Heap
Transparency
Breakdown
| Subprocessor list | 30 / 30 | |
| Processing locations | 8 / 8 | |
| Purposes | 7 / 7 | |
| Data processing addendum | 12 / 12 | |
| Trust center | 8 / 8 | |
| Privacy policy | 6 / 6 | |
| security.txt | not found | 0 / 6 |
| Security page | 5 / 5 | |
| Status page | 5 / 5 | |
| Vulnerability disclosure | not found | 0 / 5 |
| Pages still reachable | 8 / 8 | |
| Total | 89 / 100 |
Only documents we can retrieve count: a page behind a login or a broken link scores nothing.
Badge
For Heap's own site; it updates with the rating.
<a href="https://thirdpartyindex.com/vendors/heap"><img src="https://thirdpartyindex.com/badge/heap.svg" alt="Heap transparency rating on Third Party Index" height="20"></a>[](https://thirdpartyindex.com/vendors/heap)Documents
| Document | Verified | Changed | Evidence |
|---|---|---|---|
| Trust center safebase | snapshot | ||
| Subprocessor list | snapshot | ||
| Data processing addendum | snapshot | ||
| Privacy policy | snapshot | ||
| Terms | snapshot | ||
| Security page | snapshot | ||
| Status page statuspage | snapshot |
Subprocessors
| Name | Purpose | Location | Listed since |
|---|---|---|---|
| Ada Support, Inc. | Providers a customer service ticket management tool | Toronto, Canada | |
| Amazon Web Services (AWS) | Hosts the Heap AI and Customer Data and backups; Hosts the Services and Customer Data and backups | Europe: Ireland (AWS-EU-West-1); USA: Virginia (primary) and Oregon (backup) | |
| Auryc | Performs analytics and reporting on Customer Data within the Session Replay add-on; Performs analytics and reporting on Customer Data within the VOC add-on | Wilmington, USA | |
| Contentsquare | Consulting, support, maintenance, implementation, and development | Paris, France | |
| Google Cloud Platform | Hosts the Session Replay add-on and Customer Data and backups; Hosts the VOC add-on and Customer Data and backups | For more information about Google’s data center locations, visit; Mountain View, USA; Mountain View, USA For more information about Google’s data center locations, visit; this link | |
| Hotjar | Consulting, support, maintenance, implementation, and development | Malta | |
| IBM | Performs analytics and reporting on Customer Data within the VOC | Armonk, USA | |
| Looker Studio (Google) | Performs analytics and reporting on Customer Data within the Session Replay add-on | Mountain View, USA | |
| OpenAI | Provides large language model | San Francisco, USA | |
| Scaletrix | Professional services partner | Gurgaon, India | |
| Snowflake | Gives access to data analytics and reports of Customer Data in their Snowflake instance (“Snowflake integration”); Hosts the Services and Customer Data and backups (“Heap-Hosted Snowflake”) | Bozeman, USA | |
| Zendesk, Inc. | Provides a customer service platform | San Francisco, USA |
Listed as a subprocessor by (15)
Purposes as each company states them.
ActiveState activestate.com Customer Conversion, Activation, and Retention
Anaconda anaconda.com Digital insights platform
Auvik auvik.com Product analytics
Bugcrowd bugcrowd.com IP and browsing history on-site
DataCamp datacamp.com Data analytics; Web Analytics
Deepgram deepgram.com Provides web and mobile app analytics solutions to help businesses understand user behavior and improve their digital experiences.
InMoment inmoment.com System monitoring
Orb withorb.com In-product analytics
Pluralsight pluralsight.com Data Analytics Tool
Quo quo.com Behavioral analytics; Data analytics
SnapLogic snaplogic.com User Experience Analytics
Termly termly.io Analyze user behavior
Toggl toggl.com Analytics provider
Userflow userflow.com
Vanta vanta.com Application Analytics; Data and analytics
Changes
None since tracking began.