Laravel

laravel.com

Laravel declares 33 subprocessors in its subprocessor list, which we last checked on Nov 11, 2026 (evidence). They include Amazon Web Services, Google Cloud and OpenAI. No published changes since we first read it on Sep 27, 2026.

Subprocessors CSV of Laravel's subprocessors · Atom feed of Laravel's subprocessors DORA draft CSV of Laravel's subprocessors as declared by Laravel what's this? · 

33 third parties.

NamePurposeLocationListed since
Afi Data Protection Google Workspace backup and recoveryGlobal
Amazon Web Services (AWS) Cloud service providerGlobal
Anrok Sales tax complianceUS
Anthropic AIAI providerUS
Campfire ERPUS
ClickHouse Database providerUS, EU
Cloudflare Cloud service providerGlobal
Digital Ocean Cloud service providerGlobal
DocuSign Electronic signature platformUS
Gong Revenue intelligence platformUS
Google Workspace Cloud productivity and collaborationGlobal
Grafana Labs ObservabilityUS
Granola AI AI transcriptionUS
Hex Data analyticsUS
HubSpot CRM platformUS, Germany
Lago Billing providerUS
Linear Project managementUS
Neon Database providerGlobal
Notion Internal knowledge baseUS
OpenAI AIAI providerUS
Plain Support deskUS
PlanetScale Database providerGlobal
Polytomic ETL toolingUS
PostHog Web analyticsEU
Postmark Transactional emailUS
RudderStack Customer data warehouse and web analyticsUS
Sentry Exception monitoringUS
Slack Internal messaging platformUS
Snowflake Data warehouse and business analyticsUS
Stripe Payment processingGlobal
Upstash Managed cache providerGlobal
Wispr Flow AI transcriptionUS
WorkOS Enterprise authentication platformUS

Web TechnologiesCSV of Laravel's web technologies · Atom feed of Laravel's web technologies

Laravel's homepage made 121 requests to 26 domains, and 11 services controlled by another company.

Advertising (4): Reddit, Inc., Google Cloud, OpenAI, X Corp.Analytics (4): HubSpot, LinkedIn, Fathom Analytics; usually detected as Analytics: CloudflareOther (3): Customer data platform: RudderStack; usually detected as JavaScript libraries: bunny.net; SEO: Ahrefs

11 third parties by category: Advertising 4Analytics 4Other 3

Third parties 11 · 57 requests
RudderStack Rudderstack 10% of the page's requests 12
HubSpotsubprocessor HubSpot HubSpot Analytics 7% of the page's requests 9
Reddit, Inc. Reddit Ads 7% of the page's requests 9
Google Cloudsubprocessor DoubleClick Floodlight Google Analytics Google Tag Manager 7% of the page's requests 8
Cloudflaresubprocessor cloudflare.com 5% of the page's requests 6
LinkedIn Linkedin Insight Tag 2% of the page's requests 3
OpenAIsubprocessor ChatGPT Ads Measurement Pixel 2% of the page's requests 3
X Corp. Twitter Ads 2% of the page's requests 3
Fathom Analytics Fathom 2% of the page's requests 2
Ahrefs Ahrefs <1% of the page's requests 1
bunny.net bunny.net <1% of the page's requests 1
First party 1 · 64 requests
Laravel Algolia Algolia DocSearch Bunny Bunny Fonts Cloudflare Cloudflare Turnstile Framer Motion Inertia.js Laravel Open Graph PHP PWA Priority Hints Statamic 53% of the page's requests 64

4 tracked companies loaded by the homepage are not in Laravel's subprocessor list. A website can use a service without it processing customer data.

ComplianceCSV of Laravel's compliance · Atom feed of Laravel's compliance

Certified
Says it complies with

Certifications as Laravel's trust center lists them; reports are usually shared on request (evidence)

Security recordCSV of Laravel's security record · Atom feed of Laravel's security record

What public security catalogs list for Laravel, in their words.

Known exploited vulnerabilities

3 vulnerabilities in Laravel's software that CISA lists as exploited in the wild.

CVEProductVulnerabilityListed
CVE-2025-54068LivewireLaravel Livewire Code Injection Vulnerability
CVE-2018-15133Laravel FrameworkLaravel Deserialization of Untrusted Data Vulnerability
CVE-2021-3129IgnitionLaravel Ignition File Upload Vulnerability used by ransomware

Source: CISA Known Exploited Vulnerabilities catalog (evidence)

Incidents reported by Laravel's subprocessorsCSV of incidents reported by vendors Laravel lists · Atom feed of incidents reported by vendors Laravel lists

160 reported incidents in the last 30 days, by 18 of the vendors Laravel lists as subprocessors.

A subprocessor list names a company, not the service an incident touched. This does not show that Laravel was involved.

DateCompanyIncidentImpactLasted
OpenAIGPT-image-2.5 and 2.6 Sunburst & Flare High error rate minorongoing
SnowflakeINC20000347 minor32 min
OpenAIUnable to start new Workspace Agent runs critical9 h 42 min
OpenAIElevated errors affecting logins, sign-ups, and ChatGPT features minor8 min
GrafanaDegraded performance for Grafana Cloud Metrics in prod-us-central-7 major1 h 35 min
GrafanaElevated query errors for Grafana Cloud Metrics in prod-us-east-3 minor4 h 13 min
SentryUS issues feed throwing intermittent errors minor51 min
ClickHouseProvisioning and scaling operations may take longer in AWS ap-northeast-1 Tokyo minor7 h 38 min
LinearSlack integration degraded due to Slack outage minor3 h 9 min
SentryAccount emails not being delivered major42 min
AnthropicElevated errors on Fable 52 and Mythos 52 no impact stated1 min
SentryEU region replay ingestion latency minor48 min
NotionSome Notion Agent sessions may hang or stop updating major2 h 19 min
RudderStackDelayed delivery to Snowflake Streaming destinations (AWS us-east-1) no impact stated12 h 4 min
HubSpotSome HubSpot tools may be unavailable for some users no impact stated51 min
GrafanaCloud Logs writes - Elevated latency and error rates in prod-eu-central-0 no impact stated17 min
OpenAIIncorrect cost data in Costs API exports no impact stated2 h 20 min
GrafanaMimir query unexpected response with status code 500 minor8 h 31 min
OpenAIElevated Errors On API minor42 min
PlainHelp Center errors no impact stated—
OpenAIElevated ChatGPT Conversation Errors minor52 min
PlainIntermittent API errors on write actions minor2 h 54 min
OpenAIElevated errors with image generation minor1 h 49 min
AnthropicDegraded performance for Claude Fable 5.1 minor26 min
WorkOSIntermittent 503 errors in certain regions minor4 h 19 min

And 135 more. All of them: CSV · Who is around them.

ChangesCSV of Laravel's changes · Atom feed of Laravel's changes

See the list as we read it on any date: Time machine

  1. Added certification: HIPAA evidence: certification: HIPAA
Rating badge for Laravel's site

Laravel transparency rating

It updates with the rating.

<a href="https://thirdpartyindex.com/vendors/laravel"><img src="https://thirdpartyindex.com/badge/laravel.svg" alt="Laravel transparency rating on Third Party Index" height="20"></a>
[![Laravel transparency rating on Third Party Index](https://thirdpartyindex.com/badge/laravel.svg)](https://thirdpartyindex.com/vendors/laravel)