# Onit

Onit (onit.com): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/onit
- Documents last verified: 2026-10-09
- Transparency rating: 84/100 (how much it publishes, not how secure it is): Subprocessor list 30/30; Processing locations 8/8; Purposes 7/7; Data processing addendum 12/12; Trust center 8/8; Privacy policy 6/6; security.txt 0/6 (not found); Security page 5/5; Status page 0/5 (not found); Vulnerability disclosure 0/5 (not found); Pages still reachable 8/8
- Supply chain: relies on 31 tracked vendors directly, 201 within two hops, 476 within three; 0 tracked vendors rely on it directly, 0 within two hops, 0 within three
- Cite as: Onit, Third Party Index, https://thirdpartyindex.com/vendors/onit (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Trust center | https://trust.onit.com/ | 2026-10-09 | 2026-10-09 |
| Subprocessor list | https://www.onit.com/sub-processors/ | 2026-10-09 | 2026-10-09 |
| Data processing addendum | https://www.onit.com/data-processing-addendum-oct-2024/ | 2026-10-09 | 2026-10-09 |
| Privacy policy | https://www.onit.com/privacy-cookies/ | 2026-10-09 | 2026-10-09 |
| Terms | http://www.onit.com/subscription-terms/ | 2026-10-09 | 2026-10-09 |
| Security page | https://www.onit.com/security/ | 2026-10-09 | 2026-10-09 |

## Subprocessors (47)

As its own list states them.

| Subprocessor | Purpose | Location | Listed since |
|---|---|---|---|
| [Adobe](https://thirdpartyindex.com/vendors/adobe.md) | .pdf Converter via Adobe PDF API | United States & Worldwide | 2026-10-09 |
| [Affinda](https://thirdpartyindex.com/vendors/affinda.md) | PDF converter for BillingPoint, CounselGo and Counsel Exchange Users; PDF converter for BillingPoint, CounselGo, and Counsel Exchange Users | Australia | 2026-10-09 |
| [Amazon Web Services (AWS)](https://thirdpartyindex.com/vendors/amazon-web-services.md) | AWS’s TextExtract – processes pdfs; Cloud Provider; Cloud provider | BillingPoint and Counsel Exchange are hosted in the United States; Customer can choose hosting location: European Union or Canada or United States; Customer can choose hosting location: United Kingdom or Germany (with back-ups in Ireland); United States; United States or Germany (with back-ups in Ireland); United States or Ireland (with back-ups in Germany) | 2026-10-09 |
| [Anthropic, PBC](https://thirdpartyindex.com/vendors/anthropic.md) (AI model provider: Anthropic) | Generative AI Tool used in ReviewAI and Catalyst for Contracts | United States & various | 2026-10-09 |
| Anthropic & CoWork | Productivity Tool | Worldwide | 2026-10-09 |
| [Atlassian (Jira and Confluence)](https://thirdpartyindex.com/vendors/atlassian.md) | Productivity Tool / Ticketing Software | United States | 2026-10-09 |
| [Auth0 (purchased by Okta)](https://thirdpartyindex.com/vendors/okta.md) | SSO Vendor | United States | 2026-10-09 |
| AXDRAFT, LLC | Affiliate of Onit – various services, such as implementation,; integration, data migration, and support services. | Ukraine | 2026-10-09 |
| BusyLamp GmbH | Wholly owned subsidiary of Onit | Germany | 2026-10-09 |
| ChatGPT (OpenAI) | Productivity Tool | United States | 2026-10-09 |
| [Cisco](https://thirdpartyindex.com/vendors/cisco.md) | If hosted on Rackspace, VPN Provider | United States | 2026-10-09 |
| [Cloudflare](https://thirdpartyindex.com/vendors/cloudflare.md) | DNS provider; If hosted on AWS, DNS Provider | United States | 2026-10-09 |
| Consortra | Translation Services | United States | 2026-10-09 |
| [CrowdStrike](https://thirdpartyindex.com/vendors/crowdstrike.md) | Hosting Managed Services and Security Services; If hosted on Rackspace, DNS Provider | United States | 2026-10-09 |
| [DocuSign](https://thirdpartyindex.com/vendors/docusign.md) | Document signing API | United States | 2026-10-09 |
| Fellow | Meeting management and note taking app | United States | 2026-10-09 |
| [Google Analytics](https://thirdpartyindex.com/vendors/google-cloud.md) | Analytics | United States | 2026-10-09 |
| [Google Cloud (including Gemini)](https://thirdpartyindex.com/vendors/google-cloud.md) (AI model provider: Google Vertex AI / Gemini) | API to AI tool that generates natural language or code for Spend Agent feature and other Onit AI Agents and features | United States | 2026-10-09 |
| [Google Cloud Platform (GCP)](https://thirdpartyindex.com/vendors/google-cloud.md) | Primary Infrastructure Provider, Including Google; Workspace (Formerly GSuite) | European Union | 2026-10-09 |
| Google Suites | Email Provider and Productivity Tools | United States | 2026-10-09 |
| [Hetzner](https://thirdpartyindex.com/vendors/hetzner-online.md) | Germany back-up servers | Germany | 2026-10-09 |
| [Hubspot](https://thirdpartyindex.com/vendors/hubspot.md) | CRM Software and Marketing Tools; SDCRM Software and Marketing Tools | United States | 2026-10-09 |
| [Imperva](https://thirdpartyindex.com/vendors/imperva.md) | WAF | Germany | 2026-10-09 |
| [Mailgun](https://thirdpartyindex.com/vendors/mailgun.md) | Email Automation Service | United States | 2026-10-09 |
| [Maven AGI Inc.](https://thirdpartyindex.com/vendors/maven-agi.md) | AI Chatbot for support questions | United States | 2026-10-09 |
| Microsoft Office365 | Email Provider and Productivity Software | United States | 2026-10-09 |
| [Mimecast](https://thirdpartyindex.com/vendors/mimecast.md) | Email Archiving and Phishing Mitigation Tool | United States | 2026-10-09 |
| [Monday.com](https://thirdpartyindex.com/vendors/monday-com.md) | Productivity Tool | United States | 2026-10-09 |
| Morae | Consulting and Implementation Services | United States | 2026-10-09 |
| [OpenAI](https://thirdpartyindex.com/vendors/openai.md) (AI model provider: OpenAI) | API to AI tool that generates natural language or code; Converts invoices into LEDES files | United States; United States & Worldwide | 2026-10-09 |
| Opswat metadefender | Scan files related to functionality to issue an RFP and/or RPA | United States | 2026-10-09 |
| Outreach.ai | Customer sales tool | United States | 2026-10-09 |
| [Pendo](https://thirdpartyindex.com/vendors/pendo.md) | Logging and Analytics | United States | 2026-10-09 |
| [PlanHat](https://thirdpartyindex.com/vendors/planhat.md) | Customer success tool | United States | 2026-10-09 |
| PlusServer | Germany production environment | Germany | 2026-10-09 |
| [Rollbar](https://thirdpartyindex.com/vendors/rollbar.md) | Error Logging System | United States | 2026-10-09 |
| [Salesforce.com](https://thirdpartyindex.com/vendors/salesforce.md) | CRM Software & Ticketing Software | United States | 2026-10-09 |
| [SendGrid](https://thirdpartyindex.com/vendors/sendgrid.md) | Email Automation Service | United States | 2026-10-09 |
| [Sentry.io](https://thirdpartyindex.com/vendors/sentry.md) | Exception Handling / Reporting | United States | 2026-10-09 |
| [Sharefile](https://thirdpartyindex.com/vendors/sharefile.md) | sFTP site for exchanging files | United States | 2026-10-09 |
| [SmartSheet](https://thirdpartyindex.com/vendors/smartsheet.md) | Productivity Tool | United States | 2026-10-09 |
| SurePoint Technologies, Inc. | CounselMatch | United States | 2026-10-09 |
| Teledirect | Call Center Provider | United States | 2026-10-09 |
| [Twilio (Segment)](https://thirdpartyindex.com/vendors/twilio.md) | Customer Data Platform; Processes Phone Numbers, SMS API, Email API; Two factor authentication and sends text messages | United States | 2026-10-09 |
| [UserWay Inc.](https://thirdpartyindex.com/vendors/userway.md) | Translates web pages to conform to the Web Content Accessibility Guidelines (WCAG) international standard | United States | 2026-10-09 |
| [Vanta](https://thirdpartyindex.com/vendors/vanta.md) | Hosts and Chat Tool. SOC 2 Compliance and Automation Tool; Infrastructure, Gsuite, Version Control, Endpoints,; Stores Metadata and Configuration Information for | United States | 2026-10-09 |
| [Workato](https://thirdpartyindex.com/vendors/workato.md) | Integration Platform | United States | 2026-10-09 |

Read from ([evidence](https://thirdpartyindex.com/evidence/69334)). CSV: https://thirdpartyindex.com/vendors/onit/subprocessors.csv

AI model providers (or a cloud provider's AI model service) among these entries: 3. All vendors that list one: https://thirdpartyindex.com/ai

### Its own affiliates (4)

- Onit Canada ULC (Canada)
- Onit Europe Ltd. (United Kingdom)
- Onit India Pvt. Limited (India)
- Onit New Zealand Limited (New Zealand)

## Compliance

As its trust center lists them.

- Audited: SOC 1 Type II, SOC 2 Type II, ISO/IEC 27001, TISAX ([evidence](https://thirdpartyindex.com/evidence/69338))
- Claimed: HIPAA, GDPR ([evidence](https://thirdpartyindex.com/evidence/69338))

## Subprocessor of (0)

No tracked vendor lists it.

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api