# n8n

n8n declares [17 subprocessors](https://thirdpartyindex.com/vendors/n8n#subprocessors), plus 2 of its own affiliates, in [its subprocessor list](https://n8n.io/legal/sub-processors/), which we last checked on 2026-11-11 ([evidence](https://thirdpartyindex.com/evidence/9117)). They include [OpenAI](https://thirdpartyindex.com/vendors/openai), [Microsoft](https://thirdpartyindex.com/vendors/microsoft) and [Anthropic](https://thirdpartyindex.com/vendors/anthropic). The list last changed on 2026-09-24: 11 added, 1 removed, 4 changed. [13 tracked vendors](https://thirdpartyindex.com/vendors/n8n#used-by) name n8n as a subprocessor, including [Plain](https://thirdpartyindex.com/vendors/plain), [Expo](https://thirdpartyindex.com/vendors/expo) and [Urlbox](https://thirdpartyindex.com/vendors/urlbox).

n8n (n8n.io): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/n8n
- Documents last verified: 2026-11-11
- Transparency rating: 95/100 (how much it publishes, not how secure it is): Subprocessor list 30/30; Processing locations 8/8; Purposes 7/7; Data processing addendum 12/12; Trust center 8/8; Privacy policy 6/6; security.txt 6/6; Security page 5/5; Status page 5/5; Vulnerability disclosure 0/5 (not found); Pages still reachable 8/8
- Supply chain: relies on 14 tracked vendors directly, 103 within two hops, 321 within three; 13 tracked vendors rely on it directly, 86 within two hops, 1359 within three
- Cite as: n8n, Third Party Index, https://thirdpartyindex.com/vendors/n8n (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Trust center | https://trust.n8n.io/ | 2026-11-11 | 2026-09-21 |
| Subprocessor list | https://n8n.io/legal/sub-processors/ | 2026-11-11 | 2026-09-24 |
| Data processing addendum | https://n8n.io/legal/data-processing-agreement/ | 2026-11-11 | 2026-09-21 |
| Privacy policy | https://n8n.io/legal/privacy/ | 2026-11-11 | 2026-11-10 |
| Terms | https://n8n.io/legal/self-serve-terms/ | 2026-11-11 | 2026-10-27 |
| Security page | https://n8n.io/legal/security/ | 2026-11-11 | 2026-09-21 |
| security.txt | https://n8n.io/.well-known/security.txt | 2026-11-11 | 2026-09-21 |
| Status page | https://status.n8n.cloud/ | 2026-11-11 | 2026-09-21 |

## Subprocessors (17)

As its own list states them.

| Subprocessor | Purpose | Location | Listed since |
|---|---|---|---|
| [Alibaba (Qwen)](https://thirdpartyindex.com/vendors/alibaba-group.md) | AI provider | EU | 2026-09-24 |
| [Anthropic](https://thirdpartyindex.com/vendors/anthropic.md) (AI model provider: Anthropic) | AI provider | US | 2026-09-21 |
| [Baseten Labs, Inc.](https://thirdpartyindex.com/vendors/baseten.md) (AI model provider: Baseten) | Inference infrastructure provider | EU | 2026-09-24 |
| [Brave Software, Inc.](https://thirdpartyindex.com/vendors/brave.md) | Web search provider | US | 2026-09-24 |
| [Browserbase, Inc.](https://thirdpartyindex.com/vendors/browserbase.md) | Headless browser and web scraping provider | US | 2026-09-24 |
| [Daytona](https://thirdpartyindex.com/vendors/daytona.md) | Sandbox provider (AI Assistant) | US | 2026-09-21 |
| [Firecrawl (SideGuide Technologies, Inc.)](https://thirdpartyindex.com/vendors/firecrawl.md) | Web search, scraping and headless browser provider | US | 2026-09-24 |
| Google Enterprise Agent Platform | AI provider | EU, US | 2026-09-24 |
| [Hetzner Online](https://thirdpartyindex.com/vendors/hetzner-online.md) | Hosting provider (Community Forum only) | Germany | 2026-09-24 |
| [LangChain](https://thirdpartyindex.com/vendors/langchain.md) | AI provider | US | 2026-09-21 |
| [LlamaIndex, Inc.](https://thirdpartyindex.com/vendors/llamaindex.md) | Document extraction and OCR provider | EU | 2026-09-24 |
| [Microsoft Azure](https://thirdpartyindex.com/vendors/microsoft.md) | Cloud service provider | EU (e.g., Germany, Sweden) | 2026-09-24 |
| [Modal Labs, Inc.](https://thirdpartyindex.com/vendors/modal.md) | AI inference provider | US | 2026-09-24 |
| Moonshot AI | AI provider | Singapore | 2026-09-24 |
| Nanonoble Pte. Ltd. | AI provider | US | 2026-09-24 |
| [OpenAI](https://thirdpartyindex.com/vendors/openai.md) (AI model provider: OpenAI) | AI provider | US | 2026-09-21 |
| [PDF.co (Artifex Software, Inc.)](https://thirdpartyindex.com/vendors/pdf.md) | Document conversion and extraction provider | US | 2026-09-24 |

Read from ([evidence](https://thirdpartyindex.com/evidence/9117)). CSV: https://thirdpartyindex.com/vendors/n8n/subprocessors.csv

AI model providers (or a cloud provider's AI model service) among these entries: 3. All vendors that list one: https://thirdpartyindex.com/ai

### Its own affiliates (2)

- n8n UK Ltd. (United Kingdom)
- n8n US Inc. (US)

## Compliance

As its trust center lists them.

- Audited: SOC 2 Type II, SOC 3 ([evidence](https://thirdpartyindex.com/evidence/1111))
- Claimed: GDPR ([evidence](https://thirdpartyindex.com/evidence/1111))

## Web Technologies

n8n's homepage made 268 requests to 8 domains, and 6 services controlled by another company. Loaded on 2026-11-03 by a browser that accepted nothing; other visits may load more or less. What a page loads is not a list of who receives customer data.

6 third parties by category: Analytics 2 (Cloudflare; usually detected as Analytics: Plausible Analytics); Tag managers 1 (Google Cloud); Cookie compliance 1 (CookieScript); CDN 1 (jsDelivr); Payment processors 1 (reviewed: Paddle). Each company that appears controlled by another organization is counted once, under the main category of the technologies detected from it on this homepage or, when none was, the category recorded from the company's own page (marked reviewed) or else the one it is usually detected as on other published homepages (marked as such); unclassified: none of these.

### Third parties (6)

- CookieScript: 2 requests to cookie-script.com; Cookie Script
- Cloudflare: 1 request to cloudflareinsights.com; Cloudflare Browser Insights
- Google Cloud: 1 request to googletagmanager.com; Google Tag Manager
- Paddle: 1 request to paddle.com
- Plausible Analytics: 1 request to plausible.io
- jsDelivr: 1 request to jsdelivr.net; jsDelivr

### First party (1)

- n8n: 261 requests to n8n.io, n8niostorageaccount.blob.core.windows.net; Cloudflare, GSAP, HSTS, Nuxt.js, Open Graph, Paddle, Plausible, Priority Hints, Vue.js, core-js 3.51.0

5 tracked companies loaded by the homepage are not in n8n's subprocessor list. A website can use a service without it processing customer data.

## Subprocessor of (13)

Tracked vendors whose own subprocessor lists name it, and what they say they use it for.

- [Aditude](https://thirdpartyindex.com/vendors/aditude.md): Workflow automation
- [Aprimo](https://thirdpartyindex.com/vendors/aprimo.md): Operations and Support
- [ClickTime](https://thirdpartyindex.com/vendors/clicktime.md): Application integration and task automation. AI-assisted features are enabled for internal ClickTime use only.; Workflow Automation
- [Euler](https://thirdpartyindex.com/vendors/eulerhq-com.md): IT Management
- [Expo](https://thirdpartyindex.com/vendors/expo.md): Workflow automation and data integration
- [FullFunnel](https://thirdpartyindex.com/vendors/fullfunnel-co.md): Workflow automation
- [Plain](https://thirdpartyindex.com/vendors/plain.md): Workflow automation
- [Socket](https://thirdpartyindex.com/vendors/socket-dev.md): Automation platform
- [Spiffy](https://thirdpartyindex.com/vendors/spiffy.md): Workflow automation for Spiffy's internal business processes; merchant account and contact details may pass through automated workflows.
- [SurrealDB](https://thirdpartyindex.com/vendors/surrealdb.md): Customer data workflow automation
- [Toggl](https://thirdpartyindex.com/vendors/toggl.md): Workflow automation provider
- [Urlbox](https://thirdpartyindex.com/vendors/urlbox.md)
- [Yotpo](https://thirdpartyindex.com/vendors/yotpo.md): Data flow integration and automation

## Security record

CISA's Known Exploited Vulnerabilities catalog lists 1 vulnerability in its software:

- CVE-2025-68613 (n8n), listed 2026-03-11: n8n Improper Control of Dynamically-Managed Code Resources Vulnerability

## Incidents reported by n8n's subprocessors

Incidents reported in the last 30 days on their own status pages by 6 vendors n8n lists as subprocessors. A subprocessor list names a company, not the service an incident touched.

- 2026-11-11: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which n8n lists as a subprocessor, reported Unable to start new Workspace Agent runs (critical)
- 2026-11-11: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which n8n lists as a subprocessor, reported Elevated errors affecting logins, sign-ups, and ChatGPT features (minor)
- 2026-11-11: [Baseten](https://thirdpartyindex.com/vendors/baseten#status), which n8n lists as a subprocessor, reported Model APIs are down for all models (critical)
- 2026-11-10: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which n8n lists as a subprocessor, reported Elevated errors on Fable 52 and Mythos 52 (no impact stated)
- 2026-11-10: [Modal](https://thirdpartyindex.com/vendors/modal#status), which n8n lists as a subprocessor, reported Some Sandboxes experiencing creation failures (minor)
- 2026-11-10: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which n8n lists as a subprocessor, reported Incorrect cost data in Costs API exports (no impact stated)
- 2026-11-09: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which n8n lists as a subprocessor, reported Elevated Errors On API (minor)
- 2026-11-09: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which n8n lists as a subprocessor, reported Elevated ChatGPT Conversation Errors (minor)
- 2026-11-08: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which n8n lists as a subprocessor, reported Elevated errors with image generation (minor)
- 2026-11-08: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which n8n lists as a subprocessor, reported Degraded performance for Claude Fable 5.1 (minor)
- 2026-11-06: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which n8n lists as a subprocessor, reported Elevated error rates with some U.S. business Mastercards (no impact stated)
- 2026-11-05: [Baseten](https://thirdpartyindex.com/vendors/baseten#status), which n8n lists as a subprocessor, reported Elevated errors for Kimi-K3 on Model APIs. \*\*Dedicated Inference is not affected\*\* (minor)
- 2026-11-05: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which n8n lists as a subprocessor, reported ChatGPT Work and Dots Errors (minor)
- 2026-11-04: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which n8n lists as a subprocessor, reported Elevated error rates across paid ChatGPT plans (minor)
- 2026-11-03: [Daytona](https://thirdpartyindex.com/vendors/daytona#status), which n8n lists as a subprocessor, reported Degraded performance: API and sandbox operations (minor)
- 2026-11-03: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which n8n lists as a subprocessor, reported File upload errors in ChatGPT (minor)
- 2026-10-30: [LangChain](https://thirdpartyindex.com/vendors/langchain#status), which n8n lists as a subprocessor, reported Increased latency and 500 rate (major)
- 2026-10-30: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which n8n lists as a subprocessor, reported Elevated errors with search in Dots, ChatGPT Work, and certain ChatGPT thinking experiences (minor)
- 2026-10-30: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which n8n lists as a subprocessor, reported Elevated errors for GPT Image 2 API image edits (minor)
- 2026-10-30: [Daytona](https://thirdpartyindex.com/vendors/daytona#status), which n8n lists as a subprocessor, reported Degraded performance for a subset of US runners (minor)
- 2026-10-30: [Daytona](https://thirdpartyindex.com/vendors/daytona#status), which n8n lists as a subprocessor, reported Sandbox listing (GET /sandbox) (minor)
- 2026-10-29: [Daytona](https://thirdpartyindex.com/vendors/daytona#status), which n8n lists as a subprocessor, reported US Region Runner Degradation (minor)
- 2026-10-28: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which n8n lists as a subprocessor, reported Elevated errors affecting the Google Calendar connector (minor)
- 2026-10-28: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which n8n lists as a subprocessor, reported Elevated errors affecting the Gmail connector (minor)
- 2026-10-27: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which n8n lists as a subprocessor, reported Elevated errors for Claude Sonnet 5.5 (major)
- 2026-10-27: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which n8n lists as a subprocessor, reported 6.1 Sol Degraded Model Performance (minor)
- 2026-10-27: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which n8n lists as a subprocessor, reported Elevated errors for Claude Sonnet 5.5 (major)
- 2026-10-27: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which n8n lists as a subprocessor, reported Elevated error rates for most hosted Code Reviews and Security Reviews on private GitHub repositories (no impact stated)
- 2026-10-26: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which n8n lists as a subprocessor, reported Elevated error rates for Ads POST requests (minor)
- 2026-10-25: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which n8n lists as a subprocessor, reported Elevated errors for Claude Fable 5.1 (major)
- 2026-10-25: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which n8n lists as a subprocessor, reported Elevated errors for Claude Sonnet 5.5 and other models (major)
- 2026-10-24: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which n8n lists as a subprocessor, reported Elevated errors for Claude Fable 5 and Claude Fable 5.1 (major)
- 2026-10-24: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which n8n lists as a subprocessor, reported Elevated errors for Claude Opus 5.5 (major)
- 2026-10-23: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which n8n lists as a subprocessor, reported Elevated errors for Claude Fable 5.1, Sonnet 5.5, and Haiku 5.5 (critical)
- 2026-10-23: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which n8n lists as a subprocessor, reported Degraded experience with ChatGPT app connections using CIMD (minor)
- 2026-10-23: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which n8n lists as a subprocessor, reported Help Center Chat Support Degraded (no impact stated)
- 2026-10-23: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which n8n lists as a subprocessor, reported Delays in customer support responses (no impact stated)
- 2026-10-23: [Baseten](https://thirdpartyindex.com/vendors/baseten#status), which n8n lists as a subprocessor, reported Elevated errors for US-only GLM 5.3 Flash on Model APIs (minor)
- 2026-10-22: [Daytona](https://thirdpartyindex.com/vendors/daytona#status), which n8n lists as a subprocessor, reported Some feature flags are unavailable in the Dashboard (minor)
- 2026-10-22: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which n8n lists as a subprocessor, reported New Ad Accounts failing to provision admins (minor)
- 2026-10-22: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which n8n lists as a subprocessor, reported Degraded Performance of Dots on Enterprise (minor)
- 2026-10-22: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which n8n lists as a subprocessor, reported Elevated errors affecting Connectors (minor)
- 2026-10-22: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which n8n lists as a subprocessor, reported Elevated ChatGPT conversation and Responses API errors (minor)
- 2026-10-21: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which n8n lists as a subprocessor, reported Authentication errors for some users (major)
- 2026-10-21: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which n8n lists as a subprocessor, reported Degraded performance for Claude Fable 5 (minor)
- 2026-10-21: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which n8n lists as a subprocessor, reported Elevated error rates for gpt-5.6-luna API requests (minor)
- 2026-10-21: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which n8n lists as a subprocessor, reported Elevated FedRAMP API error rates for Astra and Sol (minor)
- 2026-10-21: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which n8n lists as a subprocessor, reported Degraded performance in ChatGPT, Codex, and APIs (minor)
- 2026-10-21: [Baseten](https://thirdpartyindex.com/vendors/baseten#status), which n8n lists as a subprocessor, reported Elevated errors on DeepSeek V4 Flash on Model APIs (minor)
- 2026-10-21: [Baseten](https://thirdpartyindex.com/vendors/baseten#status), which n8n lists as a subprocessor, reported Elevated errors for image requests on multiple Model APIs (minor)
- 2026-10-20: [Baseten](https://thirdpartyindex.com/vendors/baseten#status), which n8n lists as a subprocessor, reported DeepSeek V4.1 Flash Fast Outage on Model APIs (major)
- 2026-10-20: [Baseten](https://thirdpartyindex.com/vendors/baseten#status), which n8n lists as a subprocessor, reported Elevated errors on Model APIs (minor)
- 2026-10-19: [Modal](https://thirdpartyindex.com/vendors/modal#status), which n8n lists as a subprocessor, reported Web functions degraded (minor)
- 2026-10-19: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which n8n lists as a subprocessor, reported File Download errors (minor)
- 2026-10-16: [Daytona](https://thirdpartyindex.com/vendors/daytona#status), which n8n lists as a subprocessor, reported Reduced GPU capacity (minor)
- 2026-10-15: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which n8n lists as a subprocessor, reported Widespread feature degradation (major)
- 2026-10-14: [Modal](https://thirdpartyindex.com/vendors/modal#status), which n8n lists as a subprocessor, reported Kimi K3 shared endpoint downtime (major)
- 2026-10-14: [LangChain](https://thirdpartyindex.com/vendors/langchain#status), which n8n lists as a subprocessor, reported Sandbox Performance Degraded (minor)
- 2026-10-14: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which n8n lists as a subprocessor, reported Delayed Costs data in the Compliance API (minor)
- 2026-10-14: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which n8n lists as a subprocessor, reported Limited availability on gpt-image-2.5-flare and gpt-image-2.5-sunburst (minor)
- 2026-10-14: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which n8n lists as a subprocessor, reported Degraded performance in Codex and ChatGPT Work (minor)
- 2026-10-14: [Modal](https://thirdpartyindex.com/vendors/modal#status), which n8n lists as a subprocessor, reported Kimi K3 shared endpoint is degraded (minor)
- 2026-10-13: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which n8n lists as a subprocessor, reported Degraded performance in GPT-6.1 Sol Codex and Work mode (minor)

## Recent changes

Changes to its documents and subprocessor list since monitoring began.

- 2026-09-24: Changed subprocessor: Hetzner Online (purpose: Cloud service provider → Hosting provider (Community Forum only)) ([evidence](https://thirdpartyindex.com/evidence/9117))
- 2026-09-24: Removed subprocessor: Google Vertex AI ([evidence](https://thirdpartyindex.com/evidence/9117))
- 2026-09-24: Changed subprocessor: Microsoft Azure (locations: EU (Germany, Sweden) → EU (e.g., Germany, Sweden)) ([evidence](https://thirdpartyindex.com/evidence/9117))
- 2026-09-24: Changed subprocessor: n8n UK Ltd. (purpose: n8n group entity → Customer support and service operations) ([evidence](https://thirdpartyindex.com/evidence/9117))
- 2026-09-24: Changed subprocessor: n8n US Inc. (purpose: n8n group entity → Customer support and service operations) ([evidence](https://thirdpartyindex.com/evidence/9117))
- 2026-09-24: Added subprocessor: Alibaba (Qwen) ([evidence](https://thirdpartyindex.com/evidence/9117))
- 2026-09-24: Added subprocessor: Baseten Labs, Inc. ([evidence](https://thirdpartyindex.com/evidence/9117))
- 2026-09-24: Added subprocessor: Brave Software, Inc. ([evidence](https://thirdpartyindex.com/evidence/9117))
- 2026-09-24: Added subprocessor: Browserbase, Inc. ([evidence](https://thirdpartyindex.com/evidence/9117))
- 2026-09-24: Added subprocessor: Firecrawl (SideGuide Technologies, Inc.) ([evidence](https://thirdpartyindex.com/evidence/9117))
- 2026-09-24: Added subprocessor: Google Enterprise Agent Platform ([evidence](https://thirdpartyindex.com/evidence/9117))
- 2026-09-24: Added subprocessor: LlamaIndex, Inc. ([evidence](https://thirdpartyindex.com/evidence/9117))
- 2026-09-24: Added subprocessor: Modal Labs, Inc. ([evidence](https://thirdpartyindex.com/evidence/9117))
- 2026-09-24: Added subprocessor: Moonshot AI ([evidence](https://thirdpartyindex.com/evidence/9117))
- 2026-09-24: Added subprocessor: Nanonoble Pte. Ltd. ([evidence](https://thirdpartyindex.com/evidence/9117))
- 2026-09-24: Added subprocessor: PDF.co (Artifex Software, Inc.) ([evidence](https://thirdpartyindex.com/evidence/9117))

Feed: https://thirdpartyindex.com/vendors/n8n/changes.atom

The subprocessor list as we read it on any date: https://thirdpartyindex.com/labs/time-machine/n8n

## Security contact

From its security.txt (https://n8n.io/.well-known/security.txt) ([evidence](https://thirdpartyindex.com/evidence/1125)):

- Contact: https://n8n.io/report-a-vulnerability/
- Disclosure policy: https://n8n.io/legal/vulnerability-disclosure-policy/
- Security jobs: https://n8n.io/careers
- Languages: en
- Valid until 2027-12-31

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api
