# Labra

Labra declares [4 subprocessors](https://thirdpartyindex.com/vendors/labra#subprocessors) in [its subprocessor list](https://trust.labra.io/?itemUid=e3fae2ca-94a9-416b-b577-5c90e382df57), which we last checked on 2026-11-11 ([evidence](https://thirdpartyindex.com/evidence/222440)). They include [Amazon Web Services](https://thirdpartyindex.com/vendors/amazon-web-services), [Google Cloud](https://thirdpartyindex.com/vendors/google-cloud) and [Atlassian](https://thirdpartyindex.com/vendors/atlassian). No published changes since we first read it on 2026-11-06.

Labra (labra.io): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/labra
- Documents last verified: 2026-11-11
- Transparency rating: 67/100 (how much it publishes, not how secure it is): Subprocessor list 30/30; Processing locations 8/8; Purposes 7/7; Data processing addendum 0/12 (not found); Trust center 8/8; Privacy policy 6/6; security.txt 0/6 (not found); Security page 0/5 (not found); Status page 0/5 (not found); Vulnerability disclosure 0/5 (not found); Pages still reachable 8/8
- Supply chain: relies on 4 tracked vendors directly, 61 within two hops, 264 within three; 0 tracked vendors rely on it directly, 0 within two hops, 0 within three
- Cite as: Labra, Third Party Index, https://thirdpartyindex.com/vendors/labra (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Trust center | https://trust.labra.io/ | 2026-11-11 | 2026-11-06 |
| Subprocessor list | https://trust.labra.io/?itemUid=e3fae2ca-94a9-416b-b577-5c90e382df57 | 2026-11-11 | 2026-11-06 |
| Privacy policy | https://labra.io/privacy-policy/ | 2026-11-11 | 2026-11-11 |
| Terms | https://labra.io/terms-and-conditions/ | 2026-11-11 | 2026-11-11 |

## Subprocessors (4)

As its own list states them.

| Subprocessor | Purpose | Location | Listed since |
|---|---|---|---|
| [Amazon Web Services (AWS)](https://thirdpartyindex.com/vendors/amazon-web-services.md) | Amazon Web Services is a cloud service provider that stores, transmits, and processes all customer data. Customer databases, uploaded objects, and application servers are hosted a customer-specified region where these services are offered. | United States | 2026-11-06 |
| [GitHub](https://thirdpartyindex.com/vendors/github.md) | GitHub is a cloud-based development platform that stores, tracks, and manages all software code. Developer repositories, project documentation, and version histories are hosted in secure code repositories where collaboration, automated testing, and deployment services are offered. | United States | 2026-11-06 |
| [Google Workspace](https://thirdpartyindex.com/vendors/google-cloud.md) | Google Workspace is a cloud-based productivity suite that stores, manages, and processes all business communications and documents. Customer emails, shared calendars, and collaborative files are hosted in secure cloud storage where real-time editing, video conferencing, and administrative control services are offered. | United States | 2026-11-06 |
| [Jira](https://thirdpartyindex.com/vendors/atlassian.md) | Jira is a cloud-based project management tool that stores, tracks, and manages all software development workflows and issues. Team task boards, project roadmaps, and bug reports are hosted in a centralized workspace where sprint planning, automated tracking, and release management services are offered. | United States | 2026-11-06 |

Read from ([evidence](https://thirdpartyindex.com/evidence/222440)). CSV: https://thirdpartyindex.com/vendors/labra/subprocessors.csv

## Compliance

As its trust center lists them.

- Audited: SOC 2 Type II ([evidence](https://thirdpartyindex.com/evidence/222438))

## Web Technologies

Labra's homepage made 170 requests to 24 domains, and 10 services controlled by another company. Loaded on 2026-11-06 by a browser that accepted nothing; other visits may load more or less. What a page loads is not a list of who receives customer data.

10 third parties by category: Analytics 4 (HubSpot, Factors.ai, LinkedIn; usually detected as Analytics: G2.com); Advertising 2 (Google Cloud; usually detected as Advertising: Microsoft); CDN 1 (Cloudflare); Documentation 1 (Zendesk); SEO 1 (Ahrefs); Security 1 (usually detected as Security: Amazon Web Services). Each company that appears controlled by another organization is counted once, under the main category of the technologies detected from it on this homepage or, when none was, the category recorded from the company's own page (marked reviewed) or else the one it is usually detected as on other published homepages (marked as such); unclassified: none of these.

### Third parties (10)

- Google Cloud: 40 requests to google.com, gstatic.com, googletagmanager.com, doubleclick.net, fonts.googleapis.com; DoubleClick Floodlight, Google Analytics, Google Tag Manager, reCAPTCHA (its subprocessor list names it too)
- Zendesk: 14 requests to zdassets.com, zendesk.com; Zendesk, Zendesk Widget
- HubSpot: 11 requests to hsforms.com, hubspot.com, hs-analytics.net, hs-banner.com, hs-scripts.com, hsadspixel.net, hsforms.net, hubapi.com; HubSpot, HubSpot Analytics
- Factors.ai: 7 requests to factors.ai; Factors.ai
- Microsoft: 7 requests to clarity.ms
- Cloudflare: 4 requests to cloudflare.com; cdnjs
- G2.com: 3 requests to g2.com
- LinkedIn: 3 requests to linkedin.com, licdn.com; Linkedin Insight Tag
- Ahrefs: 1 request to ahrefs.com; Ahrefs
- Amazon Web Services: 1 request to s3-us-west-2.amazonaws.com (its subprocessor list names it too)

### First party (1)

- Labra: 79 requests to labra.io; Cloudflare, FancyBox 3.5.7, Flickity, Google Font API, HSTS, HTTP/3, Kinsta, LottieFiles 5.12.2, Material Design Lite, Microsoft Clarity, MySQL, Open Graph, PHP, Priority Hints, RSS, RankMath SEO, SimplexNoise.js, Site Kit 1.155.0, WordPress 7.1.4, anime.js 3.2.1, imagesLoaded 4.1.4, jQuery 3.7.1, jQuery Migrate 3.4.1, wpBakery

8 tracked companies loaded by the homepage are not in Labra's subprocessor list. A website can use a service without it processing customer data.

## Subprocessor of (0)

No tracked vendor lists it.

## Incidents reported by Labra's subprocessors

Incidents reported in the last 30 days on their own status pages by 1 vendor Labra lists as a subprocessor. A subprocessor list names a company, not the service an incident touched.

- 2026-11-11: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Labra lists as a subprocessor, reported Impact across multiple GitHub products including Actions, Pages, and Copilot products. (critical)
- 2026-11-11: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Labra lists as a subprocessor, reported Incident with Webhooks (minor)
- 2026-11-10: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Labra lists as a subprocessor, reported Incident with Git Operations and Pull Requests (critical)
- 2026-11-09: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Labra lists as a subprocessor, reported Degraded availability for GPT-5.3 Codex and GPT-5.6 models in Copilot (major)
- 2026-11-09: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Labra lists as a subprocessor, reported Incident with Actions and Checks API (critical)
- 2026-11-09: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Labra lists as a subprocessor, reported Incident with Webhooks and Actions (major)
- 2026-11-09: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Labra lists as a subprocessor, reported Increased timeouts due to surge in anonymous users (minor)
- 2026-11-08: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Labra lists as a subprocessor, reported Increase in timeouts for some unauthenticated users (minor)
- 2026-11-05: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Labra lists as a subprocessor, reported Degraded performance for multiple GitHub services (minor)
- 2026-11-05: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Labra lists as a subprocessor, reported Incident with Actions (minor)
- 2026-11-04: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Labra lists as a subprocessor, reported Incident with Actions (major)
- 2026-11-04: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Labra lists as a subprocessor, reported Incident with Actions and Pages (major)
- 2026-11-04: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Labra lists as a subprocessor, reported Incident with Pull Requests, Git Operations and Issues (major)
- 2026-11-04: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Labra lists as a subprocessor, reported Increased task-related errors for Copilot Mission Control (minor)
- 2026-11-03: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Labra lists as a subprocessor, reported Incident with Git Operations (minor)
- 2026-11-03: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Labra lists as a subprocessor, reported Incident with API, Git, and Copilot requests (minor)
- 2026-11-02: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Labra lists as a subprocessor, reported Elevated errors on GPT-5.4 Nano (minor)
- 2026-10-30: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Labra lists as a subprocessor, reported Incident with Dependabot (minor)
- 2026-10-30: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Labra lists as a subprocessor, reported Incident with Actions, Pages, and Webhooks (major)
- 2026-10-30: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Labra lists as a subprocessor, reported Disruption with GitHub services (critical)
- 2026-10-29: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Labra lists as a subprocessor, reported Disruption with Copilot Cloud services (minor)
- 2026-10-28: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Labra lists as a subprocessor, reported Disruption with some Copilot services (critical)
- 2026-10-27: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Labra lists as a subprocessor, reported Elevated 404s for GitHub App s2s tokens in git/API (no impact stated)
- 2026-10-26: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Labra lists as a subprocessor, reported Incident with Actions, Issues, API Requests and Pull Requests (minor)
- 2026-10-23: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Labra lists as a subprocessor, reported Grok 4.6 and Grok 4.7 Service Issues (minor)
- 2026-10-23: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Labra lists as a subprocessor, reported Disruption with Dependabot Alerts (minor)
- 2026-10-23: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Labra lists as a subprocessor, reported Delayed Actions status check results (minor)
- 2026-10-22: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Labra lists as a subprocessor, reported Project updates delayed (minor)
- 2026-10-22: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Labra lists as a subprocessor, reported Incident with Actions (minor)
- 2026-10-21: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Labra lists as a subprocessor, reported Delays for Pull Requests and Webhook deliveries (critical)
- 2026-10-19: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Labra lists as a subprocessor, reported Degraded availability for GitHub Actions, GitHub Pages and Webhooks (critical)
- 2026-10-15: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Labra lists as a subprocessor, reported CCA Automations are delayed when starting an Automation (minor)
- 2026-10-13: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Labra lists as a subprocessor, reported \[Retroactive\] Actions workflow run logs delayed (minor)

The subprocessor list as we read it on any date: https://thirdpartyindex.com/labs/time-machine/labra

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api
