Ory

ory.com

Ory declares 11 subprocessors in its subprocessor list, which we last checked on Nov 11, 2026 (evidence). They include Google Cloud, Stripe and Cloudflare. No published changes since we first read it on Sep 22, 2026. 3 tracked vendors name Ory as a subprocessor, including Mistral, 1mind and Lattice.

Subprocessors CSV · Atom DORA draft CSV what's this? · 

11 third parties.

NamePurposeLocationListed since
Cloudflare
DDOs Protection, Managed WAF, Rate Limiting, DNS Management, TLS & Custom Hostname Certs and CDN; Integrated security and performance for websites, apps, and SaaS services. Request a demo. Designed to make everything you connect to the Internet secure, private, fast, & reliable.
Global (see DPA)
Cockroach Labs
CockroachDB Dedicated provides fully-managed, single-tenant CockroachDB clusters with no shared resources. CockroachDB Dedicated supports multi-region clusters on GCP.; Multi-region Database solution.
USA, EU, Japan
GitHub Customer Support & Version control; Source Code and Issue Management Solution (OpenSource and Ory Cloud), discussion forum.USA
Google Cloud Platform
GCP is a public cloud vendor that offers a suite of computing services to do everything from data management to delivering web and video over the web to AI and machine learning tools.; IaaS infrastructure: Network, GKE Clusters, Compute, Storage, Cache
USA, EU, Japan
Hubspot CRM SolutionUSA
Mailgun Mail Service; SaaS Solution sending emails.Belgium, Germany
Posthog Data analytics; Product AnalyticsEU
Pylon Labs, Inc. Customer support and ticketing (from 01.10.2026); Customer support and ticketing platform.USA
Slack Dedicated Support Channel and Community Workspace; Messaging platform used internally by Ory employees and externally to communicate with our customers and the community.USA
Stripe Payment Handling for Ory NetworkUSA
Zendesk Customer support and ticketing (until 31.10.2026); Ticket Management for Customers (until 31.10.2026)USA

Web TechnologiesCSV · Atom

Ory's homepage made 180 requests to 25 domains, 10 services controlled by another company, and 1 domain not identified.

Analytics (5): Crazy Egg, Reo.Dev, ZoomInfo, Cloudflare; usually detected as Analytics: G2.comAdvertising (3): Google Cloud, Microsoft, Reddit, Inc.Marketing automation (1): HubSpotOther (1): usually detected as CMS: Sanity

10 third parties by category: Analytics 5Advertising 3Marketing automation 1Other 1

Third parties 10 · 119 requests
Sanity sanity.io 23% of the page's requests 41
Google Cloudsubprocessor DoubleClick Floodlight Google Analytics Google Tag Manager 17% of the page's requests 31
HubSpotsubprocessor HubSpot 12% of the page's requests 21
Microsoft Microsoft Advertising 5% of the page's requests 9
Crazy Egg Crazy Egg 2% of the page's requests 4
G2.com g2.com 2% of the page's requests 3
Reddit, Inc. Reddit Ads 2% of the page's requests 3
Reo.Dev Reo.Dev 2% of the page's requests 3
ZoomInfo Zoominfo 2% of the page's requests 3
Cloudflaresubprocessor Cloudflare Browser Insights <1% of the page's requests 1
Unknown 1 · 9 requests

brilliantlocco.com

First party 1 · 52 requests
Ory Cloudflare Cloudflare Zaraz HSTS HubSpot Chat Microsoft Clarity Next.js 15.5.28 Next.js App Router Open Graph Priority Hints Radix UI React Sanity Sanity.io Vercel Vercel Speed Insights 1.3.1 Webpack 29% of the page's requests 52

4 tracked companies loaded by the homepage are not in Ory's subprocessor list. A website can use a service without it processing customer data.

Subprocessor of (3)CSV · Atom

3 companies
  • 1mind 1mind.com Ory is data importer’s identity provider; data importer would transmit data exporter’s employee emails for administrators for the sole purpose of user authentication.
  • Lattice lattice.com * OPTIONAL - Authentication management (specifically for customers using Lattice MCP only)
  • Mistral mistral.ai Products: All; User Authentication

ComplianceCSV · Atom

Certified
Says it complies with

Certifications as Ory's trust center lists them; reports are usually shared on request (evidence)

Service statusCSV · Atom

Aug 15: no incident reportedAug 16: no incident reportedAug 17: no incident reportedAug 18: no incident reportedAug 19: no incident reportedAug 20: no incident reportedAug 21: no incident reportedAug 22: no incident reportedAug 23: no incident reportedAug 24: no incident reportedAug 25: no incident reportedAug 26: no incident reportedAug 27: no incident reportedAug 28: no incident reportedAug 29: no incident reportedAug 30: no incident reportedAug 31: no incident reportedSep 1: no incident reportedSep 2: 1 incident (1 no impact stated)Sep 3: no incident reportedSep 4: no incident reportedSep 5: no incident reportedSep 6: no incident reportedSep 7: no incident reportedSep 8: no incident reportedSep 9: no incident reportedSep 10: no incident reportedSep 11: no incident reportedSep 12: no incident reportedSep 13: no incident reportedSep 14: no incident reportedSep 15: no incident reportedSep 16: no incident reportedSep 17: no incident reportedSep 18: no incident reportedSep 19: no incident reportedSep 20: no incident reportedSep 21: no incident reportedSep 22: no incident reportedSep 23: no incident reportedSep 24: no incident reportedSep 25: no incident reportedSep 26: no incident reportedSep 27: no incident reportedSep 28: no incident reportedSep 29: no incident reportedSep 30: no incident reportedOct 1: 1 incident (1 minor)Oct 2: no incident reportedOct 3: no incident reportedOct 4: no incident reportedOct 5: no incident reportedOct 6: no incident reportedOct 7: 1 incident (1 minor)Oct 8: no incident reportedOct 9: no incident reportedOct 10: no incident reportedOct 11: no incident reportedOct 12: no incident reportedOct 13: no incident reportedOct 14: no incident reportedOct 15: no incident reportedOct 16: no incident reportedOct 17: no incident reportedOct 18: no incident reportedOct 19: no incident reportedOct 20: no incident reportedOct 21: no incident reportedOct 22: no incident reportedOct 23: no incident reportedOct 24: no incident reportedOct 25: no incident reportedOct 26: no incident reportedOct 27: no incident reportedOct 28: no incident reportedOct 29: no incident reportedOct 30: no incident reportedOct 31: no incident reportedNov 1: no incident reportedNov 2: no incident reportedNov 3: no incident reportedNov 4: no incident reportedNov 5: no incident reportedNov 6: no incident reportedNov 7: no incident reportedNov 8: no incident reportedNov 9: no incident reportedNov 10: no incident reportedNov 11: no incident reportedNov 12: no incident reported

90 days agotoday

  • 3 incidents in 90 days
  • 0 major or critical
  • 4 h typical time to resolve
BeganIncidentImpactLasted
OIDC login failures affecting some identitiesminor4 h
Increased latency and timeouts for Ory Identities APIminor16 min
Maintenance for Console Search APIno impact statedongoing
Webhook delivery is experiencing issuesminor2 h 5 min
Investigating SAML login issuesminor40 min
Investigating elevated issuesmajor34 min
Monitoring potential database issuesno impact stated23 min
Elevated response times for Ory Hydra in Europeminor10 min

Incidents per month

0 3 6 Dec 2025: 0 incidents Jan 2026: 1 incident (1 no impact stated) · typical time to resolve 2 h 30 min Feb 2026: 1 incident (1 minor) · typical time to resolve 16 h 32 min Mar 2026: 0 incidents Apr 2026: 0 incidents May 2026: 1 incident (1 minor) · typical time to resolve 1 h 9 min Jun 2026: 4 incidents (3 minor, 1 no impact stated) · typical time to resolve 28 h 56 min Jul 2026: 6 incidents (1 major, 4 minor, 1 no impact stated) · typical time to resolve 40 min Aug 2026: 0 incidents Sep 2026: 1 incident (1 no impact stated) Oct 2026: 2 incidents (2 minor) · typical time to resolve 4 h Nov 2026: 0 incidents Dec 2025Jan 2026Feb Mar Apr May Jun Jul Aug Sep Oct Nov

critical major minor no impact stated

Components affected

ComponentIncidents
Login & Identity APIs1
OAuth2 & OIDC APIs1

As Ory's status page reports its own incidents (scheduled maintenance left out), read every few hours since (evidence)

Incidents reported by Ory's subprocessorsCSV · Atom

52 reported incidents in the last 30 days, by 5 of the vendors Ory lists as subprocessors.

A subprocessor list names a company, not the service an incident touched. This does not show that Ory was involved.

DateCompanyIncidentImpactLasted
GitHubImpact across multiple GitHub products including Actions, Pages, and Copilot products. critical33 min
GitHubIncident with Webhooks minor4 min
PylonSlack Integration Connection Issues major3 h 13 min
HubSpotSome HubSpot tools may be unavailable for some users no impact stated51 min
GitHubIncident with Git Operations and Pull Requests critical1 h 44 min
GitHubDegraded availability for GPT-5.3 Codex and GPT-5.6 models in Copilot major49 min
GitHubIncident with Actions and Checks API critical46 min
GitHubIncident with Webhooks and Actions major1 h 50 min
GitHubIncreased timeouts due to surge in anonymous users minor3 h 10 min
GitHubIncrease in timeouts for some unauthenticated users minor1 h 56 min
GitHubDegraded performance for multiple GitHub services minor44 min
GitHubIncident with Actions minor52 min
PylonDelay in Analytics Data minor3 h 16 min
GitHubIncident with Actions major35 min
GitHubIncident with Actions and Pages major55 min
PylonInbound Email Delays minor1 h 17 min
GitHubIncident with Pull Requests, Git Operations and Issues major2 h
GitHubIncreased task-related errors for Copilot Mission Control minor1 h 16 min
GitHubIncident with Git Operations minor1 h 43 min
GitHubIncident with API, Git, and Copilot requests minor30 min
GitHubElevated errors on GPT-5.4 Nano minor38 min
HubSpotHubSpot is experiencing issues no impact stated22 min
StripeElevated Instant Payouts failures no impact stated2 h 5 min
GitHubIncident with Dependabot minor2 h 29 min
GitHubIncident with Actions, Pages, and Webhooks major1 h 32 min

And 27 more. All of them: CSV · Who is around them.

ChangesCSV · Atom

See the list as we read it on any date: Time machine

None since tracking began.

Rating badge for Ory's site

Ory transparency rating

It updates with the rating.

<a href="https://thirdpartyindex.com/vendors/ory"><img src="https://thirdpartyindex.com/badge/ory.svg" alt="Ory transparency rating on Third Party Index" height="20"></a>
[![Ory transparency rating on Third Party Index](https://thirdpartyindex.com/badge/ory.svg)](https://thirdpartyindex.com/vendors/ory)