# OpenSanctions

OpenSanctions declares [11 subprocessors](https://thirdpartyindex.com/vendors/opensanctions#subprocessors) in [its subprocessor list](https://trust.opensanctions.org/subprocessors), which we last checked on 2026-10-26 ([evidence](https://thirdpartyindex.com/evidence/111066)). They include [Google Cloud](https://thirdpartyindex.com/vendors/google-cloud), [Stripe](https://thirdpartyindex.com/vendors/stripe) and [Anthropic](https://thirdpartyindex.com/vendors/anthropic). No published changes since we first read it on 2026-10-17. [1 tracked vendor](https://thirdpartyindex.com/vendors/opensanctions#used-by), [Daytona](https://thirdpartyindex.com/vendors/daytona), names OpenSanctions as a subprocessor.

OpenSanctions (opensanctions.org): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/opensanctions
- Documents last verified: 2026-10-26
- Transparency rating: 89/100 (how much it publishes, not how secure it is): Subprocessor list 30/30; Processing locations 8/8; Purposes 7/7; Data processing addendum 12/12; Trust center 8/8; Privacy policy 6/6; security.txt 0/6 (not found); Security page 5/5; Status page 5/5; Vulnerability disclosure 0/5 (not found); Pages still reachable 8/8
- Supply chain: relies on 9 tracked vendors directly, 104 within two hops, 347 within three; 1 tracked vendors rely on it directly, 11 within two hops, 32 within three
- Cite as: OpenSanctions, Third Party Index, https://thirdpartyindex.com/vendors/opensanctions (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Trust center | https://trust.opensanctions.org/ | 2026-10-26 | 2026-10-26 |
| Subprocessor list | https://trust.opensanctions.org/subprocessors | 2026-10-26 | 2026-10-17 |
| Data processing addendum | https://www.opensanctions.org/docs/terms/dpa/ | 2026-10-26 | 2026-10-22 |
| Privacy policy | https://www.opensanctions.org/docs/privacy/ | 2026-10-26 | 2026-10-22 |
| Terms | https://www.opensanctions.org/docs/terms/ | 2026-10-26 | 2026-10-22 |
| Security page | https://www.opensanctions.org/docs/security/ | 2026-10-26 | 2026-10-22 |
| Status page | https://status.opensanctions.org/ | 2026-10-26 | 2026-10-22 |

## Subprocessors (11)

As its own list states them.

| Subprocessor | Purpose | Location | Listed since |
|---|---|---|---|
| [Anthropic](https://thirdpartyindex.com/vendors/anthropic.md) (AI model provider: Anthropic) | Engineering; LLM API (Claude) for support discovery, customer analytics, commercial outreach support | USA | 2026-10-17 |
| [Better Stack, Inc.](https://thirdpartyindex.com/vendors/better-stack.md) | Monitoring; Status-page subscriptions, uptime monitoring, on-call rotation | EU | 2026-10-17 |
| [Datev eG](https://thirdpartyindex.com/vendors/datev.md) | Accounting according to German law (GoBD); Accounting, customer-base records, financial reporting | Germany | 2026-10-17 |
| [GitHub, Inc.](https://thirdpartyindex.com/vendors/github.md) | Source-code hosting, organisation identity, security advisories, Dependabot; Version control | USA + global | 2026-10-17 |
| [Google Analytics](https://thirdpartyindex.com/vendors/google-cloud.md) | Analytics; Website analytics (GA4 with IP-anonymisation) | USA | 2026-10-17 |
| [Google Cloud Platform](https://thirdpartyindex.com/vendors/google-cloud.md) (AI model provider: Google Vertex AI / Gemini) | Cloud provider; Compute (Cloud Run, GKE), storage (GCS, Cloud SQL), identity (IAM, Workload Identity), audit logging, Security Command Center, Vertex AI (Gemini) | europe-west3 (Frankfurt) | 2026-10-17 |
| [HubSpot Germany GmbH](https://thirdpartyindex.com/vendors/hubspot.md) | CRM, ticketing, marketing automation, support inbox; Marketing | EU data centres (per HubSpot's EU residency tier) | 2026-10-17 |
| Ory Networks, Inc. | Customer authentication and login for the hosted API | Single sign-on | 2026-10-17 |
| [Slack Technologies, LLC](https://thirdpartyindex.com/vendors/slack.md) | Internal team communication; customer-paired channels for collaboration and support | Collaboration | 2026-10-17 |
| [Stripe, Inc.](https://thirdpartyindex.com/vendors/stripe.md) | Billing, payment processing, subscription management; Finance and payments | EU + Stripe global infrastructure | 2026-10-17 |
| [Vanta](https://thirdpartyindex.com/vendors/vanta.md) | ISMS management, control evidence, vendor risk tracking, compliance reporting; Security | USA | 2026-10-17 |

Read from ([evidence](https://thirdpartyindex.com/evidence/111066)). CSV: https://thirdpartyindex.com/vendors/opensanctions/subprocessors.csv

AI model providers (or a cloud provider's AI model service) among these entries: 2. All vendors that list one: https://thirdpartyindex.com/ai

## Compliance

As its trust center lists them.

- Audited: ISO/IEC 27001 ([evidence](https://thirdpartyindex.com/evidence/111055))
- Claimed: GDPR ([evidence](https://thirdpartyindex.com/evidence/111055))

## Web Technologies

OpenSanctions's homepage made 54 requests to 1 domain. Loaded on 2026-10-17 by a browser that accepted nothing; other visits may load more or less. What a page loads is not a list of who receives customer data.

### First party (1)

- OpenSanctions: 54 requests to opensanctions.org; Google Cloud, Google Cloud CDN, Google Cloud Load Balancing, HSTS, HTTP/3, Next.js 16.4.0, Next.js App Router, Open Graph, Priority Hints, Prism, RSS, React, Turbopack, Webpack

## Subprocessor of (1)

Tracked vendors whose own subprocessor lists name it, and what they say they use it for.

- [Daytona](https://thirdpartyindex.com/vendors/daytona.md): Sanctions screening

## Service status

Incidents it reported on its own status page.

- Last 9 days: 0 reported incidents (0 major or critical, 0 minor, 0 with no impact stated)
- Status page last read: 2026-10-26
- No incidents reported since Oct 17, 2026

## Incidents reported by OpenSanctions's subprocessors

Incidents reported in the last 30 days on their own status pages by 6 vendors OpenSanctions lists as subprocessors. A subprocessor list names a company, not the service an incident touched.

- 2026-10-26: [GitHub](https://thirdpartyindex.com/vendors/github#status), which OpenSanctions lists as a subprocessor, reported Incident with Actions, Issues, API Requests and Pull Requests (minor)
- 2026-10-25: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which OpenSanctions lists as a subprocessor, reported Elevated errors for Claude Fable 5.1 (major)
- 2026-10-25: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which OpenSanctions lists as a subprocessor, reported Elevated errors for Claude Sonnet 5.5 and other models (major)
- 2026-10-24: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which OpenSanctions lists as a subprocessor, reported Elevated Blik errors (no impact stated)
- 2026-10-24: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which OpenSanctions lists as a subprocessor, reported Elevated errors for Claude Fable 5 and Claude Fable 5.1 (major)
- 2026-10-24: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which OpenSanctions lists as a subprocessor, reported Elevated errors for Claude Opus 5.5 (major)
- 2026-10-23: [GitHub](https://thirdpartyindex.com/vendors/github#status), which OpenSanctions lists as a subprocessor, reported Grok 4.6 and Grok 4.7 Service Issues (minor)
- 2026-10-23: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which OpenSanctions lists as a subprocessor, reported Elevated errors for Claude Fable 5.1, Sonnet 5.5, and Haiku 5.5 (critical)
- 2026-10-23: [HubSpot](https://thirdpartyindex.com/vendors/hubspot#status), which OpenSanctions lists as a subprocessor, reported Some HubSpot tools may be unavailable for some users (no impact stated)
- 2026-10-23: [GitHub](https://thirdpartyindex.com/vendors/github#status), which OpenSanctions lists as a subprocessor, reported Disruption with Dependabot Alerts (minor)
- 2026-10-23: [GitHub](https://thirdpartyindex.com/vendors/github#status), which OpenSanctions lists as a subprocessor, reported Delayed Actions status check results (minor)
- 2026-10-22: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which OpenSanctions lists as a subprocessor, reported Elevated Bancontact errors (no impact stated)
- 2026-10-22: [GitHub](https://thirdpartyindex.com/vendors/github#status), which OpenSanctions lists as a subprocessor, reported Project updates delayed (minor)
- 2026-10-22: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which OpenSanctions lists as a subprocessor, reported Elevated Bancontact errors (no impact stated)
- 2026-10-22: [GitHub](https://thirdpartyindex.com/vendors/github#status), which OpenSanctions lists as a subprocessor, reported Incident with Actions Results (minor)
- 2026-10-22: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which OpenSanctions lists as a subprocessor, reported Elevated errors affecting Connectors (minor)
- 2026-10-22: [HubSpot](https://thirdpartyindex.com/vendors/hubspot#status), which OpenSanctions lists as a subprocessor, reported Update on PHP security vulnerability (no impact stated)
- 2026-10-21: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which OpenSanctions lists as a subprocessor, reported Degraded performance for Claude Fable 5 (minor)
- 2026-10-21: [Better Stack](https://thirdpartyindex.com/vendors/better-stack#status), which OpenSanctions lists as a subprocessor, reported Incorrectly sent out downtime notifications to single-region monitors due to intermittent Internet backbone issue (minor)
- 2026-10-21: [Vanta](https://thirdpartyindex.com/vendors/vanta#status), which OpenSanctions lists as a subprocessor, reported Stale data for CloudflareDomainInventory and CloudflareZoneRule (major)
- 2026-10-21: [GitHub](https://thirdpartyindex.com/vendors/github#status), which OpenSanctions lists as a subprocessor, reported Delays for Pull Requests and Webhook deliveries (critical)
- 2026-10-20: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which OpenSanctions lists as a subprocessor, reported Spike in cancellations and expired errors with PayByBank payments (no impact stated)
- 2026-10-20: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which OpenSanctions lists as a subprocessor, reported Elevated Revolut Pay errors (no impact stated)
- 2026-10-19: [GitHub](https://thirdpartyindex.com/vendors/github#status), which OpenSanctions lists as a subprocessor, reported Degraded availability for GitHub Actions, GitHub Pages and Webhooks (critical)
- 2026-10-15: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which OpenSanctions lists as a subprocessor, reported Elevated declines on Mastercard (no impact stated)
- 2026-10-15: [GitHub](https://thirdpartyindex.com/vendors/github#status), which OpenSanctions lists as a subprocessor, reported CCA Automations are delayed when starting an Automation (minor)
- 2026-10-15: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which OpenSanctions lists as a subprocessor, reported Elevated declines on Visa (no impact stated)
- 2026-10-15: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which OpenSanctions lists as a subprocessor, reported Elevated Amazon Pay errors (no impact stated)
- 2026-10-13: [GitHub](https://thirdpartyindex.com/vendors/github#status), which OpenSanctions lists as a subprocessor, reported \[Retroactive\] Actions workflow run logs delayed (minor)
- 2026-10-12: [GitHub](https://thirdpartyindex.com/vendors/github#status), which OpenSanctions lists as a subprocessor, reported Incident with Actions, Pull Requests and Issues (minor)
- 2026-10-08: [HubSpot](https://thirdpartyindex.com/vendors/hubspot#status), which OpenSanctions lists as a subprocessor, reported Marketing email statistics are delayed (no impact stated)
- 2026-10-07: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which OpenSanctions lists as a subprocessor, reported Issue with spend limits (no impact stated)
- 2026-10-07: [GitHub](https://thirdpartyindex.com/vendors/github#status), which OpenSanctions lists as a subprocessor, reported Incident with Git Operations, Issues, Actions and Pull Requests (critical)
- 2026-10-07: [GitHub](https://thirdpartyindex.com/vendors/github#status), which OpenSanctions lists as a subprocessor, reported Incident with Git Operations, Pull Requests and Actions (critical)
- 2026-10-07: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which OpenSanctions lists as a subprocessor, reported Elevated errors on platform.claude.com (major)
- 2026-10-07: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which OpenSanctions lists as a subprocessor, reported Elevated errors loading usage data on platform.claude.com (major)
- 2026-10-06: [GitHub](https://thirdpartyindex.com/vendors/github#status), which OpenSanctions lists as a subprocessor, reported Several services are degraded (critical)
- 2026-10-06: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which OpenSanctions lists as a subprocessor, reported Elevated errors for Claude Opus 5.5 (major)
- 2026-10-06: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which OpenSanctions lists as a subprocessor, reported Elevated Swish errors (no impact stated)
- 2026-10-05: [GitHub](https://thirdpartyindex.com/vendors/github#status), which OpenSanctions lists as a subprocessor, reported Disruption with some GitHub services (major)
- 2026-10-05: [GitHub](https://thirdpartyindex.com/vendors/github#status), which OpenSanctions lists as a subprocessor, reported Incident with Actions (critical)
- 2026-10-05: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which OpenSanctions lists as a subprocessor, reported Elevated errors for Claude Mythos 5.1 and Claude Fable 5.1 (major)
- 2026-10-02: [HubSpot](https://thirdpartyindex.com/vendors/hubspot#status), which OpenSanctions lists as a subprocessor, reported HubSpot is experiencing issues (no impact stated)
- 2026-10-01: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which OpenSanctions lists as a subprocessor, reported Delayed credits on the Claude Platform (minor)
- 2026-10-01: [GitHub](https://thirdpartyindex.com/vendors/github#status), which OpenSanctions lists as a subprocessor, reported Actions Job Delays (minor)
- 2026-10-01: [GitHub](https://thirdpartyindex.com/vendors/github#status), which OpenSanctions lists as a subprocessor, reported Elevated request latency (minor)
- 2026-10-01: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which OpenSanctions lists as a subprocessor, reported Elevated API errors (no impact stated)
- 2026-10-01: [GitHub](https://thirdpartyindex.com/vendors/github#status), which OpenSanctions lists as a subprocessor, reported \[Retroactive\] Actions workflow run failures after deployment gate approvals (minor)
- 2026-09-30: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which OpenSanctions lists as a subprocessor, reported Visa authorization errors (no impact stated)
- 2026-09-29: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which OpenSanctions lists as a subprocessor, reported Elevated errors on claude.ai, Claude Code, Claude Cowork and the Claude API (major)
- 2026-09-28: [GitHub](https://thirdpartyindex.com/vendors/github#status), which OpenSanctions lists as a subprocessor, reported Copilot Code Review is unable to complete reviews (critical)
- 2026-09-27: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which OpenSanctions lists as a subprocessor, reported Elevated API Errors (major)

The subprocessor list as we read it on any date: https://thirdpartyindex.com/labs/time-machine/opensanctions

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api