# Ona

Ona declares [15 subprocessors](https://thirdpartyindex.com/vendors/ona#subprocessors) in [its subprocessor list](https://ona.com/legal/sub-processors), which we last checked on 2026-11-11 ([evidence](https://thirdpartyindex.com/evidence/6553)). They include [Amazon Web Services](https://thirdpartyindex.com/vendors/amazon-web-services), [Google Cloud](https://thirdpartyindex.com/vendors/google-cloud) and [OpenAI](https://thirdpartyindex.com/vendors/openai). No published changes since we first read it on 2026-09-23.

Ona (ona.com): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/ona
- Documents last verified: 2026-11-11
- Transparency rating: 69/100 (how much it publishes, not how secure it is): Subprocessor list 30/30; Processing locations 8/8; Purposes 7/7; Data processing addendum 0/12 (not found); Trust center 0/8 (not found); Privacy policy 6/6; security.txt 0/6 (not found); Security page 5/5; Status page 5/5; Vulnerability disclosure 0/5 (not found); Pages still reachable 8/8
- Supply chain: relies on 12 tracked vendors directly, 129 within two hops, 436 within three; 0 tracked vendors rely on it directly, 0 within two hops, 0 within three
- Cite as: Ona, Third Party Index, https://thirdpartyindex.com/vendors/ona (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Subprocessor list | https://ona.com/legal/sub-processors | 2026-11-11 | 2026-09-23 |
| Privacy policy | https://ona.com/legal/privacy-policy | 2026-11-11 | 2026-09-27 |
| Terms | https://ona.com/legal/terms-of-service | 2026-11-11 | 2026-09-23 |
| Security page | https://trust.ona.com/ | 2026-11-11 | 2026-09-23 |
| Status page | https://onastatus.com/ | 2026-11-11 | 2026-11-01 |

## Subprocessors (15)

As its own list states them.

| Subprocessor | Purpose | Location | Listed since |
|---|---|---|---|
| [Amazon Web Services, Inc.](https://thirdpartyindex.com/vendors/amazon-web-services.md) | Cloud Infrastructure; Cloud Infrastructure for Gitpod Dedicated | United States of America | 2026-09-23 |
| [Anthropic, PBC](https://thirdpartyindex.com/vendors/anthropic.md) (AI model provider: Anthropic) | AI language model services for code generation and assistance | United States of America | 2026-09-23 |
| Gitpod, Inc. | Technical Support Services | United States of America | 2026-09-23 |
| [Gong.io, Inc](https://thirdpartyindex.com/vendors/gong.md) | Meeting Transcript Service | United States of America | 2026-09-23 |
| [Google, LLC](https://thirdpartyindex.com/vendors/google-cloud.md) | Business Emails and Collaboration | United States of America | 2026-09-23 |
| [Hex Technologies, Inc](https://thirdpartyindex.com/vendors/hex.md) | Data Platform for Data Science and Analytics | United States of America | 2026-09-23 |
| [Metabase, Inc](https://thirdpartyindex.com/vendors/metabase.md) | Business Analytics and Reporting Service | United States of America | 2026-09-23 |
| [Mixpanel, Inc](https://thirdpartyindex.com/vendors/mixpanel.md) | Event Analytics Service | United States of America | 2026-09-23 |
| [OpenAI Ireland Ltd.](https://thirdpartyindex.com/vendors/openai.md) (AI model provider: OpenAI) | AI language model services for code generation and assistance | Ireland | 2026-09-23 |
| [OpenAI OpCo, LLC](https://thirdpartyindex.com/vendors/openai.md) (AI model provider: OpenAI) | AI language model services for code generation and assistance | United States of America | 2026-09-23 |
| Pearberry Software, Inc | Email service for Account Notifications, Product Updates and Newsletters | United States of America | 2026-09-23 |
| [Pylon Labs, Inc](https://thirdpartyindex.com/vendors/pylon.md) | Platform to handle customer support inquiries and questions | United States of America | 2026-09-23 |
| [Salesforce, Inc](https://thirdpartyindex.com/vendors/salesforce.md) | Customer Relationship Management | United States of America | 2026-09-23 |
| [Slack Technologies, LLC](https://thirdpartyindex.com/vendors/slack.md) | Instant Messaging and Collaboration | United States of America | 2026-09-23 |
| [Stripe, Inc](https://thirdpartyindex.com/vendors/stripe.md) | Payment Service | United States of America | 2026-09-23 |

Read from ([evidence](https://thirdpartyindex.com/evidence/6553)). CSV: https://thirdpartyindex.com/vendors/ona/subprocessors.csv

AI model providers (or a cloud provider's AI model service) among these entries: 3. All vendors that list one: https://thirdpartyindex.com/ai

## Compliance

As its trust center lists them.

- Audited: SOC 2 ([evidence](https://thirdpartyindex.com/evidence/6543))
- Claimed: GDPR ([evidence](https://thirdpartyindex.com/evidence/6543))

## Web Technologies

Ona's homepage made 74 requests to 8 domains, and 3 services controlled by another company. Loaded on 2026-11-10 by a browser that accepted nothing; other visits may load more or less. What a page loads is not a list of who receives customer data.

3 third parties by category: Analytics 3 (Mux, Google Cloud, LinkedIn). Each company that appears controlled by another organization is counted once, under the main category of the technologies detected from it on this homepage or, when none was, the category recorded from the company's own page (marked reviewed) or else the one it is usually detected as on other published homepages (marked as such); unclassified: none of these.

### Third parties (3)

- Mux: 14 requests to mux.com, litix.io; Mux
- Google Cloud: 4 requests to googletagmanager.com, google-analytics.com, googlesyndication.com; Google Analytics, Google Tag Manager (its subprocessor list names it too)
- LinkedIn: 3 requests to linkedin.com, licdn.com; Linkedin Insight Tag

### First party (1)

- Ona: 53 requests to ona.com; Framer Motion, HSTS, Next.js 16.2.6, Next.js App Router, Open Graph, PWA, Priority Hints, React, Turbopack, Vercel, Vercel Analytics, Webpack

2 tracked companies loaded by the homepage are not in Ona's subprocessor list. A website can use a service without it processing customer data.

## Subprocessor of (0)

No tracked vendor lists it.

## Service status

Incidents it reported on its own status page.

- Last 90 days: 1 reported incidents (0 major or critical, 1 minor, 0 with no impact stated)
- Typical time to resolve: 2 h 45 min
- Status page last read: 2026-11-12
- 2026-08-17: GitHub incident is causing elevated error rate for environments (minor)
- 2026-07-25: Intermittent Codex conversations errors (minor)
- 2026-07-23: Elevated error rates affecting some Codex conversations (minor)
- 2026-06-23: Unreliable Anthropic backed conversations (minor)
- 2026-06-18: Degraded performance for agent session starts, VS Code Browser, services, and tasks (minor)
- 2026-05-29: Disupted conversations and environments experience (minor)
- 2026-05-05: Cloud impact to US customers (minor)
- 2026-04-22: Ona Agent is currently not responding. (critical)

## Incidents reported by Ona's subprocessors

Incidents reported in the last 30 days on their own status pages by 5 vendors Ona lists as subprocessors. A subprocessor list names a company, not the service an incident touched.

- 2026-11-11: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Ona lists as a subprocessor, reported Unable to start new Workspace Agent runs (critical)
- 2026-11-11: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Ona lists as a subprocessor, reported Elevated errors affecting logins, sign-ups, and ChatGPT features (minor)
- 2026-11-11: [Pylon](https://thirdpartyindex.com/vendors/pylon#status), which Ona lists as a subprocessor, reported Slack Integration Connection Issues (major)
- 2026-11-10: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Ona lists as a subprocessor, reported Elevated errors on Fable 52 and Mythos 52 (no impact stated)
- 2026-11-10: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Ona lists as a subprocessor, reported Incorrect cost data in Costs API exports (no impact stated)
- 2026-11-09: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Ona lists as a subprocessor, reported Elevated Errors On API (minor)
- 2026-11-09: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Ona lists as a subprocessor, reported Elevated ChatGPT Conversation Errors (minor)
- 2026-11-08: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Ona lists as a subprocessor, reported Elevated errors with image generation (minor)
- 2026-11-08: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Ona lists as a subprocessor, reported Degraded performance for Claude Fable 5.1 (minor)
- 2026-11-06: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Ona lists as a subprocessor, reported Elevated error rates with some U.S. business Mastercards (no impact stated)
- 2026-11-05: [Pylon](https://thirdpartyindex.com/vendors/pylon#status), which Ona lists as a subprocessor, reported Delay in Analytics Data (minor)
- 2026-11-05: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Ona lists as a subprocessor, reported ChatGPT Work and Dots Errors (minor)
- 2026-11-05: [Mixpanel](https://thirdpartyindex.com/vendors/mixpanel#status), which Ona lists as a subprocessor, reported Duplicate charges on a subset of customer accounts (no impact stated)
- 2026-11-04: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Ona lists as a subprocessor, reported Elevated error rates across paid ChatGPT plans (minor)
- 2026-11-04: [Pylon](https://thirdpartyindex.com/vendors/pylon#status), which Ona lists as a subprocessor, reported Inbound Email Delays (minor)
- 2026-11-03: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Ona lists as a subprocessor, reported File upload errors in ChatGPT (minor)
- 2026-11-01: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Ona lists as a subprocessor, reported Elevated Instant Payouts failures (no impact stated)
- 2026-10-30: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Ona lists as a subprocessor, reported Elevated errors with search in Dots, ChatGPT Work, and certain ChatGPT thinking experiences (minor)
- 2026-10-30: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Ona lists as a subprocessor, reported Elevated errors for GPT Image 2 API image edits (minor)
- 2026-10-28: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Ona lists as a subprocessor, reported Elevated Issuing errors from 17:13 - 20:41 UTC (minor)
- 2026-10-28: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Ona lists as a subprocessor, reported Elevated errors affecting the Google Calendar connector (minor)
- 2026-10-28: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Ona lists as a subprocessor, reported Elevated errors affecting the Gmail connector (minor)
- 2026-10-27: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Ona lists as a subprocessor, reported Elevated errors for Claude Sonnet 5.5 (major)
- 2026-10-27: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Ona lists as a subprocessor, reported 6.1 Sol Degraded Model Performance (minor)
- 2026-10-27: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Ona lists as a subprocessor, reported Elevated errors for Claude Sonnet 5.5 (major)
- 2026-10-27: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Ona lists as a subprocessor, reported Elevated error rates for most hosted Code Reviews and Security Reviews on private GitHub repositories (no impact stated)
- 2026-10-26: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Ona lists as a subprocessor, reported Elevated error rates for Ads POST requests (minor)
- 2026-10-25: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Ona lists as a subprocessor, reported Elevated errors for Claude Fable 5.1 (major)
- 2026-10-25: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Ona lists as a subprocessor, reported Elevated errors for Claude Sonnet 5.5 and other models (major)
- 2026-10-24: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Ona lists as a subprocessor, reported Elevated Blik errors (no impact stated)
- 2026-10-24: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Ona lists as a subprocessor, reported Elevated errors for Claude Fable 5 and Claude Fable 5.1 (major)
- 2026-10-24: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Ona lists as a subprocessor, reported Elevated errors for Claude Opus 5.5 (major)
- 2026-10-23: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Ona lists as a subprocessor, reported Elevated errors for Claude Fable 5.1, Sonnet 5.5, and Haiku 5.5 (critical)
- 2026-10-23: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Ona lists as a subprocessor, reported Degraded experience with ChatGPT app connections using CIMD (minor)
- 2026-10-23: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Ona lists as a subprocessor, reported Help Center Chat Support Degraded (no impact stated)
- 2026-10-23: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Ona lists as a subprocessor, reported Delays in customer support responses (no impact stated)
- 2026-10-22: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Ona lists as a subprocessor, reported Elevated Bancontact errors (no impact stated)
- 2026-10-22: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Ona lists as a subprocessor, reported New Ad Accounts failing to provision admins (minor)
- 2026-10-22: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Ona lists as a subprocessor, reported Degraded Performance of Dots on Enterprise (minor)
- 2026-10-22: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Ona lists as a subprocessor, reported Elevated Bancontact errors (no impact stated)
- 2026-10-22: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Ona lists as a subprocessor, reported Elevated errors affecting Connectors (minor)
- 2026-10-22: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Ona lists as a subprocessor, reported Elevated ChatGPT conversation and Responses API errors (minor)
- 2026-10-21: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Ona lists as a subprocessor, reported Authentication errors for some users (major)
- 2026-10-21: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Ona lists as a subprocessor, reported Degraded performance for Claude Fable 5 (minor)
- 2026-10-21: [Mixpanel](https://thirdpartyindex.com/vendors/mixpanel#status), which Ona lists as a subprocessor, reported Degraded Service for Requests to decide.mixpanel.com (no impact stated)
- 2026-10-21: [Mixpanel](https://thirdpartyindex.com/vendors/mixpanel#status), which Ona lists as a subprocessor, reported Degraded Service for Requests to decide.mixpanel.com (no impact stated)
- 2026-10-21: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Ona lists as a subprocessor, reported Elevated error rates for gpt-5.6-luna API requests (minor)
- 2026-10-21: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Ona lists as a subprocessor, reported Elevated FedRAMP API error rates for Astra and Sol (minor)
- 2026-10-21: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Ona lists as a subprocessor, reported Degraded performance in ChatGPT, Codex, and APIs (minor)
- 2026-10-20: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Ona lists as a subprocessor, reported Spike in cancellations and expired errors with PayByBank payments (no impact stated)
- 2026-10-20: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Ona lists as a subprocessor, reported Elevated Revolut Pay errors (no impact stated)
- 2026-10-19: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Ona lists as a subprocessor, reported File Download errors (minor)
- 2026-10-15: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Ona lists as a subprocessor, reported Elevated declines on Mastercard (no impact stated)
- 2026-10-15: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Ona lists as a subprocessor, reported Elevated declines on Visa (no impact stated)
- 2026-10-15: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Ona lists as a subprocessor, reported Widespread feature degradation (major)
- 2026-10-15: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Ona lists as a subprocessor, reported Elevated Amazon Pay errors (no impact stated)
- 2026-10-14: [Pylon](https://thirdpartyindex.com/vendors/pylon#status), which Ona lists as a subprocessor, reported Platform loading issues (no impact stated)
- 2026-10-14: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Ona lists as a subprocessor, reported Delayed Costs data in the Compliance API (minor)
- 2026-10-14: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Ona lists as a subprocessor, reported Limited availability on gpt-image-2.5-flare and gpt-image-2.5-sunburst (minor)
- 2026-10-14: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Ona lists as a subprocessor, reported Degraded performance in Codex and ChatGPT Work (minor)

The subprocessor list as we read it on any date: https://thirdpartyindex.com/labs/time-machine/ona

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api
