# Medallion

Medallion declares [16 subprocessors](https://thirdpartyindex.com/vendors/medallion#subprocessors) in [its subprocessor list](https://trust.medallion.co/subprocessors), which we last checked on 2026-10-10 ([evidence](https://thirdpartyindex.com/evidence/76097)). They include [Amazon Web Services](https://thirdpartyindex.com/vendors/amazon-web-services), [Google Cloud](https://thirdpartyindex.com/vendors/google-cloud) and [Slack](https://thirdpartyindex.com/vendors/slack). No published changes since we first read it on 2026-10-10.

Medallion (medallion.co): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/medallion
- Documents last verified: 2026-10-10
- Transparency rating: 65/100 (how much it publishes, not how secure it is): Subprocessor list 30/30; Processing locations 8/8; Purposes 0/7 (partial); Data processing addendum 0/12 (not found); Trust center 8/8; Privacy policy 6/6; security.txt 0/6 (not found); Security page 0/5 (not found); Status page 5/5; Vulnerability disclosure 0/5 (not found); Pages still reachable 8/8
- Supply chain: relies on 16 tracked vendors directly, 144 within two hops, 382 within three; 0 tracked vendors rely on it directly, 0 within two hops, 0 within three
- Cite as: Medallion, Third Party Index, https://thirdpartyindex.com/vendors/medallion (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Trust center | https://trust.medallion.co/ | 2026-10-10 | 2026-10-10 |
| Subprocessor list | https://trust.medallion.co/subprocessors | 2026-10-10 | 2026-10-10 |
| Privacy policy | https://www.medallion.co/privacy | 2026-10-10 | 2026-10-10 |
| Terms | https://www.medallion.co/terms | 2026-10-10 | 2026-10-10 |
| Status page | https://status.medallion.co/ | 2026-10-10 | 2026-10-10 |

## Subprocessors (16)

As its own list states them.

| Subprocessor | Purpose | Location | Listed since |
|---|---|---|---|
| [1Password](https://thirdpartyindex.com/vendors/1password.md) | — | Password manager | 2026-10-10 |
| [Algolia](https://thirdpartyindex.com/vendors/algolia.md) | — | AI-powered search and discovery platform | 2026-10-10 |
| [Amazon Web Services](https://thirdpartyindex.com/vendors/amazon-web-services.md) | — | Product infrastructure | 2026-10-10 |
| [Auth0](https://thirdpartyindex.com/vendors/okta.md) | — | Underlying authentication service for the Medallion application. | 2026-10-10 |
| [Checkr](https://thirdpartyindex.com/vendors/checkr.md) | — | Employee background check | 2026-10-10 |
| [Cloudinary](https://thirdpartyindex.com/vendors/cloudinary.md) | — | Content Delivery Network (CDN) and storage | 2026-10-10 |
| [Datadog](https://thirdpartyindex.com/vendors/datadog.md) | — | Monitoring and analytics | 2026-10-10 |
| [GitHub](https://thirdpartyindex.com/vendors/github.md) | — | Code hosting and version control | 2026-10-10 |
| [Google Workspace](https://thirdpartyindex.com/vendors/google-cloud.md) | — | Productivity and collaboration tools | 2026-10-10 |
| [Jira](https://thirdpartyindex.com/vendors/atlassian.md) | — | Project management and issue tracking | 2026-10-10 |
| [Mailgun](https://thirdpartyindex.com/vendors/mailgun.md) | — | E-mail delivery service | 2026-10-10 |
| [Rippling](https://thirdpartyindex.com/vendors/rippling.md) | — | HRIS | 2026-10-10 |
| [Sentry](https://thirdpartyindex.com/vendors/sentry.md) | — | Crash reporting platform | 2026-10-10 |
| [Slack](https://thirdpartyindex.com/vendors/slack.md) | — | Business communication platform | 2026-10-10 |
| [Stitch](https://thirdpartyindex.com/vendors/qlik.md) | — | Data-loading tool | 2026-10-10 |
| [Vanta](https://thirdpartyindex.com/vendors/vanta.md) | — | Continuous security and compliance monitoring | 2026-10-10 |

Read from ([evidence](https://thirdpartyindex.com/evidence/76097)). CSV: https://thirdpartyindex.com/vendors/medallion/subprocessors.csv

## Compliance

As its trust center lists them.

- Audited: SOC 2 Type II ([evidence](https://thirdpartyindex.com/evidence/76096))

## Subprocessor of (0)

No tracked vendor lists it.

## Incidents reported by Medallion's subprocessors

Incidents reported in the last 30 days on their own status pages by 7 vendors Medallion lists as subprocessors. A subprocessor list names a company, not the service an incident touched.

- 2026-10-07: [Rippling](https://thirdpartyindex.com/vendors/rippling#status), which Medallion lists as a subprocessor, reported Issues using 1Password passkeys (minor)
- 2026-10-07: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Medallion lists as a subprocessor, reported Incident with Git Operations, Issues, Actions and Pull Requests (critical)
- 2026-10-07: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Medallion lists as a subprocessor, reported Incident with Git Operations, Pull Requests and Actions (critical)
- 2026-10-06: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Medallion lists as a subprocessor, reported Several services are degraded (critical)
- 2026-10-06: [Sentry](https://thirdpartyindex.com/vendors/sentry#status), which Medallion lists as a subprocessor, reported Sentry dashboard down (critical)
- 2026-10-06: [Rippling](https://thirdpartyindex.com/vendors/rippling#status), which Medallion lists as a subprocessor, reported RPass Chrome extension login failures (no impact stated)
- 2026-10-05: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Medallion lists as a subprocessor, reported Disruption with some GitHub services (major)
- 2026-10-05: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Medallion lists as a subprocessor, reported Incident with Actions (critical)
- 2026-10-05: [Cloudinary](https://thirdpartyindex.com/vendors/cloudinary#status), which Medallion lists as a subprocessor, reported Usage reports unavailable in Console Dashboard (minor)
- 2026-10-02: [Datadog](https://thirdpartyindex.com/vendors/datadog#status), which Medallion lists as a subprocessor, reported Delayed RUM sessions (no impact stated)
- 2026-10-01: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Medallion lists as a subprocessor, reported Actions Job Delays (minor)
- 2026-10-01: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Medallion lists as a subprocessor, reported Elevated request latency (minor)
- 2026-10-01: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Medallion lists as a subprocessor, reported \[Retroactive\] Actions workflow run failures after deployment gate approvals (minor)
- 2026-09-30: [Datadog](https://thirdpartyindex.com/vendors/datadog#status), which Medallion lists as a subprocessor, reported Delayed Events (minor)
- 2026-09-30: [Mailgun](https://thirdpartyindex.com/vendors/mailgun#status), which Medallion lists as a subprocessor, reported Route delays in EU Region (minor)
- 2026-09-29: [Rippling](https://thirdpartyindex.com/vendors/rippling#status), which Medallion lists as a subprocessor, reported Rippling app is down (critical)
- 2026-09-28: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Medallion lists as a subprocessor, reported Copilot Code Review is unable to complete reviews (critical)
- 2026-09-28: [Cloudinary](https://thirdpartyindex.com/vendors/cloudinary#status), which Medallion lists as a subprocessor, reported Increased Error Rates – EU Region (major)
- 2026-09-25: [Datadog](https://thirdpartyindex.com/vendors/datadog#status), which Medallion lists as a subprocessor, reported Users are unable to acknowledge, escalate, or resolve On-Call Pages (minor)
- 2026-09-24: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Medallion lists as a subprocessor, reported Disruption with billing information updates (minor)
- 2026-09-23: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Medallion lists as a subprocessor, reported Incident across several services (minor)
- 2026-09-21: [Datadog](https://thirdpartyindex.com/vendors/datadog#status), which Medallion lists as a subprocessor, reported Delayed Monitors Notifications (minor)
- 2026-09-20: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Medallion lists as a subprocessor, reported Incident with Pull Requests (minor)
- 2026-09-20: [Datadog](https://thirdpartyindex.com/vendors/datadog#status), which Medallion lists as a subprocessor, reported Delayed events triggered by emails (minor)
- 2026-09-18: [Rippling](https://thirdpartyindex.com/vendors/rippling#status), which Medallion lists as a subprocessor, reported Rippling app not loading for customers (major)
- 2026-09-18: [Sentry](https://thirdpartyindex.com/vendors/sentry#status), which Medallion lists as a subprocessor, reported Delays in spans ingestion (major)
- 2026-09-18: [Sentry](https://thirdpartyindex.com/vendors/sentry#status), which Medallion lists as a subprocessor, reported Delayed ingestion of errors in EU (critical)
- 2026-09-17: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Medallion lists as a subprocessor, reported Elevated rate of errors for OpenAI models provided by Copilot (minor)
- 2026-09-17: [Rippling](https://thirdpartyindex.com/vendors/rippling#status), which Medallion lists as a subprocessor, reported Rippling MCP is down (critical)
- 2026-09-17: [Vanta](https://thirdpartyindex.com/vendors/vanta#status), which Medallion lists as a subprocessor, reported Vendor assessment product test failures (minor)
- 2026-09-16: [Rippling](https://thirdpartyindex.com/vendors/rippling#status), which Medallion lists as a subprocessor, reported Issues accessing Rippling live chat and support email (minor)
- 2026-09-16: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Medallion lists as a subprocessor, reported Degradation with Gemini 3.8 Flash (major)
- 2026-09-15: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Medallion lists as a subprocessor, reported Disruption with some GitHub services (minor)
- 2026-09-15: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Medallion lists as a subprocessor, reported Disruption with some GitHub services (minor)
- 2026-09-14: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Medallion lists as a subprocessor, reported Actions Larger Runner Jobs for some customers may be slow to start (minor)
- 2026-09-14: [Vanta](https://thirdpartyindex.com/vendors/vanta#status), which Medallion lists as a subprocessor, reported Some Vanta AI features are unavailable (major)
- 2026-09-14: [Mailgun](https://thirdpartyindex.com/vendors/mailgun#status), which Medallion lists as a subprocessor, reported Route delays in EU Region (minor)
- 2026-09-13: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Medallion lists as a subprocessor, reported Incident with several GitHub Services (critical)

The subprocessor list as we read it on any date: https://thirdpartyindex.com/labs/time-machine/medallion

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api