# Mergify Mergify declares [6 subprocessors](https://thirdpartyindex.com/vendors/mergify#subprocessors) in [its subprocessor list](https://trust.mergify.com/subprocessors), which we last checked on 2026-11-11 ([evidence](https://thirdpartyindex.com/evidence/53157)). They include [Google Cloud](https://thirdpartyindex.com/vendors/google-cloud), [Stripe](https://thirdpartyindex.com/vendors/stripe) and [Cloudflare](https://thirdpartyindex.com/vendors/cloudflare). No published changes since we first read it on 2026-09-23. Mergify (mergify.io): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index. - Page: https://thirdpartyindex.com/vendors/mergify - Documents last verified: 2026-11-11 - Transparency rating: 95/100 (how much it publishes, not how secure it is): Subprocessor list 30/30; Processing locations 8/8; Purposes 7/7; Data processing addendum 12/12; Trust center 8/8; Privacy policy 6/6; security.txt 6/6; Security page 5/5; Status page 5/5; Vulnerability disclosure 0/5 (not found); Pages still reachable 8/8 - Supply chain: relies on 6 tracked vendors directly, 76 within two hops, 342 within three; 0 tracked vendors rely on it directly, 0 within two hops, 0 within three - Cite as: Mergify, Third Party Index, https://thirdpartyindex.com/vendors/mergify (data CC BY 4.0) ## Documents | Document | URL | Last verified | Last changed | |---|---|---|---| | Subprocessor list | https://trust.mergify.com/subprocessors | 2026-11-11 | 2026-10-06 | | Data processing addendum | https://trust.mergify.com/ | 2026-11-11 | 2026-11-10 | | Privacy policy | https://mergify.com/privacy | 2026-11-11 | 2026-09-23 | | Terms | https://mergify.com/tos | 2026-11-11 | 2026-10-18 | | Security page | https://docs.mergify.com/security/ | 2026-11-11 | 2026-11-07 | | security.txt | https://mergify.com/.well-known/security.txt | 2026-11-11 | 2026-11-05 | | Status page | https://status.mergify.com/ | 2026-11-11 | 2026-11-01 | ## Subprocessors (6) As its own list states them. | Subprocessor | Purpose | Location | Listed since | |---|---|---|---| | [Cloudflare](https://thirdpartyindex.com/vendors/cloudflare.md) | DNS, DDoS protection; Infrastructure | 101 Townsend St, San Francisco, CA 94107, United States | 2026-09-28 | | [Datadog](https://thirdpartyindex.com/vendors/datadog.md) | Monitoring platform; Monitoring platform for metrics and logs | New York Times Bldg, 620 8th Ave 45th Floor, New York, NY 10018, United States | 2026-09-28 | | [Google Cloud Platform](https://thirdpartyindex.com/vendors/google-cloud.md) | Data storage provider; Infrastructure | 1600 Amphitheatre Pkwy, Mountain View, CA 94043, United States | 2026-09-28 | | [Plain](https://thirdpartyindex.com/vendors/plain.md) | Customer support tickets | 3rd Floor 1 Ashley Road, Altrincham, Cheshire, United Kingdom, WA14 2DT | 2026-09-28 | | [Sentry](https://thirdpartyindex.com/vendors/sentry.md) | Error tracking | 45 Fremont Street, 8th Floor, San Francisco, CA 94105, United States | 2026-09-28 | | [Stripe](https://thirdpartyindex.com/vendors/stripe.md) | Payment service | 185 Berry St Ste 55 San Francisco, CA, 94107-5705, United States | 2026-09-28 | Read from ([evidence](https://thirdpartyindex.com/evidence/12696)). CSV: https://thirdpartyindex.com/vendors/mergify/subprocessors.csv ## Compliance As its trust center lists them. - Audited: SOC 2 Type II ([evidence](https://thirdpartyindex.com/evidence/13988)) - Claimed: GDPR ([evidence](https://thirdpartyindex.com/evidence/13988)) ## Web Technologies Mergify's homepage made 46 requests to 3 domains, and 1 service controlled by another company. Loaded on 2026-11-10 by a browser that accepted nothing; other visits may load more or less. What a page loads is not a list of who receives customer data. 1 third party by category: Analytics 1 (usually detected as Analytics: Plausible Analytics). Each company that appears controlled by another organization is counted once, under the main category of the technologies detected from it on this homepage or, when none was, the category recorded from the company's own page (marked reviewed) or else the one it is usually detected as on other published homepages (marked as such); unclassified: none of these. ### Third parties (1) - Plausible Analytics: 1 request to plausible.io ### First party (1) - Mergify: 45 requests to mergify.com, mergify.io; Astro, Cloudflare, HSTS, Open Graph, Plausible 1 tracked company loaded by the homepage is not in Mergify's subprocessor list. A website can use a service without it processing customer data. ## Subprocessor of (0) No tracked vendor lists it. ## Service status Incidents it reported on its own status page. - Last 90 days: 32 reported incidents (13 major or critical, 9 minor, 10 with no impact stated) - Typical time to resolve: 3 h 33 min - Status page last read: 2026-11-12 - 2026-10-27: Some pull requests wrongly asked to be rebased manually (minor) - 2026-10-23: Delayed CI Insights and Test Engine results (minor) - 2026-10-22: Events processing engine not functioning (critical) - 2026-10-22: Engine non-processing events (no impact stated) - 2026-10-22: Engine down (critical) - 2026-10-22: Engine down (no impact stated) - 2026-10-22: Engine and Dashboard connectivity issues (major) - 2026-10-22: Engine Down (critical) ## Incidents reported by Mergify's subprocessors Incidents reported in the last 30 days on their own status pages by 4 vendors Mergify lists as subprocessors. A subprocessor list names a company, not the service an incident touched. - 2026-11-11: [Sentry](https://thirdpartyindex.com/vendors/sentry#status), which Mergify lists as a subprocessor, reported US issues feed throwing intermittent errors (minor) - 2026-11-11: [Sentry](https://thirdpartyindex.com/vendors/sentry#status), which Mergify lists as a subprocessor, reported Account emails not being delivered (major) - 2026-11-10: [Sentry](https://thirdpartyindex.com/vendors/sentry#status), which Mergify lists as a subprocessor, reported EU region replay ingestion latency (minor) - 2026-11-09: [Plain](https://thirdpartyindex.com/vendors/plain#status), which Mergify lists as a subprocessor, reported Help Center errors (no impact stated) - 2026-11-09: [Plain](https://thirdpartyindex.com/vendors/plain#status), which Mergify lists as a subprocessor, reported Intermittent API errors on write actions (minor) - 2026-11-04: [Sentry](https://thirdpartyindex.com/vendors/sentry#status), which Mergify lists as a subprocessor, reported Ingestion delays across all data (minor) - 2026-11-04: [Plain](https://thirdpartyindex.com/vendors/plain#status), which Mergify lists as a subprocessor, reported Delays in incoming emails (minor) - 2026-11-03: [Sentry](https://thirdpartyindex.com/vendors/sentry#status), which Mergify lists as a subprocessor, reported Delays in spans and transactions processing (major) - 2026-11-03: [Sentry](https://thirdpartyindex.com/vendors/sentry#status), which Mergify lists as a subprocessor, reported Sentry.io dashboard and API is down (critical) - 2026-11-03: [Plain](https://thirdpartyindex.com/vendors/plain#status), which Mergify lists as a subprocessor, reported Some Sidekick requests failing (minor) - 2026-11-02: [Plain](https://thirdpartyindex.com/vendors/plain#status), which Mergify lists as a subprocessor, reported Delays receiving Slack messages in Plain (minor) - 2026-11-02: [Sentry](https://thirdpartyindex.com/vendors/sentry#status), which Mergify lists as a subprocessor, reported Sentry dashboard is down (critical) - 2026-11-01: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Mergify lists as a subprocessor, reported Elevated Instant Payouts failures (no impact stated) - 2026-10-30: [Plain](https://thirdpartyindex.com/vendors/plain#status), which Mergify lists as a subprocessor, reported Reporting data delayed (minor) - 2026-10-29: [Plain](https://thirdpartyindex.com/vendors/plain#status), which Mergify lists as a subprocessor, reported Elevated errors across the Plain app, API and help centers (major) - 2026-10-28: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Mergify lists as a subprocessor, reported Elevated Issuing errors from 17:13 - 20:41 UTC (minor) - 2026-10-28: [Plain](https://thirdpartyindex.com/vendors/plain#status), which Mergify lists as a subprocessor, reported Degraded AI features (minor) - 2026-10-28: [Datadog](https://thirdpartyindex.com/vendors/datadog#status), which Mergify lists as a subprocessor, reported Metrics query are disrupted (major) - 2026-10-26: [Datadog](https://thirdpartyindex.com/vendors/datadog#status), which Mergify lists as a subprocessor, reported Elevated Error Rates for Workflow Automation, App Builder, Bits Code, Bits Agent Builder (major) - 2026-10-24: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Mergify lists as a subprocessor, reported Elevated Blik errors (no impact stated) - 2026-10-22: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Mergify lists as a subprocessor, reported Elevated Bancontact errors (no impact stated) - 2026-10-22: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Mergify lists as a subprocessor, reported Elevated Bancontact errors (no impact stated) - 2026-10-22: [Plain](https://thirdpartyindex.com/vendors/plain#status), which Mergify lists as a subprocessor, reported Search results may be missing recent conversations (minor) - 2026-10-21: [Sentry](https://thirdpartyindex.com/vendors/sentry#status), which Mergify lists as a subprocessor, reported Increased latency processing integration webhooks (minor) - 2026-10-21: [Sentry](https://thirdpartyindex.com/vendors/sentry#status), which Mergify lists as a subprocessor, reported Sentry.io not loading in US region (critical) - 2026-10-20: [Sentry](https://thirdpartyindex.com/vendors/sentry#status), which Mergify lists as a subprocessor, reported Sentry.io not loading (major) - 2026-10-20: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Mergify lists as a subprocessor, reported Spike in cancellations and expired errors with PayByBank payments (no impact stated) - 2026-10-20: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Mergify lists as a subprocessor, reported Elevated Revolut Pay errors (no impact stated) - 2026-10-19: [Sentry](https://thirdpartyindex.com/vendors/sentry#status), which Mergify lists as a subprocessor, reported Sentry is down (critical) - 2026-10-15: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Mergify lists as a subprocessor, reported Elevated declines on Mastercard (no impact stated) - 2026-10-15: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Mergify lists as a subprocessor, reported Elevated declines on Visa (no impact stated) - 2026-10-15: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Mergify lists as a subprocessor, reported Elevated Amazon Pay errors (no impact stated) - 2026-10-14: [Plain](https://thirdpartyindex.com/vendors/plain#status), which Mergify lists as a subprocessor, reported Delayed processing of some thread events (minor) - 2026-10-14: [Sentry](https://thirdpartyindex.com/vendors/sentry#status), which Mergify lists as a subprocessor, reported Ingestion Halted for EAP data in EU (major) The subprocessor list as we read it on any date: https://thirdpartyindex.com/labs/time-machine/mergify ## Security contact From its security.txt (https://mergify.com/.well-known/security.txt) ([evidence](https://thirdpartyindex.com/evidence/216759)): - Contact: https://hackerone.com/mergify - Disclosure policy: https://docs.mergify.com/security/#vulnerability-disclosure - Languages: en - Valid until 2027-04-01 --- Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api