ngrok
Certifications and attestations: SOC 2
Says it complies with: HIPAA, GDPR, CCPA/CPRA, Data Privacy Framework
Certifications as listed on ngrok's trust center (evidence) ; reports themselves are usually shared on request.
Transparency
Breakdown
| Subprocessor list | 30 / 30 | |
| Processing locations | 8 / 8 | |
| Purposes | 7 / 7 | |
| Data processing addendum | 12 / 12 | |
| Trust center | 8 / 8 | |
| Privacy policy | 6 / 6 | |
| security.txt | 6 / 6 | |
| Security page | 5 / 5 | |
| Status page | 5 / 5 | |
| Vulnerability disclosure | not found | 0 / 5 |
| Pages still reachable | 8 / 8 | |
| Total | 95 / 100 |
Only documents we can retrieve count: a page behind a login or a broken link scores nothing.
Badge
For ngrok's own site; it updates with the rating.
<a href="https://thirdpartyindex.com/vendors/ngrok"><img src="https://thirdpartyindex.com/badge/ngrok.svg" alt="ngrok transparency rating on Third Party Index" height="20"></a>[](https://thirdpartyindex.com/vendors/ngrok)Not listed by any tracked vendor.
Documents
| Document | Verified | Changed | Evidence |
|---|---|---|---|
| Trust center safebase | snapshot | ||
| Subprocessor list safebase | snapshot | ||
| Data processing addendum | snapshot | ||
| Privacy policy | snapshot | ||
| Terms | snapshot | ||
| Security page | snapshot | ||
| security.txt | snapshot | ||
| Status page statuspage | snapshot |
Subprocessors
| Name | Purpose | Location | Listed since |
|---|---|---|---|
| Amazon | Infrastructure Provider providing hosting services and storage. | United States, Singapore, Australia, Germany, India, Japan, Brazil | |
| Anthropic | Customer Selectable AI Model Provider | United States | |
| Apollo | Marketing Automation | United States | |
| Clearbit | Data Enrichment | United States | |
| ClickHouse | Business Intelligence | United States | |
| Datadog | Analytics | United States | |
| DeepSeek | Customer Selectable AI Model Provider | People's Republic of China | |
| Analytics, Collaboration and Communication for internal use. Customer Selectable AI Model Provider within AI Gateway. | United States | ||
| Hightouch | Data Services | United States | |
| HubSpot | Marketing platform | United States | |
| Kimi.ai | Customer Selectable AI Model Provider | Singapore | |
| Mailgun | Marketing Automation | United States | |
| MiniMax | Customer Selectable AI Model Provider | United States | |
| OpenAI | Customer Selectable AI Model Provider | United States | |
| Plain | Customer Support | United States, United Kingdom, European Economic Area | |
| Qwen Cloud | Customer Selectable AI Model Provider | Singapore | |
| Salesforce | Customer Relationship Management | United States | |
| Stripe | Payment Processing | United States | |
| Tencent Cloud | Customer Selectable AI Model Provider | Singapore | |
| Z.ai | Customer Selectable AI Model Provider | Singapore | |
| Zendesk | Customer Support | United States |
Service status
5 incidents in the last 90 days (2 major or critical, 1 minor, 2 with no stated impact) · typically resolved in 1 h 42 min · longest major: 1 h 42 min
| Began | Incident | Impact | Lasted |
|---|---|---|---|
| SSO session validation errors on dashboard.ngrok.com | minor | 5 h 26 min evidence | |
| Error when signing in via SSO | major | 1 h 42 min evidence | |
| Endpoints using traffic policies are erroneously hitting limits | major | 1 h 24 min evidence | |
| New accounts or newly created authtokens are not able to connect | none | 36 min evidence | |
| User invites disruption | none | — evidence | |
| Delays issuing certificates | minor | 8 h 48 min evidence | |
| SSO Login to the ngrok Dashboard is currently redirecting back to the login page | none | 23 min evidence | |
| Delay in generating and renewing certificates for custom domains | none | 2 h 8 min evidence |
As ngrok's status page reports its own incidents (scheduled maintenance left out), read every few hours since .
Changes
None since tracking began.