# MacPaw

MacPaw (macpaw.com): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/macpaw
- Documents last verified: 2026-10-03
- Transparency rating: 78/100 (how much it publishes, not how secure it is): Subprocessor list 30/30; Processing locations 8/8; Purposes 7/7; Data processing addendum 0/12 (not found); Trust center 8/8; Privacy policy 6/6; security.txt 6/6; Security page 0/5 (not found); Status page 0/5 (not found); Vulnerability disclosure 5/5; Pages still reachable 8/8
- Supply chain: relies on 3 tracked vendors directly, 36 within two hops, 128 within three; 1 tracked vendors rely on it directly, 1 within two hops, 1 within three
- Cite as: MacPaw, Third Party Index, https://thirdpartyindex.com/vendors/macpaw (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Trust center | https://security.macpaw.com/?svn=772264301.1791021628 | 2026-10-03 | 2026-10-03 |
| Subprocessor list | https://macpaw.com/legal/leebry-subprocessors | 2026-10-03 | 2026-10-03 |
| Privacy policy | https://macpaw.com/legal/eney-privacy-policy | 2026-10-03 | 2026-10-03 |
| Terms | https://macpaw.com/legal/eney-terms-of-service | 2026-10-03 | 2026-10-03 |
| security.txt | https://macpaw.com/.well-known/security.txt | 2026-10-03 | 2026-10-03 |
| Security advisories | https://macpaw.com/legal/vulnerability-disclosure-policy | 2026-10-03 | 2026-10-03 |

## Subprocessors (4)

As its own list states them.

| Subprocessor | Purpose | Location | Listed since |
|---|---|---|---|
| [Google](https://thirdpartyindex.com/vendors/google-cloud.md) | AI driven data processing | EU/EEA | 2026-10-03 |
| [Google Cloud Platform](https://thirdpartyindex.com/vendors/google-cloud.md) | Cloud infrastructure provider | EU/EEA | 2026-10-03 |
| [Langfuse](https://thirdpartyindex.com/vendors/langfuse.md) | LLM observability and tracing platform | EU/EEA | 2026-10-03 |
| [Open AI](https://thirdpartyindex.com/vendors/openai.md) (AI model provider: OpenAI) | Generative AI | EU/EEA | 2026-10-03 |

Read from ([evidence](https://thirdpartyindex.com/evidence/37090)). CSV: https://thirdpartyindex.com/vendors/macpaw/subprocessors.csv

AI model providers (or a cloud provider's AI model service) among these entries: 1. All vendors that list one: https://thirdpartyindex.com/ai

## Compliance

As its trust center lists them.

- Audited: ISO/IEC 27001, CSA STAR ([evidence](https://thirdpartyindex.com/evidence/37092))
- Claimed: GDPR ([evidence](https://thirdpartyindex.com/evidence/37092))

## Subprocessor of (1)

Tracked vendors whose own subprocessor lists name it, and what they say they use it for.

- [Spellar](https://thirdpartyindex.com/vendors/spellar.md): AI processing for Setapp users; distribution

## Security contact

From its security.txt (https://macpaw.com/.well-known/security.txt) ([evidence](https://thirdpartyindex.com/evidence/37089)):

- Contact: mailto:security@macpaw.com
- Disclosure policy: https://macpaw.com/vulnerability-disclosure-policy
- Languages: en
- Valid until 2032-06-02

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api