# Modal Modal declares [26 subprocessors](https://thirdpartyindex.com/vendors/modal#subprocessors) in [its subprocessor list](https://trust.modal.com/subprocessors), which we last checked on 2026-11-11 ([evidence](https://thirdpartyindex.com/evidence/54468)). They include [Amazon Web Services](https://thirdpartyindex.com/vendors/amazon-web-services), [Google Cloud](https://thirdpartyindex.com/vendors/google-cloud) and [Microsoft](https://thirdpartyindex.com/vendors/microsoft). No published changes since we first read it on 2026-09-22. [56 tracked vendors](https://thirdpartyindex.com/vendors/modal#used-by) name Modal as a subprocessor, including [posthog](https://thirdpartyindex.com/vendors/posthog), [Pylon](https://thirdpartyindex.com/vendors/pylon) and [Linear](https://thirdpartyindex.com/vendors/linear). Modal (modal.com): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index. - Page: https://thirdpartyindex.com/vendors/modal - Documents last verified: 2026-11-11 - Transparency rating: 89/100 (how much it publishes, not how secure it is): Subprocessor list 30/30; Processing locations 8/8; Purposes 7/7; Data processing addendum 12/12; Trust center 8/8; Privacy policy 6/6; security.txt 0/6 (not found); Security page 5/5; Status page 5/5; Vulnerability disclosure 0/5 (not found); Pages still reachable 8/8 - Supply chain: relies on 19 tracked vendors directly, 104 within two hops, 394 within three; 56 tracked vendors rely on it directly, 726 within two hops, 2421 within three - Cite as: Modal, Third Party Index, https://thirdpartyindex.com/vendors/modal (data CC BY 4.0) ## Documents | Document | URL | Last verified | Last changed | |---|---|---|---| | Trust center | https://trust.modal.com/ | 2026-11-11 | 2026-11-11 | | Subprocessor list | https://trust.modal.com/subprocessors | 2026-11-11 | 2026-10-06 | | Data processing addendum | https://modal.com/legal/dpa | 2026-11-11 | 2026-11-11 | | Privacy policy | https://modal.com/legal/privacy-policy | 2026-11-11 | 2026-11-11 | | Terms | https://modal.com/legal/terms | 2026-11-11 | 2026-11-11 | | Security page | https://modal.com/docs/guide/security | 2026-11-11 | 2026-11-06 | | Status page | https://status.modal.com/ | 2026-11-11 | 2026-11-11 | ## Subprocessors (26) As its own list states them. | Subprocessor | Purpose | Location | Listed since | |---|---|---|---| | [Amazon Web Services](https://thirdpartyindex.com/vendors/amazon-web-services.md) | Cloud hosting provider | Global | 2026-10-01 | | Andromeda Cluster, Inc. | Cloud hosting provider | US | 2026-10-01 | | Cirrascale Cloud Services LLC | Cloud hosting provider | US | 2026-10-01 | | Civo Limited | Cloud hosting provider | Global | 2026-10-01 | | [Clickhouse, Inc](https://thirdpartyindex.com/vendors/clickhouse.md) | Logging service | US | 2026-10-01 | | [Cloudflare, Inc](https://thirdpartyindex.com/vendors/cloudflare.md) | Cloud hosting provider | US | 2026-10-01 | | [The Constant Company, LLC (Vultr)](https://thirdpartyindex.com/vendors/vultr.md) | Cloud hosting provider | US | 2026-10-01 | | [Crusoe Energy Systems LLC](https://thirdpartyindex.com/vendors/crusoe.md) | Cloud hosting provider | Global | 2026-10-01 | | [Datadog](https://thirdpartyindex.com/vendors/datadog.md) | Cloud monitoring | US | 2026-10-01 | | G-Core Labs S.A. | Cloud hosting provider | Global | 2026-10-01 | | [Google Cloud Platform](https://thirdpartyindex.com/vendors/google-cloud.md) | Cloud hosting provider | Global | 2026-10-01 | | [Hex Technologies, Inc.](https://thirdpartyindex.com/vendors/hex.md) | Data analytics | US | 2026-10-01 | | [Hyperbolic Labs, Inc.](https://thirdpartyindex.com/vendors/hyperbolic.md) | Cloud hosting provider | Global | 2026-10-01 | | [Lambda Labs](https://thirdpartyindex.com/vendors/lambda.md) | Cloud hosting provider | Global | 2026-10-01 | | [Massed Compute Inc.](https://thirdpartyindex.com/vendors/massed-compute.md) | Cloud hosting provider | US | 2026-10-01 | | [Megaport Limited](https://thirdpartyindex.com/vendors/megaport.md) | Cloud hosting provider | US | 2026-10-01 | | [Microsoft Azure](https://thirdpartyindex.com/vendors/microsoft.md) | Cloud hosting provider | Global | 2026-10-01 | | [Nebius Inc.](https://thirdpartyindex.com/vendors/nebius.md) | Cloud hosting provider | Global | 2026-10-01 | | NexGen Cloud Limited | Cloud hosting provider | Global | 2026-10-01 | | [Oracle Cloud](https://thirdpartyindex.com/vendors/oracle.md) | Cloud hosting provider | Global | 2026-10-01 | | [ORNN AI INC.](https://thirdpartyindex.com/vendors/ornn.md) | Cloud hosting provider | Global | 2026-10-01 | | [PhoenixNAP, LLC](https://thirdpartyindex.com/vendors/phoenixnap.md) | Cloud hosting provider | US | 2026-10-01 | | Rackdog, LLC | Cloud hosting provider | US | 2026-10-01 | | San Francisco Compute Company | Cloud hosting provider | Global | 2026-10-01 | | [Snowflake Inc.](https://thirdpartyindex.com/vendors/snowflake.md) | Data warehouse | US | 2026-10-01 | | [Verda Cloud Oy](https://thirdpartyindex.com/vendors/verda.md) | Cloud hosting provider | EU | 2026-10-01 | Read from ([evidence](https://thirdpartyindex.com/evidence/9305)). CSV: https://thirdpartyindex.com/vendors/modal/subprocessors.csv ## Compliance As its trust center lists them. - Audited: SOC 2 ([evidence](https://thirdpartyindex.com/evidence/83555)) - Claimed: SOC 2 Type II ([evidence](https://thirdpartyindex.com/evidence/83555)) ## Web Technologies Modal's homepage made 154 requests to 2 domains. Loaded on 2026-11-04 by a browser that accepted nothing; other visits may load more or less. What a page loads is not a list of who receives customer data. ### First party (1) - Modal: 154 requests to modal.com, modal-cdn.com; Amazon CloudFront, Amazon Web Services, Envoy, Express, HSTS, HTTP/3, Lucide, Node.js, Open Graph, Svelte, SvelteKit, Three.js 180, Vite, Datadog ## Subprocessor of (56) Tracked vendors whose own subprocessor lists name it, and what they say they use it for. - [Aaru](https://thirdpartyindex.com/vendors/aaru.md): Engineering; Serverless cloud compute - [ai-coustics](https://thirdpartyindex.com/vendors/ai-coustics.md) - [Alloy](https://thirdpartyindex.com/vendors/alloy.md): Sandbox Compute Infrastructure - [Applied Compute](https://thirdpartyindex.com/vendors/applied-compute.md): Serverless cloud platform for AI/ML. - [Browser Use](https://thirdpartyindex.com/vendors/browser-use.md) - [Cekura](https://thirdpartyindex.com/vendors/cekura.md): IT infrastructure - [Climatiq](https://thirdpartyindex.com/vendors/climatiq.md): AI Model Inference Infratructure; Cloud provider - [Daily](https://thirdpartyindex.com/vendors/daily.md): Cloud compute provider; Model inference - [Dash0](https://thirdpartyindex.com/vendors/dash0.md): Sandboxing AI executions - [Datalab](https://thirdpartyindex.com/vendors/datalab-to.md): Serverless GPU infrastructure for model inference. Processes customer document content transiently during processing. - [Decagon](https://thirdpartyindex.com/vendors/decagon.md): LLM Model Finetuning; Model hosting provider - [Decimal AI](https://thirdpartyindex.com/vendors/decimal-ai.md): Large scale data processing infrastructure - [Delphina](https://thirdpartyindex.com/vendors/delphina.md): AI and model providers - [Depot](https://thirdpartyindex.com/vendors/depot.md): Cloud Infrastructure - [Endex](https://thirdpartyindex.com/vendors/endex.md): Engineering - [Enterpret](https://thirdpartyindex.com/vendors/enterpret.md): Infrastructure - [Fathom](https://thirdpartyindex.com/vendors/fathom.md): AI Provider; 🔒 Handles Meeting Content Data 🤖 Forbidden from training AI on Fathom Customer Data - [Figma](https://thirdpartyindex.com/vendors/figma.md): Cloud infrastructure provider for customer sandbox environments - [Gem](https://thirdpartyindex.com/vendors/gem.md): AI Services - [Gladia](https://thirdpartyindex.com/vendors/gladia.md): Cloud provider - [Graphite](https://thirdpartyindex.com/vendors/graphite.md) - [Harriet](https://thirdpartyindex.com/vendors/harriet.md): Isolated sandboxes that run hosted connectors and cloud workspaces, including content from connected apps while a session runs - [Hebbia](https://thirdpartyindex.com/vendors/hebbia.md) - [Hex](https://thirdpartyindex.com/vendors/hex.md) - [Inception Labs](https://thirdpartyindex.com/vendors/inceptionlabs-ai.md): Cloud infrastructure provider used to securely serve and deploy large language models in production.; Cloud provider - [Koah Labs](https://thirdpartyindex.com/vendors/koah-labs.md): AI Inference and AI Services - [LightTable](https://thirdpartyindex.com/vendors/lighttable.md): Document-processing compute - [Linear](https://thirdpartyindex.com/vendors/linear.md): Cloud provider - [LiveKit](https://thirdpartyindex.com/vendors/livekit.md): Model inference - [Lorikeet](https://thirdpartyindex.com/vendors/lorikeet.md): LLM inference services; Modal provides LLM inference using open-weight models on a ZDR basis with no modal training. - [Lovable](https://thirdpartyindex.com/vendors/lovable.md): Executes customer project code - [Macroscope](https://thirdpartyindex.com/vendors/macroscope.md): Compute Sandboxes; We use modal to create sandboxes where we can perform secure computing. We also occasionally us them to process inference for LLMs. - [n8n](https://thirdpartyindex.com/vendors/n8n.md): AI inference provider - [Nomic](https://thirdpartyindex.com/vendors/nomic.md): Ephemeral compute for proprietary models. - [Northbeam](https://thirdpartyindex.com/vendors/northbeam.md): Machine learning & compute - [Notion](https://thirdpartyindex.com/vendors/notion-com.md): Compute infrastructure for serving large language models and powering AI services - [Parabola](https://thirdpartyindex.com/vendors/parabola.md): Data processing infrastructure - [Parahelp](https://thirdpartyindex.com/vendors/parahelp.md): AI infrastructure - [posthog](https://thirdpartyindex.com/vendors/posthog.md): Serverless compute infrastructure for isolated code execution; Service Provider for AI Features - [Pylon](https://thirdpartyindex.com/vendors/pylon.md): AI Sandbox Infrastructure - [Ramp](https://thirdpartyindex.com/vendors/ramp.md): AI Provider - [Reducto](https://thirdpartyindex.com/vendors/reducto.md): Customer document/content subprocessor; may receive documents, document-derived content, prompts, schemas, or model inputs and outputs when configured. - [Relevance AI](https://thirdpartyindex.com/vendors/relevance-ai.md): Engineering; Sandboxed code execution - [rollbar](https://thirdpartyindex.com/vendors/rollbar.md): Sandboxed environments for PR creation and testing - [Sana](https://thirdpartyindex.com/vendors/sana.md): Sandboxed code execution - [Sierra Technologies](https://thirdpartyindex.com/vendors/sierra-technologies.md): AI services - [Stilla](https://thirdpartyindex.com/vendors/stilla.md): Sandbox & container provisioning; Sandbox provisioning - [StudyFetch](https://thirdpartyindex.com/vendors/studyfetch.md): Only if using coding sandboxes or notebook projects on Honen - [Synthesia](https://thirdpartyindex.com/vendors/synthesia-io.md): Compute for video processing services, including the processing of audio and video data for the purpose of video creation. - [telli](https://thirdpartyindex.com/vendors/telli.md) - [TierZero](https://thirdpartyindex.com/vendors/tierzero.md): Sandbox Infrastructure - [TypeSafe AI](https://thirdpartyindex.com/vendors/typesafe-ai.md): AI Infrastructure; Customer AI prompts are processed, but not stored, on compute nodes managed by Modal - [Unstructured](https://thirdpartyindex.com/vendors/unstructured.md): Serverless GPU compute & model inference hosting - [Viktor](https://thirdpartyindex.com/vendors/viktor.md): Primary application compute, sandbox execution, file storage volumes, and inference for open-weight AI models that we host ourselves - [Weaviate](https://thirdpartyindex.com/vendors/weaviate.md): GPU-as-a-Service provider; Infrastructure - [You.com](https://thirdpartyindex.com/vendors/you-com.md): Sandbox services ## Service status Incidents it reported on its own status page. - Last 90 days: 10 reported incidents (2 major or critical, 8 minor, 0 with no impact stated) - Typical time to resolve: 15 min - Status page last read: 2026-11-12 - 2026-11-10: Some Sandboxes experiencing creation failures (minor) - 2026-10-19: Web functions degraded (minor) - 2026-10-14: Kimi K3 shared endpoint downtime (major) - 2026-10-14: Kimi K3 shared endpoint is degraded (minor) - 2026-10-05: Function and Sandbox execution degraded (minor) - 2026-09-16: Dashboard and sandbox outage (major) - 2026-09-04: Storage is degraded (minor) - 2026-08-27: Snapshot restores are degraded (minor) ## Incidents reported by Modal's subprocessors Incidents reported in the last 30 days on their own status pages by 7 vendors Modal lists as subprocessors. A subprocessor list names a company, not the service an incident touched. - 2026-11-12: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which Modal lists as a subprocessor, reported INC20000347 (minor) - 2026-11-11: [ClickHouse](https://thirdpartyindex.com/vendors/clickhouse#status), which Modal lists as a subprocessor, reported Provisioning and scaling operations may take longer in AWS ap-northeast-1 Tokyo (minor) - 2026-11-11: [Nebius](https://thirdpartyindex.com/vendors/nebius#status), which Modal lists as a subprocessor, reported Token Factory connectivity loss in tf-us2 (no impact stated) - 2026-11-09: [Nebius](https://thirdpartyindex.com/vendors/nebius#status), which Modal lists as a subprocessor, reported Compute Cloud: some hosts unreachable in eu-north1 (major) - 2026-11-09: [Verda](https://thirdpartyindex.com/vendors/verda#status), which Modal lists as a subprocessor, reported FIN-03: Storage and Connectivity Disruption (minor) - 2026-11-07: [Lambda](https://thirdpartyindex.com/vendors/lambda#status), which Modal lists as a subprocessor, reported Service disruption in us-east-3 (no impact stated) - 2026-11-07: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which Modal lists as a subprocessor, reported INC20000337 (minor) - 2026-11-06: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which Modal lists as a subprocessor, reported INC20000336 (minor) - 2026-11-06: [Nebius](https://thirdpartyindex.com/vendors/nebius#status), which Modal lists as a subprocessor, reported Network problems (critical) - 2026-11-05: [Nebius](https://thirdpartyindex.com/vendors/nebius#status), which Modal lists as a subprocessor, reported Token Factory: some models unavailable in eu-north1 (major) - 2026-11-04: [Verda](https://thirdpartyindex.com/vendors/verda#status), which Modal lists as a subprocessor, reported Email service disruption (minor) - 2026-11-02: [ClickHouse](https://thirdpartyindex.com/vendors/clickhouse#status), which Modal lists as a subprocessor, reported SQL Console database connection outage (minor) - 2026-11-02: [Nebius](https://thirdpartyindex.com/vendors/nebius#status), which Modal lists as a subprocessor, reported Public API gateway partially unavailable in US-NORTH1 and US-CENTRAL1 (minor) - 2026-10-31: [Lambda](https://thirdpartyindex.com/vendors/lambda#status), which Modal lists as a subprocessor, reported lambda.ai Unreachable Due to DNS Issue (major) - 2026-10-31: [Nebius](https://thirdpartyindex.com/vendors/nebius#status), which Modal lists as a subprocessor, reported Token Factory: some dedicated endpoints partially unavailable (minor) - 2026-10-30: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which Modal lists as a subprocessor, reported INC20000321 (minor) - 2026-10-29: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which Modal lists as a subprocessor, reported INC20000319 (minor) - 2026-10-28: [Lambda](https://thirdpartyindex.com/vendors/lambda#status), which Modal lists as a subprocessor, reported Degraded instance launches and terminations in us-east-3 (no impact stated) - 2026-10-28: [Datadog](https://thirdpartyindex.com/vendors/datadog#status), which Modal lists as a subprocessor, reported Metrics query are disrupted (major) - 2026-10-28: [Nebius](https://thirdpartyindex.com/vendors/nebius#status), which Modal lists as a subprocessor, reported Compute Cloud: disk images and snapshots partial unavailability (major) - 2026-10-26: [Datadog](https://thirdpartyindex.com/vendors/datadog#status), which Modal lists as a subprocessor, reported Elevated Error Rates for Workflow Automation, App Builder, Bits Code, Bits Agent Builder (major) - 2026-10-24: [Nebius](https://thirdpartyindex.com/vendors/nebius#status), which Modal lists as a subprocessor, reported Token Factory 503 errors in eu-west2 (major) - 2026-10-23: [Verda](https://thirdpartyindex.com/vendors/verda#status), which Modal lists as a subprocessor, reported Network Connectivity Issues in FIN-02 (major) - 2026-10-23: [ClickHouse](https://thirdpartyindex.com/vendors/clickhouse#status), which Modal lists as a subprocessor, reported Degraded support ticket submission and response (minor) - 2026-10-21: [PhoenixNAP](https://thirdpartyindex.com/vendors/phoenixnap#status), which Modal lists as a subprocessor, reported Maintenance – Customer Support Portal (no impact stated) - 2026-10-21: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which Modal lists as a subprocessor, reported INC20000301 (critical) - 2026-10-21: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which Modal lists as a subprocessor, reported INC20000299 (minor) - 2026-10-20: [ClickHouse](https://thirdpartyindex.com/vendors/clickhouse#status), which Modal lists as a subprocessor, reported Google Cloud Outage (minor) - 2026-10-20: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which Modal lists as a subprocessor, reported INC20000294 (critical) - 2026-10-19: [Verda](https://thirdpartyindex.com/vendors/verda#status), which Modal lists as a subprocessor, reported Container Registry (vccr.io) is down (major) - 2026-10-19: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which Modal lists as a subprocessor, reported INC20000290 (minor) - 2026-10-18: [Nebius](https://thirdpartyindex.com/vendors/nebius#status), which Modal lists as a subprocessor, reported Partial IAM and console unavailability (no impact stated) - 2026-10-16: [Nebius](https://thirdpartyindex.com/vendors/nebius#status), which Modal lists as a subprocessor, reported CLI login issues (major) - 2026-10-16: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which Modal lists as a subprocessor, reported INC20000287 (critical) - 2026-10-15: [Nebius](https://thirdpartyindex.com/vendors/nebius#status), which Modal lists as a subprocessor, reported InfiniBand connectivity issues for GPU clusters in eu-west2 (major) - 2026-10-14: [Nebius](https://thirdpartyindex.com/vendors/nebius#status), which Modal lists as a subprocessor, reported Connectivity issues between eu-south1 and other Nebius regions (minor) - 2026-10-14: [Nebius](https://thirdpartyindex.com/vendors/nebius#status), which Modal lists as a subprocessor, reported InfiniBand connectivity issues for GPU clusters in eu-west2 (major) - 2026-10-13: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which Modal lists as a subprocessor, reported INC20000277 (minor) The subprocessor list as we read it on any date: https://thirdpartyindex.com/labs/time-machine/modal --- Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api