Ory
Certifications and attestations: SOC 2 Type IIISO/IEC 27001
Says it complies with: GDPR, Data Privacy Framework
As listed on Ory's trust center (evidence) ; reports themselves are usually shared on request.
Transparency
Breakdown
| Subprocessor list | 30 / 30 | |
| Processing locations | 8 / 8 | |
| Purposes | 7 / 7 | |
| Data processing addendum | 12 / 12 | |
| Trust center | 8 / 8 | |
| Privacy policy | 6 / 6 | |
| security.txt | 6 / 6 | |
| Security page | 5 / 5 | |
| Status page | 5 / 5 | |
| Vulnerability disclosure | not found | 0 / 5 |
| Pages still reachable | 8 / 8 | |
| Total | 95 / 100 |
Only documents we can retrieve count: a page behind a login or a broken link scores nothing.
Badge
For Ory's own site; it updates with the rating.
<a href="https://thirdpartyindex.com/vendors/ory"><img src="https://thirdpartyindex.com/badge/ory.svg" alt="Ory transparency rating on Third Party Index" height="20"></a>[](https://thirdpartyindex.com/vendors/ory)Documents
| Document | Verified | Changed | Evidence |
|---|---|---|---|
| Trust center vanta | snapshot | ||
| Subprocessor list vanta | snapshot | ||
| Data processing addendum | snapshot | ||
| Privacy policy | snapshot | ||
| Terms | snapshot | ||
| Security page | snapshot | ||
| security.txt | snapshot | ||
| Status page | snapshot |
Subprocessors
| Name | Purpose | Location | Listed since |
|---|---|---|---|
| Cloudflare | DDOs Protection, Managed WAF, Rate Limiting, DNS Management, TLS & Custom Hostname Certs and CDN; Integrated security and performance for websites, apps, and SaaS services. Request a demo. Designed to make everything you connect to the Internet secure, private, fast, & reliable. | Global | |
| Cockroach Labs | CockroachDB Dedicated provides fully-managed, single-tenant CockroachDB clusters with no shared resources. CockroachDB Dedicated supports multi-region clusters on GCP.; Multi-region Database solution. | europe-west3, us-east4, us-west2, asia-northeast1 | |
| GitHub | Source Code and Issue Management Solution (OpenSource and Ory Cloud), discussion forum.; Version control | USA | |
| Google Cloud Platform | GCP is a public cloud vendor that offers a suite of computing services to do everything from data management to delivering web and video over the web to AI and machine learning tools.; IaaS infrastructure: Network, GKE Clusters, Compute, Storage, Cache | europe-west3, europe-west1, us-east4, us-west2, asia-northeast1 | |
| Google Workspace | Cloud provider; Office products (G Suite), E-Mail (GMail), Google IAM and other collaboration tools. | USA | |
| Hubspot | CRM Solution | EU | |
| Mailgun | Mail Service; SaaS Solution sending emails. | europe-west1, europe-west3 | |
| Posthog | Data analytics; Product Analytics | EU | |
| Sentry (Functional Software, Inc.) | Application Performance Monitoring; Cloud monitoring | USA | |
| Slack | Dedicated Support Channel and Community Workspace; Messaging platform used internally by Ory employees and externally to communicate with our customers and the community. | US | |
| Stripe | Payment Handling for Ory Network | US | |
| Zendesk | Ticket Management for Customers; Ticketing Support | US |
Listed as a subprocessor by (2)
Purposes as each company states them.
Changes
None since tracking began.