# Lago

Lago declares [9 subprocessors](https://thirdpartyindex.com/vendors/lago#subprocessors) in [its subprocessor list](https://getlago.com/legal/subprocessors), which we last checked on 2026-11-12 ([evidence](https://thirdpartyindex.com/evidence/264554)). They include [Amazon Web Services](https://thirdpartyindex.com/vendors/amazon-web-services), [Sentry](https://thirdpartyindex.com/vendors/sentry) and [ClickHouse](https://thirdpartyindex.com/vendors/clickhouse). No published changes since we first read it on 2026-09-28. [6 tracked vendors](https://thirdpartyindex.com/vendors/lago#used-by) name Lago as a subprocessor, including [Groq](https://thirdpartyindex.com/vendors/groq), [Mistral](https://thirdpartyindex.com/vendors/mistral) and [Gladia](https://thirdpartyindex.com/vendors/gladia).

Lago (getlago.com): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/lago
- Documents last verified: 2026-11-12
- Transparency rating: 77/100 (how much it publishes, not how secure it is): Subprocessor list 30/30; Processing locations 8/8; Purposes 7/7; Data processing addendum 0/12 (not found); Trust center 8/8; Privacy policy 6/6; security.txt 0/6 (not found); Security page 5/5; Status page 5/5; Vulnerability disclosure 0/5 (not found); Pages still reachable 8/8
- Supply chain: relies on 8 tracked vendors directly, 75 within two hops, 309 within three; 6 tracked vendors rely on it directly, 108 within two hops, 1467 within three
- Cite as: Lago, Third Party Index, https://thirdpartyindex.com/vendors/lago (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Trust center | https://security.getlago.com/ | 2026-11-12 | 2026-11-12 |
| Subprocessor list | https://getlago.com/legal/subprocessors | 2026-11-12 | 2026-11-12 |
| Privacy policy | https://getlago.com/legal/privacy-policy | 2026-11-12 | 2026-10-02 |
| Terms | https://getlago.com/legal/lago-self-hosted-terms | 2026-11-12 | 2026-10-02 |
| Security page | https://getlago.com/security | 2026-11-12 | 2026-10-17 |
| Status page | https://status.getlago.com/ | 2026-11-12 | 2026-11-01 |

## Subprocessors (9)

As its own list states them.

| Subprocessor | Purpose | Location | Listed since |
|---|---|---|---|
| [Amazon Web Services, Inc. (AWS)](https://thirdpartyindex.com/vendors/amazon-web-services.md) | Cloud hosting, compute, storage, database, caching, and networking infrastructure, and delivery of emails sent on behalf of customers (such as invoices, credit notes and payment receipts) through Amazon SES. Processes customer account data, billing events, usage records, and email recipient addresses and message content. | United States or EU, depending on customer datacenter election | 2026-09-30 |
| [ClickHouse, Inc.](https://thirdpartyindex.com/vendors/clickhouse.md) | Analytics database for usage metering and event aggregation. Processes usage events and metering data. | United States or EU, depending on customer datacenter election | 2026-09-28 |
| [Functional Software, Inc. (Sentry)](https://thirdpartyindex.com/vendors/sentry.md) | Application error tracking and performance monitoring. May process user identifiers and IP addresses in error traces. | United States or EU, depending on customer datacenter election | 2026-09-28 |
| [incident.io Ltd](https://thirdpartyindex.com/vendors/incident-io.md) | Incident management, alerting, and on-call scheduling. Processes internal operational data only. | EU (Belgium) | 2026-09-28 |
| [Mistral AI](https://thirdpartyindex.com/vendors/mistral.md) (AI model provider: Mistral) | AI model inference for platform features. May process customer billing data and usage patterns. | France | 2026-09-28 |
| [Nango, Inc.](https://thirdpartyindex.com/vendors/nango-dev.md) | Integration platform — Lago builds connectors on top of the Nango API to sync customer account data, invoice data, and CRM records with third-party systems (e.g., HubSpot, Xero, NetSuite, Avalara, Anrok). Only activated if the customer uses a supported integration. | United States | 2026-09-28 |
| [Peaberry Software, Inc. (Customer.io)](https://thirdpartyindex.com/vendors/customer-io.md) | Delivery of Lago's own product and lifecycle communications to its customers. Does not deliver emails sent on behalf of customers. Processes email addresses and customer identifiers. | United States | 2026-09-30 |
| [Pylon Labs, Inc.](https://thirdpartyindex.com/vendors/pylon.md) | Customer support ticketing and communication. Processes customer contact information and support request content. | United States | 2026-09-28 |
| RisingWave Labs, Inc. | Managed stream processing (RisingWave Cloud) for real-time usage and wallet balance computation. Processes usage events and replicated billing data such as customer, subscription, plan, and wallet records. | EU | 2026-11-12 |

Read from ([evidence](https://thirdpartyindex.com/evidence/25099)). CSV: https://thirdpartyindex.com/vendors/lago/subprocessors.csv

AI model providers (or a cloud provider's AI model service) among these entries: 1. All vendors that list one: https://thirdpartyindex.com/ai

## Compliance

As its trust center lists them.

- Audited: SOC 2 ([evidence](https://thirdpartyindex.com/evidence/88873))
- Claimed: SOC 2 Type II ([evidence](https://thirdpartyindex.com/evidence/88873))

## Web Technologies

Lago's homepage made 83 requests to 1 domain. Loaded on 2026-11-11 by a browser that accepted nothing; other visits may load more or less. What a page loads is not a list of who receives customer data.

### First party (1)

- Lago: 83 requests to getlago.com; Amazon CloudFront, Amazon Web Services, HTTP/3, Lucide, Next.js 16.3.8, Next.js App Router, Open Graph, PWA, Priority Hints, Radix UI, React, Turbopack, Webpack, c15t

## Subprocessor of (6)

Tracked vendors whose own subprocessor lists name it, and what they say they use it for.

- [Cerebrium](https://thirdpartyindex.com/vendors/cerebrium.md): Billing and metering; Usage records, invoices, customer billing details
- [Gladia](https://thirdpartyindex.com/vendors/gladia.md): Payments
- [Groq](https://thirdpartyindex.com/vendors/groq.md): GroqCloud Billing & Invoicing
- [Laravel](https://thirdpartyindex.com/vendors/laravel.md): Billing provider
- [Mistral](https://thirdpartyindex.com/vendors/mistral.md): Billing; Products: All Products under a paid subscription
- [SurrealDB](https://thirdpartyindex.com/vendors/surrealdb.md): Metering and Usage-Based Billing Provider

## Service status

Incidents it reported on its own status page.

- Last 90 days: 8 reported incidents (0 major or critical, 8 minor, 0 with no impact stated)
- Typical time to resolve: 10 min
- Status page last read: 2026-11-12
- 2026-11-01: Degraded performance on our API (minor)
- 2026-10-19: Degraded performance on our API (minor)
- 2026-10-19: Degraded performance on our API (minor)
- 2026-10-19: Degraded performance on our API (minor)
- 2026-09-17: Degraded performance on our API (minor)
- 2026-09-11: Degraded performance on our API (minor)
- 2026-08-29: Degraded performance on our API (minor)
- 2026-08-17: Degraded performance on our API (minor)

## Incidents reported by Lago's subprocessors

Incidents reported in the last 30 days on their own status pages by 5 vendors Lago lists as subprocessors. A subprocessor list names a company, not the service an incident touched.

- 2026-11-12: [Pylon](https://thirdpartyindex.com/vendors/pylon#status), which Lago lists as a subprocessor, reported Microsoft outage - Outlook, Teams (minor)
- 2026-11-11: [Sentry](https://thirdpartyindex.com/vendors/sentry#status), which Lago lists as a subprocessor, reported US issues feed throwing intermittent errors (minor)
- 2026-11-11: [ClickHouse](https://thirdpartyindex.com/vendors/clickhouse#status), which Lago lists as a subprocessor, reported Provisioning and scaling operations may take longer in AWS ap-northeast-1 Tokyo (minor)
- 2026-11-11: [Pylon](https://thirdpartyindex.com/vendors/pylon#status), which Lago lists as a subprocessor, reported Slack Integration Connection Issues (major)
- 2026-11-11: [incident.io](https://thirdpartyindex.com/vendors/incident-io#status), which Lago lists as a subprocessor, reported Disruption to Slack incident channels and messages (major)
- 2026-11-11: [Sentry](https://thirdpartyindex.com/vendors/sentry#status), which Lago lists as a subprocessor, reported Account emails not being delivered (major)
- 2026-11-10: [Sentry](https://thirdpartyindex.com/vendors/sentry#status), which Lago lists as a subprocessor, reported EU region replay ingestion latency (minor)
- 2026-11-06: [Customer.io](https://thirdpartyindex.com/vendors/customer-io#status), which Lago lists as a subprocessor, reported Customers are Unable to add new Email Sending Domains (major)
- 2026-11-05: [Pylon](https://thirdpartyindex.com/vendors/pylon#status), which Lago lists as a subprocessor, reported Delay in Analytics Data (minor)
- 2026-11-04: [Sentry](https://thirdpartyindex.com/vendors/sentry#status), which Lago lists as a subprocessor, reported Ingestion delays across all data (minor)
- 2026-11-04: [Pylon](https://thirdpartyindex.com/vendors/pylon#status), which Lago lists as a subprocessor, reported Inbound Email Delays (minor)
- 2026-11-03: [Sentry](https://thirdpartyindex.com/vendors/sentry#status), which Lago lists as a subprocessor, reported Delays in spans and transactions processing (major)
- 2026-11-03: [Sentry](https://thirdpartyindex.com/vendors/sentry#status), which Lago lists as a subprocessor, reported Sentry.io dashboard and API is down (critical)
- 2026-11-02: [ClickHouse](https://thirdpartyindex.com/vendors/clickhouse#status), which Lago lists as a subprocessor, reported SQL Console database connection outage (minor)
- 2026-11-02: [incident.io](https://thirdpartyindex.com/vendors/incident-io#status), which Lago lists as a subprocessor, reported Sentry integration degraded (minor)
- 2026-11-02: [Sentry](https://thirdpartyindex.com/vendors/sentry#status), which Lago lists as a subprocessor, reported Sentry dashboard is down (critical)
- 2026-10-27: [Customer.io](https://thirdpartyindex.com/vendors/customer-io#status), which Lago lists as a subprocessor, reported Customer.io UI is currently unavailable for some customers (minor)
- 2026-10-23: [ClickHouse](https://thirdpartyindex.com/vendors/clickhouse#status), which Lago lists as a subprocessor, reported Degraded support ticket submission and response (minor)
- 2026-10-21: [Sentry](https://thirdpartyindex.com/vendors/sentry#status), which Lago lists as a subprocessor, reported Increased latency processing integration webhooks (minor)
- 2026-10-21: [Sentry](https://thirdpartyindex.com/vendors/sentry#status), which Lago lists as a subprocessor, reported Sentry.io not loading in US region (critical)
- 2026-10-20: [Sentry](https://thirdpartyindex.com/vendors/sentry#status), which Lago lists as a subprocessor, reported Sentry.io not loading (major)
- 2026-10-20: [ClickHouse](https://thirdpartyindex.com/vendors/clickhouse#status), which Lago lists as a subprocessor, reported Google Cloud Outage (minor)
- 2026-10-19: [Sentry](https://thirdpartyindex.com/vendors/sentry#status), which Lago lists as a subprocessor, reported Sentry is down (critical)
- 2026-10-14: [Pylon](https://thirdpartyindex.com/vendors/pylon#status), which Lago lists as a subprocessor, reported Platform loading issues (no impact stated)
- 2026-10-14: [Sentry](https://thirdpartyindex.com/vendors/sentry#status), which Lago lists as a subprocessor, reported Ingestion Halted for EAP data in EU (major)

The subprocessor list as we read it on any date: https://thirdpartyindex.com/labs/time-machine/lago

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api