Degraded availability for GPT-5.3 Codex and GPT-5.6 models in Copilot (major) - 2026-11-09: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Guesty lists as a subprocessor, reported Incident with Actions and Checks API (critical) - 2026-11-09: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Guesty lists as a subprocessor, reported Incident with Webhooks and Actions (major) - 2026-11-09: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Guesty lists as a subprocessor, reported Increased timeouts due to surge in anonymous users (minor) - 2026-11-08: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Guesty lists as a subprocessor, reported Increase in timeouts for some unauthenticated users (minor) - 2026-11-05: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Guesty lists as a subprocessor, reported Degraded performance for multiple GitHub services (minor) - 2026-11-05: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Guesty lists as a subprocessor, reported Incident with Actions (minor) - 2026-11-04: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Guesty lists as a subprocessor, reported Incident with Actions (major) - 2026-11-04: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Guesty lists as a subprocessor, reported Incident with Actions and Pages (major) - 2026-11-04: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Guesty lists as a subprocessor, reported Incident with Pull Requests, Git Operations and Issues (major) - 2026-11-04: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Guesty lists as a subprocessor, reported Increased task-related errors for Copilot Mission Control (minor) - 2026-11-03: [Vanta](https://thirdpartyindex.com/vendors/vanta#status), which Guesty lists as a subprocessor, reported Missing check results for GitHub pull requests (minor) - 2026-11-03: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Guesty lists as a subprocessor, reported Incident with Git Operations (minor) - 2026-11-03: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Guesty lists as a subprocessor, reported Incident with API, Git, and Copilot requests (minor) - 2026-11-02: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Guesty lists as a subprocessor, reported Elevated errors on GPT-5.4 Nano (minor) - 2026-11-01: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Guesty lists as a subprocessor, reported Elevated Instant Payouts failures (no impact stated) - 2026-10-30: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Guesty lists as a subprocessor, reported Incident with Dependabot (minor) - 2026-10-30: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Guesty lists as a subprocessor, reported Incident with Actions, Pages, and Webhooks (major) - 2026-10-30: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Guesty lists as a subprocessor, reported Disruption with GitHub services (critical) - 2026-10-30: [JumpCloud](https://thirdpartyindex.com/vendors/jumpcloud#status), which Guesty lists as a subprocessor, reported Degraded User and Admin portal (minor) - 2026-10-29: [Vanta](https://thirdpartyindex.com/vendors/vanta#status), which Guesty lists as a subprocessor, reported Incorrect security-training and background-check test results (no impact stated) - 2026-10-29: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Guesty lists as a subprocessor, reported Disruption with Copilot Cloud services (minor) - 2026-10-28: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Guesty lists as a subprocessor, reported Elevated Issuing errors from 17:13 - 20:41 UTC (minor) - 2026-10-28: [Datadog](https://thirdpartyindex.com/vendors/datadog#status), which Guesty lists as a subprocessor, reported Metrics query are disrupted (major) - 2026-10-28: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Guesty lists as a subprocessor, reported Disruption with some Copilot services (critical) - 2026-10-27: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Guesty lists as a subprocessor, reported Elevated 404s for GitHub App s2s tokens in git/API (no impact stated) - 2026-10-26: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Guesty lists as a subprocessor, reported Incident with Actions, Issues, API Requests and Pull Requests (minor) - 2026-10-26: [Datadog](https://thirdpartyindex.com/vendors/datadog#status), which Guesty lists as a subprocessor, reported Elevated Error Rates for Workflow Automation, App Builder, Bits Code, Bits Agent Builder (major) - 2026-10-24: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Guesty lists as a subprocessor, reported Elevated Blik errors (no impact stated) - 2026-10-23: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Guesty lists as a subprocessor, reported Grok 4.6 and Grok 4.7 Service Issues (minor) - 2026-10-23: [JumpCloud](https://thirdpartyindex.com/vendors/jumpcloud#status), which Guesty lists as a subprocessor, reported Increased error rates loading User and Admin portal (major) - 2026-10-23: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Guesty lists as a subprocessor, reported Disruption with Dependabot Alerts (minor) - 2026-10-23: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Guesty lists as a subprocessor, reported Delayed Actions status check results (minor) - 2026-10-22: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Guesty lists as a subprocessor, reported Elevated Bancontact errors (no impact stated) - 2026-10-22: [JumpCloud](https://thirdpartyindex.com/vendors/jumpcloud#status), which Guesty lists as a subprocessor, reported US Region - Increased error rates with device certificate issuance and renewal (minor) - 2026-10-22: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Guesty lists as a subprocessor, reported Project updates delayed (minor) - 2026-10-22: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Guesty lists as a subprocessor, reported Elevated Bancontact errors (no impact stated) - 2026-10-22: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Guesty lists as a subprocessor, reported Incident with Actions (minor) - 2026-10-21: [Vanta](https://thirdpartyindex.com/vendors/vanta#status), which Guesty lists as a subprocessor, reported Stale data for CloudflareDomainInventory and CloudflareZoneRule (major) - 2026-10-21: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Guesty lists as a subprocessor, reported Delays for Pull Requests and Webhook deliveries (critical) - 2026-10-20: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Guesty lists as a subprocessor, reported Spike in cancellations and expired errors with PayByBank payments (no impact stated) - 2026-10-20: [MongoDB](https://thirdpartyindex.com/vendors/mongodb#status), which Guesty lists as a subprocessor, reported GCP Availability Zone europe-west2-b connectivity issues (minor) - 2026-10-20: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Guesty lists as a subprocessor, reported Elevated Revolut Pay errors (no impact stated) - 2026-10-19: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Guesty lists as a subprocessor, reported Degraded availability for GitHub Actions, GitHub Pages and Webhooks (critical) - 2026-10-15: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Guesty lists as a subprocessor, reported Elevated declines on Mastercard (no impact stated) - 2026-10-15: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Guesty lists as a subprocessor, reported CCA Automations are delayed when starting an Automation (minor) - 2026-10-15: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Guesty lists as a subprocessor, reported Elevated declines on Visa (no impact stated) - 2026-10-15: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Guesty lists as a subprocessor, reported Elevated Amazon Pay errors (no impact stated) - 2026-10-13: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Guesty lists as a subprocessor, reported \[Retroactive\] Actions workflow run logs delayed (minor) The subprocessor list as we read it on any date: https://thirdpartyindex.com/labs/time-machine/guesty --- Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api