Laravel
Laravel declares 33 subprocessors in its subprocessor list, which we last checked on Nov 11, 2026 (evidence). They include Amazon Web Services, Google Cloud and OpenAI. No published changes since we first read it on Sep 27, 2026.
Not listed by any tracked vendor.
Not loaded by any published homepage.
Subprocessors CSV of Laravel's subprocessors · Atom feed of Laravel's subprocessors DORA draft CSV of Laravel's subprocessors as declared by Laravel what's this? ·
33 third parties.
| Name | Purpose | Location | Listed since |
|---|---|---|---|
| Afi Data Protection | Google Workspace backup and recovery | Global | |
| Amazon Web Services (AWS) | Cloud service provider | Global | |
| Anrok | Sales tax compliance | US | |
| Anthropic AI | AI provider | US | |
| Campfire | ERP | US | |
| ClickHouse | Database provider | US, EU | |
| Cloudflare | Cloud service provider | Global | |
| Digital Ocean | Cloud service provider | Global | |
| DocuSign | Electronic signature platform | US | |
| Gong | Revenue intelligence platform | US | |
| Google Workspace | Cloud productivity and collaboration | Global | |
| Grafana Labs | Observability | US | |
| Granola AI | AI transcription | US | |
| Hex | Data analytics | US | |
| HubSpot | CRM platform | US, Germany | |
| Lago | Billing provider | US | |
| Linear | Project management | US | |
| Neon | Database provider | Global | |
| Notion | Internal knowledge base | US | |
| OpenAI AI | AI provider | US | |
| Plain | Support desk | US | |
| PlanetScale | Database provider | Global | |
| Polytomic | ETL tooling | US | |
| PostHog | Web analytics | EU | |
| Postmark | Transactional email | US | |
| RudderStack | Customer data warehouse and web analytics | US | |
| Sentry | Exception monitoring | US | |
| Slack | Internal messaging platform | US | |
| Snowflake | Data warehouse and business analytics | US | |
| Stripe | Payment processing | Global | |
| Upstash | Managed cache provider | Global | |
| Wispr Flow | AI transcription | US | |
| WorkOS | Enterprise authentication platform | US |
Web TechnologiesCSV of Laravel's web technologies · Atom feed of Laravel's web technologies
Laravel's homepage made 121 requests to 26 domains, and 11 services controlled by another company.
11 third parties by category: Advertising 4Analytics 4Other 3
4 tracked companies loaded by the homepage are not in Laravel's subprocessor list. A website can use a service without it processing customer data.
ComplianceCSV of Laravel's compliance · Atom feed of Laravel's compliance
- Certified
- Says it complies with
Certifications as Laravel's trust center lists them; reports are usually shared on request (evidence)
Security recordCSV of Laravel's security record · Atom feed of Laravel's security record
What public security catalogs list for Laravel, in their words.
Known exploited vulnerabilities
3 vulnerabilities in Laravel's software that CISA lists as exploited in the wild.
| CVE | Product | Vulnerability | Listed |
|---|---|---|---|
| CVE-2025-54068 | Livewire | Laravel Livewire Code Injection Vulnerability | |
| CVE-2018-15133 | Laravel Framework | Laravel Deserialization of Untrusted Data Vulnerability | |
| CVE-2021-3129 | Ignition | Laravel Ignition File Upload Vulnerability used by ransomware |
Source: CISA Known Exploited Vulnerabilities catalog (evidence)
Incidents reported by Laravel's subprocessorsCSV of incidents reported by vendors Laravel lists · Atom feed of incidents reported by vendors Laravel lists
160 reported incidents in the last 30 days, by 18 of the vendors Laravel lists as subprocessors.
A subprocessor list names a company, not the service an incident touched. This does not show that Laravel was involved.
And 135 more. All of them: CSV · Who is around them.
ChangesCSV of Laravel's changes · Atom feed of Laravel's changes
See the list as we read it on any date: Time machine
- Added certification: HIPAA evidence: certification: HIPAA