# hCaptcha

[12 tracked vendors](https://thirdpartyindex.com/vendors/hcaptcha#used-by) name hCaptcha as a subprocessor, including [Stripe](https://thirdpartyindex.com/vendors/stripe), [Anthropic](https://thirdpartyindex.com/vendors/anthropic) and [ChargeBee](https://thirdpartyindex.com/vendors/chargebee). We have not found a subprocessor list published by hCaptcha. We monitor 4 of its documents, which we last checked on 2026-11-11.

hCaptcha (hcaptcha.com): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/hcaptcha
- Documents last verified: 2026-11-11
- Transparency rating: 31/100 (how much it publishes, not how secure it is): Subprocessor list 0/30 (not found); Processing locations 0/8 (no list); Purposes 0/7 (no list); Data processing addendum 12/12; Trust center 0/8 (not found); Privacy policy 6/6; security.txt 0/6 (not found); Security page 0/5 (not found); Status page 5/5; Vulnerability disclosure 0/5 (not found); Pages still reachable 8/8
- Supply chain: relies on 0 tracked vendors directly, 0 within two hops, 0 within three; 12 tracked vendors rely on it directly, 1462 within two hops, 2722 within three
- Cite as: hCaptcha, Third Party Index, https://thirdpartyindex.com/vendors/hcaptcha (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Data processing addendum | https://newassets.hcaptcha.com/dpa/IMI\_Data\_Processing\_Addendum\_4.20.2023.pdf | 2026-11-11 | 2026-09-22 |
| Privacy policy | https://www.hcaptcha.com/privacy | 2026-11-11 | 2026-09-22 |
| Terms | https://www.hcaptcha.com/terms | 2026-11-11 | 2026-09-22 |
| Status page | https://www.hcaptchastatus.com/ | 2026-11-11 | 2026-11-11 |

## Subprocessors (0)

No subprocessor list has been found or read for this vendor.

## Web Technologies

hCaptcha's homepage made 48 requests to 1 domain. Loaded on 2026-10-01 by a browser that accepted nothing; other visits may load more or less. What a page loads is not a list of who receives customer data.

### First party (1)

- hCaptcha: 48 requests to hcaptcha.com; Cloudflare, HSTS, HTTP/3, Open Graph, PostHog, Sentry, Webflow, hCaptcha 1

## Subprocessor of (12)

Tracked vendors whose own subprocessor lists name it, and what they say they use it for.

- [37signals](https://thirdpartyindex.com/vendors/37signals.md): Anti-bot protection
- [Anthropic](https://thirdpartyindex.com/vendors/anthropic.md): All products except Claude for Government; Fraud and abuse detection
- [Basecamp](https://thirdpartyindex.com/vendors/basecamp.md): Anti-bot protection
- [Calilio](https://thirdpartyindex.com/vendors/calilio.md)
- [ChargeBee](https://thirdpartyindex.com/vendors/chargebee.md): Captcha service provider: It is used as protection against automated bot detection and spam.
- [Equisolve](https://thirdpartyindex.com/vendors/equisolve.md): Website form submission security
- [Fastmail](https://thirdpartyindex.com/vendors/fastmail.md): Antispam/antifraud/antiabuse management
- [Formspark](https://thirdpartyindex.com/vendors/formspark.md): Spam protection
- [Imperva](https://thirdpartyindex.com/vendors/imperva.md): Security Services
- [RWX](https://thirdpartyindex.com/vendors/rwx.md): Bot detection and abuse prevention
- [Stripe](https://thirdpartyindex.com/vendors/stripe.md): Tool that provides hCaptcha for fraud prevention
- [WeTransfer](https://thirdpartyindex.com/vendors/wetransfer.md): Anti-bot system used in the authentication system

## Service status

Incidents it reported on its own status page.

- Last 90 days: 1 reported incidents (0 major or critical, 1 minor, 0 with no impact stated)
- Typical time to resolve: 16 min
- Status page last read: 2026-11-12
- 2026-09-11: Increased endpoint latency in some regions (minor)
- 2026-07-29: Increased 429 rates on several ASNs (no impact stated)
- 2026-05-05: Increased error rate on API loads (no impact stated)
- 2025-12-19: Increased latency on API calls in some regions (minor)

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api