# Navan

Navan (navan.com): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/navan
- Documents last verified: 2026-10-02
- Transparency rating: 39/100 (how much it publishes, not how secure it is): Subprocessor list 0/30 (not found); Processing locations 0/8 (no list); Purposes 0/7 (no list); Data processing addendum 12/12; Trust center 8/8; Privacy policy 6/6; security.txt 0/6 (not found); Security page 0/5 (not found); Status page 5/5; Vulnerability disclosure 0/5 (not found); Pages still reachable 8/8
- Cite as: Navan, Third Party Index, https://thirdpartyindex.com/vendors/navan (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Trust center | https://navan.com/security | 2026-10-02 | 2026-09-30 |
| Data processing addendum | https://navan.com/dpa | 2026-10-02 | 2026-09-30 |
| Privacy policy | https://navan.com/privacy | 2026-10-02 | 2026-09-30 |
| Terms | https://navan.com/terms-of-use | 2026-10-02 | 2026-09-30 |
| Status page | https://status.navan.com/ | 2026-10-02 | 2026-10-01 |

## Subprocessors (0)

No subprocessor list has been found or read for this vendor.

## Security program

What Navan, Inc.'s Form 10-K for fiscal 2026, filed Apr 2, 2026 (Item 1C) says, in its words (https://www.sec.gov/Archives/edgar/data/1639723/000162828026023250/0001628280-26-023250-index.htm).

- Led by: Chief Information Security Officer, reporting to the audit committee of the board of directors
- Leader's experience: 25+ years
- Board oversight: Audit Committee, Risk Committee
- Practices named: Incident response plan, Tabletop exercises, Penetration testing, Vulnerability management, Threat intelligence, Cyber insurance
- Engages outside assessors or consultants
- Reviews its suppliers' security

## Subprocessor of (0)

No tracked vendor lists it.

## Service status

Incidents it reported on its own status page.

- Last 90 days: 16 reported incidents (1 major or critical, 9 minor, 6 with no impact stated)
- Typical time to resolve: 3 h 16 min
- Status page last read: 2026-10-03
- 2026-10-02: Hotels Inventory Degraded (no impact stated)
- 2026-09-30: MakeMyTrip inventory outage (no impact stated)
- 2026-09-21: Outage to EU Carrier (no impact stated)
- 2026-09-17: Train bookings in the US (minor)
- 2026-08-18: Hotels inventory degraded (minor)
- 2026-08-10: Hotel search performance degraded (minor)
- 2026-08-10: Hotel degraded performance (no impact stated)
- 2026-08-01: MakeMyTrip hotel inventory degraded (no impact stated)

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api