Third Party Index

n8n

n8n.io

Certifications and attestations: SOC 2 Type IISOC 3

Says it complies with: GDPR

As listed on n8n's trust center (evidence) ; reports themselves are usually shared on request.

Transparency

Exemplary

Breakdown
Subprocessor list30 / 30
Processing locations8 / 8
Purposes7 / 7
Data processing addendum12 / 12
Trust center8 / 8
Privacy policy6 / 6
security.txt6 / 6
Security page5 / 5
Status page5 / 5
Vulnerability disclosurenot found0 / 5
Pages still reachable8 / 8
Total95 / 100

Only documents we can retrieve count: a page behind a login or a broken link scores nothing.

Badge

n8n transparency rating

For n8n's own site; it updates with the rating.

<a href="https://thirdpartyindex.com/vendors/n8n"><img src="https://thirdpartyindex.com/badge/n8n.svg" alt="n8n transparency rating on Third Party Index" height="20"></a>
[![n8n transparency rating on Third Party Index](https://thirdpartyindex.com/badge/n8n.svg)](https://thirdpartyindex.com/vendors/n8n)

Documents

DocumentVerifiedChangedEvidence
Trust center safebase snapshot
Subprocessor list snapshot
Data processing addendum snapshot
Privacy policy snapshot
Terms snapshot
Security page snapshot
security.txt snapshot
Status page snapshot

Subprocessors

17 third parties, 2 affiliates. CSV · Atom

NamePurposeLocationListed since
Alibaba (Qwen) AI providerEU
Anthropic AI providerUS
Baseten Labs, Inc. Inference infrastructure providerEU
Brave Software, Inc. Web search providerUS
Browserbase, Inc. Headless browser and web scraping providerUS
Daytona Sandbox provider (AI Assistant)US
Firecrawl (SideGuide Technologies, Inc.) Web search, scraping and headless browser providerUS
Google Enterprise Agent Platform AI providerEU, US
Hetzner Online Hosting provider (Community Forum only)Germany
LangChain AI providerUS
LlamaIndex, Inc. Document extraction and OCR providerEU
Microsoft Azure Cloud service providerEU (e.g., Germany, Sweden)
Modal Labs, Inc. AI inference providerUS
Moonshot AI AI providerSingapore
Nanonoble Pte. Ltd. AI providerUS
OpenAI AI providerUS
PDF.co (Artifex Software, Inc.) Document conversion and extraction providerUS
n8n affiliates (2)
NamePurposeLocationListed since
n8n UK Ltd. Customer support and service operationsUnited Kingdom
n8n US Inc. Customer support and service operationsUS

Listed as a subprocessor by (3)

Purposes as each company states them.

Security record

What public security catalogs list for n8n, in their words.

Known exploited vulnerabilities

1 vulnerability in n8n's software that CISA lists as exploited in the wild.

CVEProductVulnerabilityListed
CVE-2025-68613n8nn8n Improper Control of Dynamically-Managed Code Resources Vulnerability evidence

Source: CISA Known Exploited Vulnerabilities catalog.

Changes

  1. Changed subprocessor: Hetzner Online purpose: Cloud service provider → Hosting provider (Community Forum only) evidence
  2. Removed subprocessor: Google Vertex AI evidence
  3. Changed subprocessor: Microsoft Azure locations: EU (Germany, Sweden) → EU (e.g., Germany, Sweden) evidence
  4. Changed subprocessor: n8n UK Ltd. purpose: n8n group entity → Customer support and service operations evidence
  5. Changed subprocessor: n8n US Inc. purpose: n8n group entity → Customer support and service operations evidence
  6. Added subprocessor: Alibaba (Qwen) evidence
  7. Added subprocessor: Baseten Labs, Inc. evidence
  8. Added subprocessor: Brave Software, Inc. evidence
  9. Added subprocessor: Browserbase, Inc. evidence
  10. Added subprocessor: Firecrawl (SideGuide Technologies, Inc.) evidence
  11. Added subprocessor: Google Enterprise Agent Platform evidence
  12. Added subprocessor: LlamaIndex, Inc. evidence
  13. Added subprocessor: Modal Labs, Inc. evidence
  14. Added subprocessor: Moonshot AI evidence
  15. Added subprocessor: Nanonoble Pte. Ltd. evidence
  16. Added subprocessor: PDF.co (Artifex Software, Inc.) evidence