# Ocrolus

Ocrolus declares [11 subprocessors](https://thirdpartyindex.com/vendors/ocrolus#subprocessors), plus 1 of its own affiliates, in [its subprocessor list](https://legal.ocrolus.com/sub-processors/list-of-ocrolus-sub-processors-f51b4947), which we last checked on 2026-11-11 ([evidence](https://thirdpartyindex.com/evidence/233493)). They include [Amazon Web Services](https://thirdpartyindex.com/vendors/amazon-web-services), [Google Cloud](https://thirdpartyindex.com/vendors/google-cloud) and [OpenAI](https://thirdpartyindex.com/vendors/openai). No published changes since we first read it on 2026-09-22. [3 tracked vendors](https://thirdpartyindex.com/vendors/ocrolus#used-by) name Ocrolus as a subprocessor, including [Taktile](https://thirdpartyindex.com/vendors/taktile), [Expensify](https://thirdpartyindex.com/vendors/expensify) and [Valid8 Financial](https://thirdpartyindex.com/vendors/valid8-financial).

Ocrolus (ocrolus.com): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/ocrolus
- Documents last verified: 2026-11-11
- Transparency rating: 69/100 (how much it publishes, not how secure it is): Subprocessor list 30/30; Processing locations 8/8; Purposes 7/7; Data processing addendum 0/12 (not found); Trust center 0/8 (not found); Privacy policy 6/6; security.txt 0/6 (not found); Security page 5/5; Status page 5/5; Vulnerability disclosure 0/5 (not found); Pages still reachable 8/8
- Supply chain: relies on 10 tracked vendors directly, 93 within two hops, 312 within three; 3 tracked vendors rely on it directly, 4 within two hops, 56 within three
- Cite as: Ocrolus, Third Party Index, https://thirdpartyindex.com/vendors/ocrolus (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Subprocessor list | https://legal.ocrolus.com/sub-processors/list-of-ocrolus-sub-processors-f51b4947 | 2026-11-11 | 2026-11-07 |
| Privacy policy | https://legal.ocrolus.com/legal/privacy-policy-958a2463 | 2026-11-11 | 2026-10-21 |
| Terms | https://legal.ocrolus.com/legal/terms-of-use-88ee7151 | 2026-11-11 | 2026-09-22 |
| Security page | https://security.ocrolus.com/ | 2026-11-11 | 2026-10-30 |
| Status page | https://status.ocrolus.com/ | 2026-11-11 | 2026-11-11 |

## Subprocessors (11)

As its own list states them.

| Subprocessor | Purpose | Location | Listed since |
|---|---|---|---|
| [Amazon Web Services](https://thirdpartyindex.com/vendors/amazon-web-services.md) | Cloud infrastructure for hosting of the Ocrolus platform and data storage and processing | United States | 2026-09-22 |
| [Anthropic](https://thirdpartyindex.com/vendors/anthropic.md) (AI model provider: Anthropic) | Cloud infrastructure for data processing and analysis | United States | 2026-09-22 |
| Extend AI | Enhancement of document processing results and data analysis | United States | 2026-09-22 |
| [Google Cloud Platform](https://thirdpartyindex.com/vendors/google-cloud.md) | Cloud infrastructure for data processing | United States | 2026-09-22 |
| [Middesk](https://thirdpartyindex.com/vendors/middesk.md) | Business verification (KYB) and firmographic data enrichment | United States | 2026-11-07 |
| [OpenAI](https://thirdpartyindex.com/vendors/openai.md) (AI model provider: OpenAI) | Cloud infrastructure for data processing | United States | 2026-09-22 |
| [Resistant AI](https://thirdpartyindex.com/vendors/resistant-ai.md) | Enhancement of document fraud analysis | United States | 2026-09-22 |
| [Salesforce (Tableau)](https://thirdpartyindex.com/vendors/salesforce.md) | Cloud infrastructure for data visualization, analytics, and business intelligence | United States | 2026-09-22 |
| [Sigma](https://thirdpartyindex.com/vendors/sigma.md) | Data visualization, analytics, business intelligence, and processing | United States | 2026-11-07 |
| [Smarty](https://thirdpartyindex.com/vendors/smarty.md) | Validation of U.S. address for select documents processed through Ocrolus | United States | 2026-09-22 |
| [Snowflake](https://thirdpartyindex.com/vendors/snowflake.md) | Data storage | United States | 2026-09-22 |

Read from ([evidence](https://thirdpartyindex.com/evidence/3965)). CSV: https://thirdpartyindex.com/vendors/ocrolus/subprocessors.csv

AI model providers (or a cloud provider's AI model service) among these entries: 2. All vendors that list one: https://thirdpartyindex.com/ai

### Its own affiliates (1)

- Ocrolus East Private Limited (India)

## Web Technologies

Ocrolus's homepage made 188 requests to 45 domains, 20 services controlled by another company, and 1 domain not identified. Loaded on 2026-11-09 by a browser that accepted nothing; other visits may load more or less. What a page loads is not a list of who receives customer data.

20 third parties by category: Analytics 9 (HubSpot, Clay, Contentsquare, Meta, Hotjar, LinkedIn, Heap, Crazy Egg; usually detected as Analytics: Cloudflare); Advertising 3 (Google Cloud, Reddit, Inc.; usually detected as Advertising: Xandr); CDN 2 (UNPKG, jsDelivr); Marketing automation 1 (6Sense Insights, Inc.); Customer data platform 1 (Segment); RUM 1 (SolarWinds); Video players 1 (Wistia); Unclassified 2 (Contently, Inc., SpotDraft). Each company that appears controlled by another organization is counted once, under the main category of the technologies detected from it on this homepage or, when none was, the category recorded from the company's own page (marked reviewed) or else the one it is usually detected as on other published homepages (marked as such); unclassified: none of these.

### Third parties (20)

- Google Cloud: 32 requests to google.com, doubleclick.net, googleadservices.com, googletagmanager.com, fonts.googleapis.com, googleoptimize.com, gstatic.com, storage.googleapis.com, ytimg.com; DoubleClick Floodlight, Google Analytics, Google Optimize, Google Tag Manager (its subprocessor list names it too)
- 6Sense Insights, Inc.: 18 requests to 6sc.co, 6sense.com; 6sense
- HubSpot: 16 requests to hsforms.com, hubspot.com, hs-analytics.net, hscollectedforms.net, hs-banner.com, hs-scripts.com, hsadspixel.net, hscta.net, hsforms.net, hubapi.com; HubSpot, HubSpot Analytics
- Segment: 9 requests to segment.com, segment.io; Segment 1.84.3
- Clay: 6 requests to claydar.com; Clay Web Intent
- Contentsquare: 5 requests to contentsquare.net; Contentsquare
- Meta: 5 requests to facebook.net, facebook.com; Facebook Pixel 2.9.438
- UNPKG: 5 requests to unpkg.com; Unpkg
- Hotjar: 4 requests to hotjar.com, hotjar.io; Hotjar
- Contently, Inc.: 3 requests to contently.com
- LinkedIn: 3 requests to linkedin.com, licdn.com; Linkedin Insight Tag
- Reddit, Inc.: 3 requests to reddit.com, redditstatic.com; Reddit Ads
- Heap: 2 requests to heapanalytics.com; Heap 4.23.12
- SolarWinds: 2 requests to pingdom.net; Pingdom RUM
- SpotDraft: 2 requests to spotdraft.com
- jsDelivr: 2 requests to jsdelivr.net; Slick, jsDelivr
- Cloudflare: 1 request to cloudflare.com
- Crazy Egg: 1 request to crazyegg.com; Crazy Egg
- Wistia: 1 request to wistia.com; Wistia
- Xandr: 1 request to adnxs.com

### Unknown (1)

Domains not identified yet: dyv6f9ner1ir9.cloudfront.net

### First party (1)

- Ocrolus: 66 requests to ocrolus.com; Cloudflare, Contently, FancyBox 3.5.7, GSAP 3.15.1, Google Font API, HTTP/3, LazySizes, Linkedin Ads, LottieFiles 5.7.13, Moove GDPR Consent, MySQL, Open Graph, PHP, Priority Hints, Rive, Swiper, WP Engine, WP Rocket 3.24, WPMU DEV Smush 4.3.5, WordPress, Yoast SEO 28.8, cdnjs, core-js 3.32.2, jQuery 3.7.1, jQuery Migrate 3.4.1

13 tracked companies loaded by the homepage are not in Ocrolus's subprocessor list. A website can use a service without it processing customer data.

## Subprocessor of (3)

Tracked vendors whose own subprocessor lists name it, and what they say they use it for.

- [Expensify](https://thirdpartyindex.com/vendors/expensify.md): Financial Features; KYC Provider
- [Taktile](https://thirdpartyindex.com/vendors/taktile.md): AI + human‑in‑the‑loop document automation platform that extracts, validates, and analyzes data from financial documents for underwriting and risk decisio…
- [Valid8 Financial](https://thirdpartyindex.com/vendors/valid8-financial.md): Bank statement extraction; Data storage and processing

## Service status

Incidents it reported on its own status page.

- Last 90 days: 1 reported incidents (0 major or critical, 1 minor, 0 with no impact stated)
- Typical time to resolve: 4 h 49 min
- Status page last read: 2026-11-12
- 2026-10-06: Encompass (ICE) Service Disruption Impacting Ocrolus Services (minor)
- 2026-08-11: Delays in Document Processing Services (minor)
- 2026-07-30: Import to Encompass Modal Not Loading (major)
- 2026-07-06: Document Processing Degradation – Unknown Rejections (minor)
- 2026-06-05: Delays with Encompass interactions causing degraded performance (minor)
- 2026-04-29: Delays in Updating Custom Fields (minor)
- 2026-04-22: Delays in Document Processing and Detect Completion (minor)
- 2026-03-17: Delays in Document Processing Services (minor)

## Incidents reported by Ocrolus's subprocessors

Incidents reported in the last 30 days on their own status pages by 5 vendors Ocrolus lists as subprocessors. A subprocessor list names a company, not the service an incident touched.

- 2026-11-12: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which Ocrolus lists as a subprocessor, reported INC20000347 (minor)
- 2026-11-11: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Ocrolus lists as a subprocessor, reported Unable to start new Workspace Agent runs (critical)
- 2026-11-11: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Ocrolus lists as a subprocessor, reported Elevated errors affecting logins, sign-ups, and ChatGPT features (minor)
- 2026-11-10: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Ocrolus lists as a subprocessor, reported Elevated errors on Fable 52 and Mythos 52 (no impact stated)
- 2026-11-10: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Ocrolus lists as a subprocessor, reported Incorrect cost data in Costs API exports (no impact stated)
- 2026-11-09: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Ocrolus lists as a subprocessor, reported Elevated Errors On API (minor)
- 2026-11-09: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Ocrolus lists as a subprocessor, reported Elevated ChatGPT Conversation Errors (minor)
- 2026-11-08: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Ocrolus lists as a subprocessor, reported Elevated errors with image generation (minor)
- 2026-11-08: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Ocrolus lists as a subprocessor, reported Degraded performance for Claude Fable 5.1 (minor)
- 2026-11-07: [Middesk](https://thirdpartyindex.com/vendors/middesk#status), which Ocrolus lists as a subprocessor, reported Delayed Webhook Deliveries (no impact stated)
- 2026-11-07: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which Ocrolus lists as a subprocessor, reported INC20000337 (minor)
- 2026-11-07: [Sigma](https://thirdpartyindex.com/vendors/sigma#status), which Ocrolus lists as a subprocessor, reported Degraded performance in AWS US-WEST-2 hosted organizations (minor)
- 2026-11-06: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which Ocrolus lists as a subprocessor, reported INC20000336 (minor)
- 2026-11-06: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Ocrolus lists as a subprocessor, reported Elevated error rates with some U.S. business Mastercards (no impact stated)
- 2026-11-05: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Ocrolus lists as a subprocessor, reported ChatGPT Work and Dots Errors (minor)
- 2026-11-05: [Sigma](https://thirdpartyindex.com/vendors/sigma#status), which Ocrolus lists as a subprocessor, reported Service degradation in GCP-US-hosted organizations (no impact stated)
- 2026-11-04: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Ocrolus lists as a subprocessor, reported Elevated error rates across paid ChatGPT plans (minor)
- 2026-11-03: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Ocrolus lists as a subprocessor, reported File upload errors in ChatGPT (minor)
- 2026-10-30: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which Ocrolus lists as a subprocessor, reported INC20000321 (minor)
- 2026-10-30: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Ocrolus lists as a subprocessor, reported Elevated errors with search in Dots, ChatGPT Work, and certain ChatGPT thinking experiences (minor)
- 2026-10-30: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Ocrolus lists as a subprocessor, reported Elevated errors for GPT Image 2 API image edits (minor)
- 2026-10-29: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which Ocrolus lists as a subprocessor, reported INC20000319 (minor)
- 2026-10-28: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Ocrolus lists as a subprocessor, reported Elevated errors affecting the Google Calendar connector (minor)
- 2026-10-28: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Ocrolus lists as a subprocessor, reported Elevated errors affecting the Gmail connector (minor)
- 2026-10-27: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Ocrolus lists as a subprocessor, reported Elevated errors for Claude Sonnet 5.5 (major)
- 2026-10-27: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Ocrolus lists as a subprocessor, reported 6.1 Sol Degraded Model Performance (minor)
- 2026-10-27: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Ocrolus lists as a subprocessor, reported Elevated errors for Claude Sonnet 5.5 (major)
- 2026-10-27: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Ocrolus lists as a subprocessor, reported Elevated error rates for most hosted Code Reviews and Security Reviews on private GitHub repositories (no impact stated)
- 2026-10-26: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Ocrolus lists as a subprocessor, reported Elevated error rates for Ads POST requests (minor)
- 2026-10-25: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Ocrolus lists as a subprocessor, reported Elevated errors for Claude Fable 5.1 (major)
- 2026-10-25: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Ocrolus lists as a subprocessor, reported Elevated errors for Claude Sonnet 5.5 and other models (major)
- 2026-10-24: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Ocrolus lists as a subprocessor, reported Elevated errors for Claude Fable 5 and Claude Fable 5.1 (major)
- 2026-10-24: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Ocrolus lists as a subprocessor, reported Elevated errors for Claude Opus 5.5 (major)
- 2026-10-23: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Ocrolus lists as a subprocessor, reported Elevated errors for Claude Fable 5.1, Sonnet 5.5, and Haiku 5.5 (critical)
- 2026-10-23: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Ocrolus lists as a subprocessor, reported Degraded experience with ChatGPT app connections using CIMD (minor)
- 2026-10-23: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Ocrolus lists as a subprocessor, reported Help Center Chat Support Degraded (no impact stated)
- 2026-10-23: [Middesk](https://thirdpartyindex.com/vendors/middesk#status), which Ocrolus lists as a subprocessor, reported Delaware SOS Portal Outage (minor)
- 2026-10-23: [Middesk](https://thirdpartyindex.com/vendors/middesk#status), which Ocrolus lists as a subprocessor, reported Intermittent sandbox availability (no impact stated)
- 2026-10-23: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Ocrolus lists as a subprocessor, reported Delays in customer support responses (no impact stated)
- 2026-10-22: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Ocrolus lists as a subprocessor, reported New Ad Accounts failing to provision admins (minor)
- 2026-10-22: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Ocrolus lists as a subprocessor, reported Degraded Performance of Dots on Enterprise (minor)
- 2026-10-22: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Ocrolus lists as a subprocessor, reported Elevated errors affecting Connectors (minor)
- 2026-10-22: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Ocrolus lists as a subprocessor, reported Elevated ChatGPT conversation and Responses API errors (minor)
- 2026-10-21: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Ocrolus lists as a subprocessor, reported Authentication errors for some users (major)
- 2026-10-21: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Ocrolus lists as a subprocessor, reported Degraded performance for Claude Fable 5 (minor)
- 2026-10-21: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which Ocrolus lists as a subprocessor, reported INC20000301 (critical)
- 2026-10-21: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Ocrolus lists as a subprocessor, reported Elevated error rates for gpt-5.6-luna API requests (minor)
- 2026-10-21: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Ocrolus lists as a subprocessor, reported Elevated FedRAMP API error rates for Astra and Sol (minor)
- 2026-10-21: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which Ocrolus lists as a subprocessor, reported INC20000299 (minor)
- 2026-10-21: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Ocrolus lists as a subprocessor, reported Degraded performance in ChatGPT, Codex, and APIs (minor)
- 2026-10-20: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which Ocrolus lists as a subprocessor, reported INC20000294 (critical)
- 2026-10-19: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Ocrolus lists as a subprocessor, reported File Download errors (minor)
- 2026-10-19: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which Ocrolus lists as a subprocessor, reported INC20000290 (minor)
- 2026-10-16: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which Ocrolus lists as a subprocessor, reported INC20000287 (critical)
- 2026-10-15: [Middesk](https://thirdpartyindex.com/vendors/middesk#status), which Ocrolus lists as a subprocessor, reported Tin Match Outage (major)
- 2026-10-15: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Ocrolus lists as a subprocessor, reported Widespread feature degradation (major)
- 2026-10-14: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Ocrolus lists as a subprocessor, reported Delayed Costs data in the Compliance API (minor)
- 2026-10-14: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Ocrolus lists as a subprocessor, reported Limited availability on gpt-image-2.5-flare and gpt-image-2.5-sunburst (minor)
- 2026-10-14: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Ocrolus lists as a subprocessor, reported Degraded performance in Codex and ChatGPT Work (minor)
- 2026-10-13: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which Ocrolus lists as a subprocessor, reported INC20000277 (minor)

The subprocessor list as we read it on any date: https://thirdpartyindex.com/labs/time-machine/ocrolus

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api
