# marimo marimo declares [10 subprocessors](https://thirdpartyindex.com/vendors/marimo#subprocessors) in [its subprocessor list](https://marimo.io/pages/legal/subprocessors), which we last checked on 2026-11-11 ([evidence](https://thirdpartyindex.com/evidence/140054)). They include [Cloudflare](https://thirdpartyindex.com/vendors/cloudflare), [Sentry](https://thirdpartyindex.com/vendors/sentry) and [posthog](https://thirdpartyindex.com/vendors/posthog). No published changes since we first read it on 2026-09-23. marimo (marimo.io): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index. - Page: https://thirdpartyindex.com/vendors/marimo - Documents last verified: 2026-11-11 - Transparency rating: 53/100 (how much it publishes, not how secure it is): Subprocessor list 30/30; Processing locations 8/8; Purposes 7/7; Data processing addendum 0/12 (not found); Trust center 0/8 (not found); Privacy policy 0/6 (not found); security.txt 0/6 (not found); Security page 0/5 (not found); Status page 0/5 (not found); Vulnerability disclosure 0/5 (not found); Pages still reachable 8/8 - Supply chain: relies on 10 tracked vendors directly, 76 within two hops, 315 within three; 0 tracked vendors rely on it directly, 0 within two hops, 0 within three - Cite as: marimo, Third Party Index, https://thirdpartyindex.com/vendors/marimo (data CC BY 4.0) ## Documents | Document | URL | Last verified | Last changed | |---|---|---|---| | Subprocessor list | https://marimo.io/pages/legal/subprocessors | 2026-11-11 | 2026-10-22 | | Terms | https://marimo.io/pages/legal/terms | 2026-11-11 | 2026-10-22 | ## Subprocessors (10) As its own list states them. | Subprocessor | Purpose | Location | Listed since | |---|---|---|---| | [Clerk, Inc.](https://thirdpartyindex.com/vendors/clerk.md) | User authentication, session management, and organization membership | United States | 2026-10-01 | | [Cloudflare, Inc.](https://thirdpartyindex.com/vendors/cloudflare.md) | Edge workers, CDN, DNS, R2 object storage for notebooks and artifacts, and database connectivity | United States | 2026-10-01 | | [CoreWeave](https://thirdpartyindex.com/vendors/coreweave.md) | Notebook execution, kernel runtime, and application hosting for molab | United States | 2026-10-01 | | [Functional Software, Inc. (Sentry)](https://thirdpartyindex.com/vendors/sentry.md) | Error monitoring, performance tracing, and debugging | United States | 2026-10-01 | | [GitHub, Inc.](https://thirdpartyindex.com/vendors/github.md) | OAuth sign-in and importing notebooks from public repositories | United States | 2026-10-01 | | [Loops, Inc.](https://thirdpartyindex.com/vendors/astrodon-corp-loops.md) | Transactional and marketing email delivery | United States | 2026-10-01 | | [Notion Labs, Inc.](https://thirdpartyindex.com/vendors/notion-com.md) | Collection of feedback and waitlist submissions | United States | 2026-10-01 | | [PostHog, Inc.](https://thirdpartyindex.com/vendors/posthog.md) | Product analytics and feature flagging | United States | 2026-10-01 | | [Vercel Inc.](https://thirdpartyindex.com/vendors/vercel.md) | Hosting for the marimo.io marketing site, Community Cloud, and playground | United States | 2026-10-01 | | [Weights & Biases, Inc.](https://thirdpartyindex.com/vendors/wandb.md) | AI-assisted code completion and notebook generation | United States | 2026-10-01 | Read from ([evidence](https://thirdpartyindex.com/evidence/28341)). CSV: https://thirdpartyindex.com/vendors/marimo/subprocessors.csv ## Web Technologies marimo's homepage made 158 requests to 5 domains, 2 services controlled by another company, and 2 domains not identified. Loaded on 2026-10-14 by a browser that accepted nothing; other visits may load more or less. What a page loads is not a list of who receives customer data. 2 third parties by category: Marketing automation 1 (GetVector, Inc.); Authentication 1 (reviewed: Clerk). Each company that appears controlled by another organization is counted once, under the main category of the technologies detected from it on this homepage or, when none was, the category recorded from the company's own page (marked reviewed) or else the one it is usually detected as on other published homepages (marked as such); unclassified: none of these. ### Third parties (2) - GetVector, Inc.: 13 requests to vector.co; Vector - Clerk: 12 requests to clerk.com (its subprocessor list names it too) ### Unknown (2) Domains not identified yet: cr-relay.com, usbrowserspeed.com ### First party (1) - marimo: 130 requests to marimo.io; Clerk 6.39.0, Framer Motion, HSTS, Lucide, Next.js 16.3.0-canary.88, Next.js App Router, Open Graph, PWA, Priority Hints, RSS, Radix UI, React, Sentry, Turbopack, Vercel, Vercel Analytics, Vercel Speed Insights 1.3.1, Webpack, core-js 3.49.0 ## Subprocessor of (0) No tracked vendor lists it. ## Security record CISA's Known Exploited Vulnerabilities catalog lists 1 vulnerability in its software: - CVE-2026-39987 (Marimo), listed 2026-04-23: Marimo Remote Code Execution Vulnerability ## Incidents reported by marimo's subprocessors Incidents reported in the last 30 days on their own status pages by 7 vendors marimo lists as subprocessors. A subprocessor list names a company, not the service an incident touched. - 2026-11-11: [GitHub](https://thirdpartyindex.com/vendors/github#status), which marimo lists as a subprocessor, reported Impact across multiple GitHub products including Actions, Pages, and Copilot products. (critical) - 2026-11-11: [GitHub](https://thirdpartyindex.com/vendors/github#status), which marimo lists as a subprocessor, reported Incident with Webhooks (minor) - 2026-11-11: [Sentry](https://thirdpartyindex.com/vendors/sentry#status), which marimo lists as a subprocessor, reported US issues feed throwing intermittent errors (minor) - 2026-11-11: [Sentry](https://thirdpartyindex.com/vendors/sentry#status), which marimo lists as a subprocessor, reported Account emails not being delivered (major) - 2026-11-10: [Sentry](https://thirdpartyindex.com/vendors/sentry#status), which marimo lists as a subprocessor, reported EU region replay ingestion latency (minor) - 2026-11-10: [Vercel](https://thirdpartyindex.com/vendors/vercel#status), which marimo lists as a subprocessor, reported Elevated Sandbox and Blob request latency and errors (minor) - 2026-11-10: [Notion](https://thirdpartyindex.com/vendors/notion-com#status), which marimo lists as a subprocessor, reported Some Notion Agent sessions may hang or stop updating (major) - 2026-11-10: [GitHub](https://thirdpartyindex.com/vendors/github#status), which marimo lists as a subprocessor, reported Incident with Git Operations and Pull Requests (critical) - 2026-11-09: [GitHub](https://thirdpartyindex.com/vendors/github#status), which marimo lists as a subprocessor, reported Degraded availability for GPT-5.3 Codex and GPT-5.6 models in Copilot (major) - 2026-11-09: [GitHub](https://thirdpartyindex.com/vendors/github#status), which marimo lists as a subprocessor, reported Incident with Actions and Checks API (critical) - 2026-11-09: [GitHub](https://thirdpartyindex.com/vendors/github#status), which marimo lists as a subprocessor, reported Incident with Webhooks and Actions (major) - 2026-11-09: [GitHub](https://thirdpartyindex.com/vendors/github#status), which marimo lists as a subprocessor, reported Increased timeouts due to surge in anonymous users (minor) - 2026-11-08: [GitHub](https://thirdpartyindex.com/vendors/github#status), which marimo lists as a subprocessor, reported Increase in timeouts for some unauthenticated users (minor) - 2026-11-05: [GitHub](https://thirdpartyindex.com/vendors/github#status), which marimo lists as a subprocessor, reported Degraded performance for multiple GitHub services (minor) - 2026-11-05: [Vercel](https://thirdpartyindex.com/vendors/vercel#status), which marimo lists as a subprocessor, reported Build delays and degraded Vercel Dashboard performance (minor) - 2026-11-05: [GitHub](https://thirdpartyindex.com/vendors/github#status), which marimo lists as a subprocessor, reported Incident with Actions (minor) - 2026-11-05: [CoreWeave](https://thirdpartyindex.com/vendors/coreweave#status), [wandb](https://thirdpartyindex.com/vendors/wandb#status), which marimo lists as a subprocessor, reported Storage Service Degradation (no impact stated) - 2026-11-04: [GitHub](https://thirdpartyindex.com/vendors/github#status), which marimo lists as a subprocessor, reported Incident with Actions (major) - 2026-11-04: [Sentry](https://thirdpartyindex.com/vendors/sentry#status), which marimo lists as a subprocessor, reported Ingestion delays across all data (minor) - 2026-11-04: [GitHub](https://thirdpartyindex.com/vendors/github#status), which marimo lists as a subprocessor, reported Incident with Actions and Pages (major) - 2026-11-04: [GitHub](https://thirdpartyindex.com/vendors/github#status), which marimo lists as a subprocessor, reported Incident with Pull Requests, Git Operations and Issues (major) - 2026-11-04: [GitHub](https://thirdpartyindex.com/vendors/github#status), which marimo lists as a subprocessor, reported Increased task-related errors for Copilot Mission Control (minor) - 2026-11-03: [GitHub](https://thirdpartyindex.com/vendors/github#status), which marimo lists as a subprocessor, reported Incident with Git Operations (minor) - 2026-11-03: [Sentry](https://thirdpartyindex.com/vendors/sentry#status), which marimo lists as a subprocessor, reported Delays in spans and transactions processing (major) - 2026-11-03: [Sentry](https://thirdpartyindex.com/vendors/sentry#status), which marimo lists as a subprocessor, reported Sentry.io dashboard and API is down (critical) - 2026-11-03: [GitHub](https://thirdpartyindex.com/vendors/github#status), which marimo lists as a subprocessor, reported Incident with API, Git, and Copilot requests (minor) - 2026-11-03: [Clerk](https://thirdpartyindex.com/vendors/clerk#status), which marimo lists as a subprocessor, reported Elevated error rates for authentication requests (minor) - 2026-11-02: [GitHub](https://thirdpartyindex.com/vendors/github#status), which marimo lists as a subprocessor, reported Elevated errors on GPT-5.4 Nano (minor) - 2026-11-02: [CoreWeave](https://thirdpartyindex.com/vendors/coreweave#status), [wandb](https://thirdpartyindex.com/vendors/wandb#status), which marimo lists as a subprocessor, reported Object Storage Service Degradation in US-EAST-04 (no impact stated) - 2026-11-02: [Sentry](https://thirdpartyindex.com/vendors/sentry#status), which marimo lists as a subprocessor, reported Sentry dashboard is down (critical) - 2026-10-30: [GitHub](https://thirdpartyindex.com/vendors/github#status), which marimo lists as a subprocessor, reported Incident with Dependabot (minor) - 2026-10-30: [GitHub](https://thirdpartyindex.com/vendors/github#status), which marimo lists as a subprocessor, reported Incident with Actions, Pages, and Webhooks (major) - 2026-10-30: [GitHub](https://thirdpartyindex.com/vendors/github#status), which marimo lists as a subprocessor, reported Disruption with GitHub services (critical) - 2026-10-29: [Clerk](https://thirdpartyindex.com/vendors/clerk#status), which marimo lists as a subprocessor, reported SMS Delivery Issues (major) - 2026-10-29: [GitHub](https://thirdpartyindex.com/vendors/github#status), which marimo lists as a subprocessor, reported Disruption with Copilot Cloud services (minor) - 2026-10-28: [GitHub](https://thirdpartyindex.com/vendors/github#status), which marimo lists as a subprocessor, reported Disruption with some Copilot services (critical) - 2026-10-27: [GitHub](https://thirdpartyindex.com/vendors/github#status), which marimo lists as a subprocessor, reported Elevated 404s for GitHub App s2s tokens in git/API (no impact stated) - 2026-10-26: [GitHub](https://thirdpartyindex.com/vendors/github#status), which marimo lists as a subprocessor, reported Incident with Actions, Issues, API Requests and Pull Requests (minor) - 2026-10-23: [GitHub](https://thirdpartyindex.com/vendors/github#status), which marimo lists as a subprocessor, reported Grok 4.6 and Grok 4.7 Service Issues (minor) - 2026-10-23: [Vercel](https://thirdpartyindex.com/vendors/vercel#status), which marimo lists as a subprocessor, reported Delays in Logs and Observability data (minor) - 2026-10-23: [GitHub](https://thirdpartyindex.com/vendors/github#status), which marimo lists as a subprocessor, reported Disruption with Dependabot Alerts (minor) - 2026-10-23: [GitHub](https://thirdpartyindex.com/vendors/github#status), which marimo lists as a subprocessor, reported Delayed Actions status check results (minor) - 2026-10-23: [Notion](https://thirdpartyindex.com/vendors/notion-com#status), which marimo lists as a subprocessor, reported Users unable to access Notion (critical) - 2026-10-23: [Notion](https://thirdpartyindex.com/vendors/notion-com#status), which marimo lists as a subprocessor, reported PHP2Shell (CVE-2026-109618, CVE-2026-109619) (no impact stated) - 2026-10-22: [CoreWeave](https://thirdpartyindex.com/vendors/coreweave#status), [wandb](https://thirdpartyindex.com/vendors/wandb#status), which marimo lists as a subprocessor, reported Facility power incident impacting services in US-EAST-15A (no impact stated) - 2026-10-22: [GitHub](https://thirdpartyindex.com/vendors/github#status), which marimo lists as a subprocessor, reported Project updates delayed (minor) - 2026-10-22: [GitHub](https://thirdpartyindex.com/vendors/github#status), which marimo lists as a subprocessor, reported Incident with Actions (minor) - 2026-10-22: [Notion](https://thirdpartyindex.com/vendors/notion-com#status), which marimo lists as a subprocessor, reported Notion MCP query\_data\_source tool is temporarily unavailable in Claude clients (major) - 2026-10-21: [Clerk](https://thirdpartyindex.com/vendors/clerk#status), which marimo lists as a subprocessor, reported Issues with Documentation "Ask AI" (minor) - 2026-10-21: [Sentry](https://thirdpartyindex.com/vendors/sentry#status), which marimo lists as a subprocessor, reported Increased latency processing integration webhooks (minor) - 2026-10-21: [GitHub](https://thirdpartyindex.com/vendors/github#status), which marimo lists as a subprocessor, reported Delays for Pull Requests and Webhook deliveries (critical) - 2026-10-21: [Sentry](https://thirdpartyindex.com/vendors/sentry#status), which marimo lists as a subprocessor, reported Sentry.io not loading in US region (critical) - 2026-10-20: [Notion](https://thirdpartyindex.com/vendors/notion-com#status), which marimo lists as a subprocessor, reported Security update: Preventative certificate security measures (no impact stated) - 2026-10-20: [Notion](https://thirdpartyindex.com/vendors/notion-com#status), which marimo lists as a subprocessor, reported Unable to install connections created by other workspace members (major) - 2026-10-20: [Sentry](https://thirdpartyindex.com/vendors/sentry#status), which marimo lists as a subprocessor, reported Sentry.io not loading (major) - 2026-10-19: [Sentry](https://thirdpartyindex.com/vendors/sentry#status), which marimo lists as a subprocessor, reported Sentry is down (critical) - 2026-10-19: [GitHub](https://thirdpartyindex.com/vendors/github#status), which marimo lists as a subprocessor, reported Degraded availability for GitHub Actions, GitHub Pages and Webhooks (critical) - 2026-10-18: [Notion](https://thirdpartyindex.com/vendors/notion-com#status), which marimo lists as a subprocessor, reported Some Notion Agent requests may stop before completion (minor) - 2026-10-15: [GitHub](https://thirdpartyindex.com/vendors/github#status), which marimo lists as a subprocessor, reported CCA Automations are delayed when starting an Automation (minor) - 2026-10-14: [Notion](https://thirdpartyindex.com/vendors/notion-com#status), which marimo lists as a subprocessor, reported Cursor-powered Custom Agents unable to load Notion tools (no impact stated) - 2026-10-14: [Sentry](https://thirdpartyindex.com/vendors/sentry#status), which marimo lists as a subprocessor, reported Ingestion Halted for EAP data in EU (major) - 2026-10-13: [Notion](https://thirdpartyindex.com/vendors/notion-com#status), which marimo lists as a subprocessor, reported Form submission issues (resolved) (no impact stated) - 2026-10-13: [CoreWeave](https://thirdpartyindex.com/vendors/coreweave#status), which marimo lists as a subprocessor, reported Kubeconfig download failures (no impact stated) - 2026-10-13: [GitHub](https://thirdpartyindex.com/vendors/github#status), which marimo lists as a subprocessor, reported \[Retroactive\] Actions workflow run logs delayed (minor) - 2026-10-13: [Notion](https://thirdpartyindex.com/vendors/notion-com#status), which marimo lists as a subprocessor, reported Degraded performance in Notion and the Notion API (no impact stated) The subprocessor list as we read it on any date: https://thirdpartyindex.com/labs/time-machine/marimo --- Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api