n8n

n8n.io

n8n declares 17 subprocessors, plus 2 of its own affiliates, in its subprocessor list, which we last checked on Nov 11, 2026 (evidence). They include OpenAI, Microsoft and Anthropic. The list last changed on Sep 24, 2026: 11 added, 1 removed, 4 changed. 13 tracked vendors name n8n as a subprocessor, including Plain, Expo and Urlbox.

Subprocessors CSV of n8n's subprocessors · Atom feed of n8n's subprocessors DORA draft CSV of n8n's subprocessors as declared by n8n what's this? · 

17 third parties, 2 affiliates.

NamePurposeLocationListed since
Alibaba (Qwen) AI providerEU
Anthropic AIAI providerUS
Baseten Labs, Inc. AIInference infrastructure providerEU
Brave Software, Inc. Web search providerUS
Browserbase, Inc. Headless browser and web scraping providerUS
Daytona Sandbox provider (AI Assistant)US
Firecrawl (SideGuide Technologies, Inc.) Web search, scraping and headless browser providerUS
Google Enterprise Agent Platform AI providerEU, US
Hetzner Online Hosting provider (Community Forum only)Germany
LangChain AI providerUS
LlamaIndex, Inc. Document extraction and OCR providerEU
Microsoft Azure Cloud service providerEU (e.g., Germany, Sweden)
Modal Labs, Inc. AI inference providerUS
Moonshot AI AI providerSingapore
Nanonoble Pte. Ltd. AI providerUS
OpenAI AIAI providerUS
PDF.co (Artifex Software, Inc.) Document conversion and extraction providerUS
n8n affiliates (2)
NamePurposeLocationListed since
n8n UK Ltd. Customer support and service operationsUnited Kingdom
n8n US Inc. Customer support and service operationsUS

Web TechnologiesCSV of n8n's web technologies · Atom feed of n8n's web technologies

n8n's homepage made 268 requests to 8 domains, and 6 services controlled by another company.

Analytics (2): Cloudflare; usually detected as Analytics: Plausible AnalyticsTag managers (1): Google CloudCookie compliance (1): CookieScriptCDN (1): jsDelivrOther (1): reviewed as Payment processors: Paddle

6 third parties by category: Analytics 2Tag managers 1Cookie compliance 1CDN 1Other 1

Third parties 6 · 7 requests
CookieScript Cookie Script <1% of the page's requests 2
Cloudflare Cloudflare Browser Insights <1% of the page's requests 1
Google Cloud Google Tag Manager <1% of the page's requests 1
Paddle paddle.com <1% of the page's requests 1
Plausible Analytics plausible.io <1% of the page's requests 1
jsDelivr jsDelivr <1% of the page's requests 1
First party 1 · 261 requests
n8n Cloudflare GSAP HSTS Nuxt.js Open Graph Paddle Plausible Priority Hints Vue.js core-js 3.51.0 97% of the page's requests 261

5 tracked companies loaded by the homepage are not in n8n's subprocessor list. A website can use a service without it processing customer data.

Subprocessor of (13)CSV of the companies listing n8n · Atom feed of the companies listing n8n

13 companies
  • Aditude aditude.com Workflow automation
  • Aprimo aprimo.com Operations and Support
  • ClickTime clicktime.com Application integration and task automation. AI-assisted features are enabled for internal ClickTime use only.; Workflow Automation
  • Euler eulerhq.com IT Management
  • Expo expo.dev Workflow automation and data integration
  • FullFunnel fullfunnel.co Workflow automation
  • Plain plain.com Workflow automation
  • Socket socket.dev Automation platform
  • Spiffy spiffy.co Workflow automation for Spiffy's internal business processes; merchant account and contact details may pass through automated workflows.
  • SurrealDB surrealdb.com Customer data workflow automation
  • Toggl toggl.com Workflow automation provider
  • Urlbox urlbox.com
  • Yotpo yotpo.com Data flow integration and automation

ComplianceCSV of n8n's compliance · Atom feed of n8n's compliance

Certified
Says it complies with

Certifications as n8n's trust center lists them; reports are usually shared on request (evidence)

Security recordCSV of n8n's security record · Atom feed of n8n's security record

What public security catalogs list for n8n, in their words.

Known exploited vulnerabilities

1 vulnerability in n8n's software that CISA lists as exploited in the wild.

CVEProductVulnerabilityListed
CVE-2025-68613n8nn8n Improper Control of Dynamically-Managed Code Resources Vulnerability

Source: CISA Known Exploited Vulnerabilities catalog (evidence)

Incidents reported by n8n's subprocessorsCSV of incidents reported by vendors n8n lists · Atom feed of incidents reported by vendors n8n lists

61 reported incidents in the last 30 days, by 6 of the vendors n8n lists as subprocessors.

A subprocessor list names a company, not the service an incident touched. This does not show that n8n was involved.

DateCompanyIncidentImpactLasted
BasetenModel APIs are down for all models critical21 min
AnthropicElevated errors on Fable 52 and Mythos 52 no impact stated1 min
ModalSome Sandboxes experiencing creation failures minor23 min
OpenAIIncorrect cost data in Costs API exports no impact stated2 h 20 min
OpenAIElevated Errors On API minor42 min
OpenAIElevated ChatGPT Conversation Errors minor52 min
OpenAIElevated errors with image generation minor1 h 49 min
AnthropicDegraded performance for Claude Fable 5.1 minor26 min
OpenAIElevated error rates with some U.S. business Mastercards no impact stated3 days
BasetenElevated errors for Kimi-K3 on Model APIs. **Dedicated Inference is not affected** minor5 h 9 min
OpenAIChatGPT Work and Dots Errors minor13 h 6 min
OpenAIElevated error rates across paid ChatGPT plans minor1 h 54 min
DaytonaDegraded performance: API and sandbox operations minor1 h 43 min
OpenAIFile upload errors in ChatGPT minor4 h 52 min
LangChainIncreased latency and 500 rate major—
OpenAIElevated errors with search in Dots, ChatGPT Work, and certain ChatGPT thinking experiences minor1 h 35 min
OpenAIElevated errors for GPT Image 2 API image edits minor4 h 1 min
DaytonaDegraded performance for a subset of US runners minor5 h 55 min
DaytonaSandbox listing (GET /sandbox) minor2 h 46 min
DaytonaUS Region Runner Degradation minor30 min
AnthropicElevated errors affecting the Google Calendar connector minor3 h 46 min
AnthropicElevated errors affecting the Gmail connector minor1 h 48 min
AnthropicElevated errors for Claude Sonnet 5.5 major41 min
OpenAI6.1 Sol Degraded Model Performance minor1 h 17 min
AnthropicElevated errors for Claude Sonnet 5.5 major42 min

And 36 more. All of them: CSV · Who is around them.

ChangesCSV of n8n's changes · Atom feed of n8n's changes

See the list as we read it on any date: Time machine

  1. Changed subprocessor: Hetzner Online purpose: Cloud service provider → Hosting provider (Community Forum only) evidence: subprocessor: Hetzner Online list before and after: subprocessor: Hetzner Online
  2. Removed subprocessor: Google Vertex AI evidence: subprocessor: Google Vertex AI list before and after: subprocessor: Google Vertex AI
  3. Changed subprocessor: Microsoft Azure locations: EU (Germany, Sweden) → EU (e.g., Germany, Sweden) evidence: subprocessor: Microsoft Azure list before and after: subprocessor: Microsoft Azure
  4. Changed subprocessor: n8n UK Ltd. purpose: n8n group entity → Customer support and service operations evidence: subprocessor: n8n UK Ltd. list before and after: subprocessor: n8n UK Ltd.
  5. Changed subprocessor: n8n US Inc. purpose: n8n group entity → Customer support and service operations evidence: subprocessor: n8n US Inc. list before and after: subprocessor: n8n US Inc.
  6. Added subprocessor: Alibaba (Qwen) evidence: subprocessor: Alibaba (Qwen) list before and after: subprocessor: Alibaba (Qwen)
  7. Added subprocessor: Baseten Labs, Inc. evidence: subprocessor: Baseten Labs, Inc. list before and after: subprocessor: Baseten Labs, Inc.
  8. Added subprocessor: Brave Software, Inc. evidence: subprocessor: Brave Software, Inc. list before and after: subprocessor: Brave Software, Inc.
  9. Added subprocessor: Browserbase, Inc. evidence: subprocessor: Browserbase, Inc. list before and after: subprocessor: Browserbase, Inc.
  10. Added subprocessor: Firecrawl (SideGuide Technologies, Inc.) evidence: subprocessor: Firecrawl (SideGuide Technologies, Inc.) list before and after: subprocessor: Firecrawl (SideGuide Technologies, Inc.)
  11. Added subprocessor: Google Enterprise Agent Platform evidence: subprocessor: Google Enterprise Agent Platform list before and after: subprocessor: Google Enterprise Agent Platform
  12. Added subprocessor: LlamaIndex, Inc. evidence: subprocessor: LlamaIndex, Inc. list before and after: subprocessor: LlamaIndex, Inc.
  13. Added subprocessor: Modal Labs, Inc. evidence: subprocessor: Modal Labs, Inc. list before and after: subprocessor: Modal Labs, Inc.
  14. Added subprocessor: Moonshot AI evidence: subprocessor: Moonshot AI list before and after: subprocessor: Moonshot AI
  15. Added subprocessor: Nanonoble Pte. Ltd. evidence: subprocessor: Nanonoble Pte. Ltd. list before and after: subprocessor: Nanonoble Pte. Ltd.
  16. Added subprocessor: PDF.co (Artifex Software, Inc.) evidence: subprocessor: PDF.co (Artifex Software, Inc.) list before and after: subprocessor: PDF.co (Artifex Software, Inc.)
Rating badge for n8n's site

n8n transparency rating

It updates with the rating.

<a href="https://thirdpartyindex.com/vendors/n8n"><img src="https://thirdpartyindex.com/badge/n8n.svg" alt="n8n transparency rating on Third Party Index" height="20"></a>
[![n8n transparency rating on Third Party Index](https://thirdpartyindex.com/badge/n8n.svg)](https://thirdpartyindex.com/vendors/n8n)