Hex
hex.tech · data
Certifications and attestations: SOC 2 Type IIPCI DSS
Says it complies with: HIPAA, GDPR, CCPA/CPRA, Data Privacy Framework
As listed on Hex's trust center (evidence) ; reports themselves are usually shared on request.
Transparency
Breakdown
| Subprocessor list | 30 / 30 | |
| Processing locations | 8 / 8 | |
| Purposes | partial | 5 / 7 |
| Data processing addendum | 12 / 12 | |
| Trust center | 8 / 8 | |
| Privacy policy | 6 / 6 | |
| security.txt | 6 / 6 | |
| Security page | 5 / 5 | |
| Status page | 5 / 5 | |
| Vulnerability disclosure | not found | 0 / 5 |
| Pages still reachable | 8 / 8 | |
| Total | 93 / 100 |
Only documents we can retrieve count: a page behind a login or a broken link scores nothing.
Badge
For Hex's own site; it updates with the rating.
<a href="https://thirdpartyindex.com/vendors/hex"><img src="https://thirdpartyindex.com/badge/hex.svg" alt="Hex transparency rating on Third Party Index" height="20"></a>[](https://thirdpartyindex.com/vendors/hex)Documents
| Document | Verified | Changed | Evidence |
|---|---|---|---|
| Trust center conveyor | snapshot | ||
| Subprocessor list | snapshot | ||
| Data processing addendum | snapshot | ||
| Privacy policy | snapshot | ||
| Terms | snapshot | ||
| Security page | snapshot | ||
| security.txt | snapshot | ||
| Status page statuspage | snapshot |
Subprocessors
| Name | Purpose | Location | Listed since |
|---|---|---|---|
| Amazon Web Services | Cloud hosted infrastructure and data hosting | Corporate: USA; Location of Processing: Deployment Region | |
| Anthropic | AI services | Corporate: USA; Location of Processing: USA | |
| Baseten | Corporate: USA; Location of Processing: Deployment Region | ||
| Browserbase | Browser automation | Corporate: USA; Location of Processing: USA | |
| Cloudflare | Content delivery network provider | Corporate: USA; Location of Processing: Global | |
| Datadog | Monitoring | Corporate: USA; Location of Processing: Deployment Region | |
| Fivetran | Data connector | Corporate: USA; Location of Processing: USA | |
| Corporate: USA; Location of Processing: Deployment Region | |||
| Hightouch | Corporate: USA; Location of Processing: USA | ||
| HubSpot | Corporate: USA; Location of Processing: USA | ||
| LaunchDarkly | Feature gating | Corporate: USA; Location of Processing: USA | |
| Modal | Corporate: USA; Location of Processing: Deployment Region | ||
| OpenAI | Corporate: USA; Location of Processing: Deployment Region | ||
| Parallel | Corporate: USA; Location of Processing: USA | ||
| Pylon | Customer support | Corporate: USA; Location of Processing: USA | |
| RudderStack | Analytics | Corporate: USA; Location of Processing: USA | |
| Salesforce (including Slack) | Customer engagement | Corporate: USA; Location of Processing: USA | |
| Snowflake | Data warehouse | Corporate: USA; Location of Processing: USA | |
| Stripe | Billing | Corporate: USA; Location of Processing: Global | |
| Wiz | Security monitoring | Corporate: USA; Location of Processing: USA | |
| WorkOS | User management and audit logs | Corporate: USA; Location of Processing: USA |
Listed as a subprocessor by (18)
Purposes as each company states them.
Calendly.com calendly.com Product related data analysis and visualization
Decagon decagon.ai Business Data Analytics; Platform for data science and analytics
DoiT doit.com Collaborative analytics and AI workspace
Fathom fathom.ai Data analytics
Figma figma.com Data analytics for support issues
Infisical infisical.com Infisical uses Hex for data analytics.
LaunchDarkly launchdarkly.com
Noom noom.com
Parallel Web Systems parallel.ai Data analytics
Perplexity AI perplexity.ai Business intelligence tool; Data analytics
Pylon usepylon.com Data Analytics
Railway railway.com Business Analytics
Replicated replicated.com Data transformation or migration
Segment segment.com Hex provides internal business intelligence, data visualization, and collaborative analytics for specific Twilio Products and Services
SendGrid sendgrid.com Hex provides internal business intelligence, data visualization, and collaborative analytics for specific Twilio Products and Services
Twilio twilio.com Hex provides internal business intelligence, data visualization, and collaborative analytics for specific Twilio Products and Services
UserVoice uservoice.com
incident.io incident.io Data Analytics Tool
Service status
1 incident in the last 90 days (0 major or critical, 1 minor, 0 with no stated impact) · typically resolved in 3 h 27 min
| Began | Incident | Impact | Lasted |
|---|---|---|---|
| Upstream Snowflake Incident | minor | 3 h 27 min evidence | |
| Projects not loading | major | 17 min evidence | |
| Some users may have trouble acquiring a new kernel | minor | 1 h 24 min evidence | |
| Screenshots not attaching to scheduled notifications | minor | 26 min evidence | |
| HTML not rendering on notebooks and apps for some users | minor | 20 days evidence | |
| Projects not loading | critical | 55 min evidence | |
| Issue loading displays in some published apps | major | 2 h 31 min evidence |
As Hex's status page reports its own incidents (scheduled maintenance left out), read every few hours since .
Changes
None since tracking began.