# Paddle

Paddle declares [16 subprocessors](https://thirdpartyindex.com/vendors/paddle#subprocessors) in [its subprocessor list](https://trust.paddle.com/subprocessors), which we last checked on 2026-11-11 ([evidence](https://thirdpartyindex.com/evidence/123351)). They include [Amazon Web Services](https://thirdpartyindex.com/vendors/amazon-web-services), [Stripe](https://thirdpartyindex.com/vendors/stripe) and [Cloudflare](https://thirdpartyindex.com/vendors/cloudflare). No published changes since we first read it on 2026-09-22. [52 tracked vendors](https://thirdpartyindex.com/vendors/paddle#used-by) name Paddle as a subprocessor, including [RB2B](https://thirdpartyindex.com/vendors/rb2b), [Fastmail](https://thirdpartyindex.com/vendors/fastmail) and [Grain](https://thirdpartyindex.com/vendors/grain-com).

Paddle (paddle.com): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/paddle
- Documents last verified: 2026-11-11
- Transparency rating: 83/100 (how much it publishes, not how secure it is): Subprocessor list 30/30; Processing locations 8/8; Purposes 7/7; Data processing addendum 0/12 (not found); Trust center 8/8; Privacy policy 6/6; security.txt 6/6; Security page 5/5; Status page 5/5; Vulnerability disclosure 0/5 (not found); Pages still reachable 8/8
- Supply chain: relies on 14 tracked vendors directly, 130 within two hops, 434 within three; 52 tracked vendors rely on it directly, 100 within two hops, 189 within three
- Cite as: Paddle, Third Party Index, https://thirdpartyindex.com/vendors/paddle (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Subprocessor list | https://trust.paddle.com/subprocessors | 2026-11-11 | 2026-10-19 |
| Privacy policy | https://www.paddle.com/legal/privacy | 2026-11-11 | 2026-09-22 |
| Terms | https://www.paddle.com/legal/terms | 2026-11-11 | 2026-10-06 |
| Security page | https://trust.paddle.com/ | 2026-11-11 | 2026-10-24 |
| security.txt | https://www.paddle.com/.well-known/security.txt | 2026-11-11 | 2026-09-22 |
| Status page | https://paddlestatus.com/ | 2026-11-11 | 2026-11-01 |

## Subprocessors (16)

As its own list states them.

| Subprocessor | Purpose | Location | Listed since |
|---|---|---|---|
| [Amazon Web Services](https://thirdpartyindex.com/vendors/amazon-web-services.md) | Cloud Hosting provider for the Paddle SaaS platform; Cloud hosting provider | United States of America | 2026-10-01 |
| [Checkout.com](https://thirdpartyindex.com/vendors/checkout-com.md) | Payment Service Provider | United States of America | 2026-10-01 |
| [Cloudflare](https://thirdpartyindex.com/vendors/cloudflare.md) | Content delivery networkand web security platform; Provides CDN services, DDoS protection, web application firewall (WAF), and DNS management to optimize content delivery and protect web infrastructure. | United States of America | 2026-10-01 |
| [incident.io](https://thirdpartyindex.com/vendors/incident-io.md) | Paddle's platform for on-call, incident response, and status page.; Status Page | EU (Belgium & Netherlands) | 2026-10-01 |
| [Mailgun](https://thirdpartyindex.com/vendors/mailgun.md) | Email Service; Transactional email service | United States of America | 2026-10-01 |
| Onfido | KYB/KYC Service; Risk management service for KYC process | United States of America | 2026-10-01 |
| [PayPal](https://thirdpartyindex.com/vendors/paypal-us.md) | Payment Service Provider | United States of America | 2026-10-01 |
| [Postmark](https://thirdpartyindex.com/vendors/postmark.md) | Email Service; Transactional email service | United States of America | 2026-10-01 |
| Rulai | Customer Support Chatbot; Customer support platform | United States of America | 2026-10-01 |
| [Stripe](https://thirdpartyindex.com/vendors/stripe.md) | Payment Service Provider | United States of America | 2026-10-01 |
| [Taktile](https://thirdpartyindex.com/vendors/taktile.md) | Receives the workflow inputs (e.g., applicant/business details and supporting evidence), runs configured decision logic/automations, stores decision artefacts/logs needed for auditability, and returns outcomes (approve/refer/decline, risk signals, case notes). | Decisioning/orchestration platform for customer (seller) onboarding. | 2026-10-01 |
| [TokenEx](https://thirdpartyindex.com/vendors/ixopay.md) | Tokenisation Service; Tokenisation service | United States of America | 2026-10-01 |
| [Vanta](https://thirdpartyindex.com/vendors/vanta.md) | Continuous security and compliance monitoring; Security | EU (Germany) | 2026-10-01 |
| [Very Good Security](https://thirdpartyindex.com/vendors/very-good-security.md) | Card vaulting; Finance and payments | USA | 2026-10-01 |
| [Wiz](https://thirdpartyindex.com/vendors/wiz-io.md) | Cloud Security Platform; Security | United Kingdom | 2026-09-22 |
| [Worldpay](https://thirdpartyindex.com/vendors/worldpay.md) | Payment Service Provider | United States of America | 2026-10-01 |

Read from ([evidence](https://thirdpartyindex.com/evidence/9288)). CSV: https://thirdpartyindex.com/vendors/paddle/subprocessors.csv

## Compliance

As its trust center lists them.

- Audited: SOC 2, PCI DSS ([evidence](https://thirdpartyindex.com/evidence/61569))
- Claimed: SOC 2 Type II, GDPR, CCPA/CPRA ([evidence](https://thirdpartyindex.com/evidence/61569))

## Web Technologies

Paddle's homepage made 114 requests to 15 domains, 10 services controlled by another company, and 1 domain not identified. Loaded on 2026-11-04 by a browser that accepted nothing; other visits may load more or less. What a page loads is not a list of who receives customer data.

10 third parties by category: Analytics 4 (Google Cloud, Wingify, Unify; usually detected as Analytics: HubSpot); Marketing automation 2 (Lunio, Dreamdata); Advertising 1 (Microsoft); Cookie compliance 1 (iubenda); CDN 1 (jsDelivr); CMS 1 (Prismic). Each company that appears controlled by another organization is counted once, under the main category of the technologies detected from it on this homepage or, when none was, the category recorded from the company's own page (marked reviewed) or else the one it is usually detected as on other published homepages (marked as such); unclassified: none of these.

### Third parties (10)

- Google Cloud: 5 requests to googletagmanager.com, google-analytics.com, googlesyndication.com; Google Analytics, Google Tag Manager
- Wingify: 5 requests to visualwebsiteoptimizer.com; VWO
- iubenda: 5 requests to iubenda.com; iubenda
- Microsoft: 3 requests to bing.com; Microsoft Advertising
- Prismic: 3 requests to prismic.io; Prismic
- Lunio: 2 requests to mplat-ppcprotect.com; Lunio
- Unify: 2 requests to unifyintent.com; Unify
- jsDelivr: 2 requests to jsdelivr.net; jsDelivr
- Dreamdata: 1 request to dreamdata.cloud; Dreamdata
- HubSpot: 1 request to hsforms.net

### Unknown (1)

Domains not identified yet: sequelvideo.com

### First party (1)

- Paddle: 84 requests to paddle.com, paddlestatus.com; HSTS, HockeyStack, HubSpot, Netlify, Next.js 16.4.2, Next.js App Router, Open Graph, React, Turbopack, Webpack

7 tracked companies loaded by the homepage are not in Paddle's subprocessor list. A website can use a service without it processing customer data.

## Subprocessor of (52)

Tracked vendors whose own subprocessor lists name it, and what they say they use it for.

- [BrightLocal](https://thirdpartyindex.com/vendors/brightlocal.md): Churn and delinquent payment management
- [Cloutly](https://thirdpartyindex.com/vendors/cloutly.md): Merchant of record: payments, billing, tax and invoicing
- [Convertful](https://thirdpartyindex.com/vendors/convertful.md)
- [CSVBox](https://thirdpartyindex.com/vendors/csvbox.md): Payments
- [DataForSEO](https://thirdpartyindex.com/vendors/dataforseo.md)
- [Demio](https://thirdpartyindex.com/vendors/demio.md): Financial Operations Platform
- [Donut](https://thirdpartyindex.com/vendors/donut.md): Financial analysis
- [Fastmail](https://thirdpartyindex.com/vendors/fastmail.md): Payment processing
- [Formspark](https://thirdpartyindex.com/vendors/formspark.md): Payment processing and merchant of record
- [Grain](https://thirdpartyindex.com/vendors/grain-com.md): SaaS subscription revenue analytics and recovery
- [GreetBot](https://thirdpartyindex.com/vendors/greetbot.md): Payment processing service located in the United Kingdom
- [Hardalion](https://thirdpartyindex.com/vendors/hardalion.md): Merchant of Record for purchases made through hardalion.com
- [ImprovMX](https://thirdpartyindex.com/vendors/improvmx.md): We use ProfitWell Metrics for revenue reporting and financial analytics.
- [Inclusive Bot](https://thirdpartyindex.com/vendors/inclusive-bot.md): Payment handling
- [Instatus](https://thirdpartyindex.com/vendors/instatus.md): Payment processing services
- [Kanbanchi](https://thirdpartyindex.com/vendors/kanbanchi.md): Subscription analytics and revenue reporting
- [Maileroo](https://thirdpartyindex.com/vendors/maileroo.md): Subscription billing, payment processing, tax compliance, and customer invoicing
- [MakeForms](https://thirdpartyindex.com/vendors/makeforms.md): Payments
- [Marker.io](https://thirdpartyindex.com/vendors/marker-io.md): Analytics
- [Master Inbox](https://thirdpartyindex.com/vendors/master-inbox.md): Billing and payments
- [Mida](https://thirdpartyindex.com/vendors/mida.md): Merchant of Record and billing
- [Nuclino](https://thirdpartyindex.com/vendors/nuclino.md): Payment Processing Service
- [Overloop](https://thirdpartyindex.com/vendors/overloop.md): Analytics
- [Perfect Wiki](https://thirdpartyindex.com/vendors/perfect-wiki.md): Subscription billing and payment processing
- [Phare](https://thirdpartyindex.com/vendors/phare.md): Paddle US (Paddle.com Inc.) only processes payments for customers based outside of Europe.; Paddle is a trusted merchant of record with a proven track record of…
- [Plugivo](https://thirdpartyindex.com/vendors/plugivo.md): Payment processing & billing
- [Posit](https://thirdpartyindex.com/vendors/posit.md): Payment management
- [Prefinery](https://thirdpartyindex.com/vendors/prefinery.md): SaaS subscription revenue analytics
- [PushAlert](https://thirdpartyindex.com/vendors/pushalert.md): Paddle (Paddle.com Market Limited) is the Merchant of Record for our service. They handle subscription, invoicing, sales tax and other form of payments for our …
- [Raycast](https://thirdpartyindex.com/vendors/raycast.md): Payment and Subscription Analytics, Customer Retention; Transfer Mechanism(s): SCCs and UK Addendum
- [RB2B](https://thirdpartyindex.com/vendors/rb2b.md): Reporting & analytics, revenue recovery (USA)
- [Rotation App](https://thirdpartyindex.com/vendors/rotation-app.md): Payment handling
- [ScreenshotOne](https://thirdpartyindex.com/vendors/screenshotone.md): Payment processing and subscription administration
- [Sessionize](https://thirdpartyindex.com/vendors/sessionize.md): Paddle processes our online payments as a merchant of record. If you make an online payment, you will need to share your personal data with Paddle in order to h…
- [Simple Poll](https://thirdpartyindex.com/vendors/simple-poll.md): Analytics
- [Storydoc](https://thirdpartyindex.com/vendors/storydoc.md): Online payments process
- [Strivelabs](https://thirdpartyindex.com/vendors/strivelabs.md): Payment processing for subscribed products.
- [SuprSend](https://thirdpartyindex.com/vendors/suprsend.md): Finance
- [Team O'clock](https://thirdpartyindex.com/vendors/team-o-clock.md): Billing
- [TextExpander](https://thirdpartyindex.com/vendors/textexpander.md): Payment processing / merchant of record
- [Thinkific](https://thirdpartyindex.com/vendors/thinkific.md): Dunning service for Thinkific subscriptions
- [Time Doctor](https://thirdpartyindex.com/vendors/time-doctor.md)
- [Todoist](https://thirdpartyindex.com/vendors/todoist.md): Data elements: Subscription and billing data; Revenue Analytics
- [Toggl](https://thirdpartyindex.com/vendors/toggl.md): Application analysis services
- [TrackingTime](https://thirdpartyindex.com/vendors/trackingtime.md): Business Analytics, United States
- [Trainual](https://thirdpartyindex.com/vendors/trainual.md): Customer analytics processing
- [Urlbox](https://thirdpartyindex.com/vendors/urlbox.md)
- [UserCheck](https://thirdpartyindex.com/vendors/usercheck.md): Payment processing
- [WeTransfer](https://thirdpartyindex.com/vendors/wetransfer.md): Payment Management
- [Wonderchat](https://thirdpartyindex.com/vendors/wonderchat.md): B2B and B2C software companies around the globe use Paddle to offload operational complexities so they can focus on growth. Paddle provides more than just the p…
- [ZenABM](https://thirdpartyindex.com/vendors/zenabm.md): Payment processing & billing (Merchant of Record)
- [Zeplin](https://thirdpartyindex.com/vendors/zeplin.md): Zeplin uses Profitwell for billing, sales and marketing data visualization. Zeplin may provide user financial transactional information.

## Service status

Incidents it reported on its own status page.

- Last 90 days: 3 reported incidents (1 major or critical, 2 minor, 0 with no impact stated)
- Typical time to resolve: 47 min
- Status page last read: 2026-11-12
- 2026-10-21: Issue affecting metrics and reporting in the seller dashboard (minor)
- 2026-09-02: Report downloads unavailable in the Paddle Dashboard (minor)
- 2026-08-24: Retain (major)
- 2026-07-16: Seller dashboard logins are failing with timeouts (minor)
- 2026-06-25: Intermittent Checkout Loading Issues (minor)
- 2026-06-18: Partial Checkout Outage (minor)
- 2026-06-01: Card payment issues on Paddle Billing and Paddle Classic checkout (minor)
- 2026-04-28: New Sellers might be unable to access Retain settings and the ProfitWell Metrics dashboard (major)

## Incidents reported by Paddle's subprocessors

Incidents reported in the last 30 days on their own status pages by 9 vendors Paddle lists as subprocessors. A subprocessor list names a company, not the service an incident touched.

- 2026-11-11: [incident.io](https://thirdpartyindex.com/vendors/incident-io#status), which Paddle lists as a subprocessor, reported Disruption to Slack incident channels and messages (major)
- 2026-11-11: [IXOPAY](https://thirdpartyindex.com/vendors/ixopay#status), which Paddle lists as a subprocessor, reported IXOPAY Service Disruption (major)
- 2026-11-10: [Worldpay](https://thirdpartyindex.com/vendors/worldpay#status), which Paddle lists as a subprocessor, reported INC0723468 - Cardinal - 3D Secure Authentication (no impact stated)
- 2026-11-09: [Worldpay](https://thirdpartyindex.com/vendors/worldpay#status), which Paddle lists as a subprocessor, reported INC0721732 - We are investigating issues with Authorization & Payments for Amex on the WPG platform (no impact stated)
- 2026-11-08: [Worldpay](https://thirdpartyindex.com/vendors/worldpay#status), which Paddle lists as a subprocessor, reported INC0721351 - Mastercard Debit (Maestro) network issue is resolved. (no impact stated)
- 2026-11-05: [Worldpay](https://thirdpartyindex.com/vendors/worldpay#status), which Paddle lists as a subprocessor, reported INC0719188 We are aware of an incident affecting payments processing through the Alternative Payment Method (APM) – eps. (minor)
- 2026-11-05: [Worldpay](https://thirdpartyindex.com/vendors/worldpay#status), which Paddle lists as a subprocessor, reported INC0719027 - Worldwide Payment Gateway (WPG) - Mastercard and Visa dual-branded Carte Bancaire (minor)
- 2026-11-05: [Postmark](https://thirdpartyindex.com/vendors/postmark#status), which Paddle lists as a subprocessor, reported Delays in activity data (no impact stated)
- 2026-11-05: [Worldpay](https://thirdpartyindex.com/vendors/worldpay#status), which Paddle lists as a subprocessor, reported INC0718854 - Worldwide Payment Gateway (WPG) (minor)
- 2026-11-05: [Worldpay](https://thirdpartyindex.com/vendors/worldpay#status), which Paddle lists as a subprocessor, reported INC0718658 - We have resolved issues with Authorization & Payments. (no impact stated)
- 2026-11-05: [wiz.io](https://thirdpartyindex.com/vendors/wiz-io#status), which Paddle lists as a subprocessor, reported Graph query reports could fail to generate in some data centers due to an AWS Neptune issue. We are working with AWS on a mitigation. (no impact stated)
- 2026-11-05: [Worldpay](https://thirdpartyindex.com/vendors/worldpay#status), which Paddle lists as a subprocessor, reported INC0718460 - We are aware of potential issues with a Third Party (minor)
- 2026-11-04: [Worldpay](https://thirdpartyindex.com/vendors/worldpay#status), which Paddle lists as a subprocessor, reported INC0716317 - GPPaaS PayPal Direct - Funding Delay (minor)
- 2026-11-04: [Postmark](https://thirdpartyindex.com/vendors/postmark#status), which Paddle lists as a subprocessor, reported Delays processing Inbound messages (no impact stated)
- 2026-11-03: [Vanta](https://thirdpartyindex.com/vendors/vanta#status), which Paddle lists as a subprocessor, reported Missing check results for GitHub pull requests (minor)
- 2026-11-03: [Taktile](https://thirdpartyindex.com/vendors/taktile#status), which Paddle lists as a subprocessor, reported Minor degradation affecting Taktile Docs (no impact stated)
- 2026-11-03: [Worldpay](https://thirdpartyindex.com/vendors/worldpay#status), which Paddle lists as a subprocessor, reported INC0716051 - 3D Secure is resolved. (no impact stated)
- 2026-11-03: [Worldpay](https://thirdpartyindex.com/vendors/worldpay#status), which Paddle lists as a subprocessor, reported INC0716043 - We have resolved issues with Acquiring Services (no impact stated)
- 2026-11-03: [Worldpay](https://thirdpartyindex.com/vendors/worldpay#status), which Paddle lists as a subprocessor, reported INC0714904 - We have resolved issues with Acquiring Services (no impact stated)
- 2026-11-03: [Worldpay](https://thirdpartyindex.com/vendors/worldpay#status), which Paddle lists as a subprocessor, reported INC0714904 - We have resolved issues with Authorization & Payments. (no impact stated)
- 2026-11-02: [incident.io](https://thirdpartyindex.com/vendors/incident-io#status), which Paddle lists as a subprocessor, reported Sentry integration degraded (minor)
- 2026-11-02: [Worldpay](https://thirdpartyindex.com/vendors/worldpay#status), which Paddle lists as a subprocessor, reported INC0714252 - We are investigating potential issues with Portals & Reporting (minor)
- 2026-11-01: [Worldpay](https://thirdpartyindex.com/vendors/worldpay#status), which Paddle lists as a subprocessor, reported INC0713314 - We are aware of potential issues with a Third Party (minor)
- 2026-11-01: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Paddle lists as a subprocessor, reported Elevated Instant Payouts failures (no impact stated)
- 2026-11-01: [Worldpay](https://thirdpartyindex.com/vendors/worldpay#status), which Paddle lists as a subprocessor, reported INC0713069 - We have resolved issues with Authorization & Payments. (no impact stated)
- 2026-11-01: [Worldpay](https://thirdpartyindex.com/vendors/worldpay#status), which Paddle lists as a subprocessor, reported INC0712171 - We are aware of potential issues with a Third Party (minor)
- 2026-10-30: [Worldpay](https://thirdpartyindex.com/vendors/worldpay#status), which Paddle lists as a subprocessor, reported INC0710790 - We are investigating potential issues with payment refunds. (minor)
- 2026-10-29: [Worldpay](https://thirdpartyindex.com/vendors/worldpay#status), which Paddle lists as a subprocessor, reported INC0709613 - WPG - Maintenance Extended - Degradation of service (minor)
- 2026-10-29: [Taktile](https://thirdpartyindex.com/vendors/taktile#status), which Paddle lists as a subprocessor, reported Higher latencies in us-west-2 (no impact stated)
- 2026-10-29: [Vanta](https://thirdpartyindex.com/vendors/vanta#status), which Paddle lists as a subprocessor, reported Incorrect security-training and background-check test results (no impact stated)
- 2026-10-28: [Worldpay](https://thirdpartyindex.com/vendors/worldpay#status), which Paddle lists as a subprocessor, reported INC0708391 - Biller Solutions - We are investigating issues with Authorization & Payments (minor)
- 2026-10-28: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Paddle lists as a subprocessor, reported Elevated Issuing errors from 17:13 - 20:41 UTC (minor)
- 2026-10-28: [IXOPAY](https://thirdpartyindex.com/vendors/ixopay#status), which Paddle lists as a subprocessor, reported Batch in US production Unavailable (no impact stated)
- 2026-10-28: [Worldpay](https://thirdpartyindex.com/vendors/worldpay#status), which Paddle lists as a subprocessor, reported INC0708124 - We are investigating issues with Authorization & Payments (minor)
- 2026-10-28: [Mailgun](https://thirdpartyindex.com/vendors/mailgun#status), which Paddle lists as a subprocessor, reported Route delays in EU Region (minor)
- 2026-10-27: [Postmark](https://thirdpartyindex.com/vendors/postmark#status), which Paddle lists as a subprocessor, reported SMS codes for two-factor authentication may not arrive (no impact stated)
- 2026-10-27: [Worldpay](https://thirdpartyindex.com/vendors/worldpay#status), which Paddle lists as a subprocessor, reported INC0707045 - We are investigating issues with Authorization & Payments (minor)
- 2026-10-27: [Worldpay](https://thirdpartyindex.com/vendors/worldpay#status), which Paddle lists as a subprocessor, reported INC0706364 - Credit/Debit Network - Accel (TRA1) is resolved. (minor)
- 2026-10-27: [Worldpay](https://thirdpartyindex.com/vendors/worldpay#status), which Paddle lists as a subprocessor, reported INC0706364 - Credit/Debit Network - Accel (TRA1) is resolved. (no impact stated)
- 2026-10-26: [Worldpay](https://thirdpartyindex.com/vendors/worldpay#status), which Paddle lists as a subprocessor, reported INC0705799 - We are investigating issues with Authorization & Payments (minor)
- 2026-10-26: [Worldpay](https://thirdpartyindex.com/vendors/worldpay#status), which Paddle lists as a subprocessor, reported INC0705478 - We are investigating issues with Visa Authorizations & Payments on the Worldpay Core Processing platform. (minor)
- 2026-10-25: [Worldpay](https://thirdpartyindex.com/vendors/worldpay#status), which Paddle lists as a subprocessor, reported INC0703844 - We are aware of potential issues with a Third Party (minor)
- 2026-10-24: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Paddle lists as a subprocessor, reported Elevated Blik errors (no impact stated)
- 2026-10-24: [Worldpay](https://thirdpartyindex.com/vendors/worldpay#status), which Paddle lists as a subprocessor, reported INC0703356 - We are aware of potential issues with a Third Party (minor)
- 2026-10-22: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Paddle lists as a subprocessor, reported Elevated Bancontact errors (no impact stated)
- 2026-10-22: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Paddle lists as a subprocessor, reported Elevated Bancontact errors (no impact stated)
- 2026-10-22: [Worldpay](https://thirdpartyindex.com/vendors/worldpay#status), which Paddle lists as a subprocessor, reported INC0701242 (no impact stated)
- 2026-10-21: [Vanta](https://thirdpartyindex.com/vendors/vanta#status), which Paddle lists as a subprocessor, reported Stale data for CloudflareDomainInventory and CloudflareZoneRule (major)
- 2026-10-21: [Worldpay](https://thirdpartyindex.com/vendors/worldpay#status), which Paddle lists as a subprocessor, reported INC0699356 - iQ - Functionality (minor)
- 2026-10-21: [Taktile](https://thirdpartyindex.com/vendors/taktile#status), which Paddle lists as a subprocessor, reported Response to eMudhra certificate compromise (no impact stated)
- 2026-10-20: [Worldpay](https://thirdpartyindex.com/vendors/worldpay#status), which Paddle lists as a subprocessor, reported INC0697981 - Electronic Fund Transfer Point of Sale (EFT POS) - Transaction Authorisations (no impact stated)
- 2026-10-20: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Paddle lists as a subprocessor, reported Spike in cancellations and expired errors with PayByBank payments (no impact stated)
- 2026-10-20: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Paddle lists as a subprocessor, reported Elevated Revolut Pay errors (no impact stated)
- 2026-10-20: [Worldpay](https://thirdpartyindex.com/vendors/worldpay#status), which Paddle lists as a subprocessor, reported INC0697249 - We are aware of potential issues with a Third Party (minor)
- 2026-10-19: [Worldpay](https://thirdpartyindex.com/vendors/worldpay#status), which Paddle lists as a subprocessor, reported INC0696692 - We are aware of potential issues with a Third Party (minor)
- 2026-10-19: [Worldpay](https://thirdpartyindex.com/vendors/worldpay#status), which Paddle lists as a subprocessor, reported INC0695951 - We have resolved issues with Worldpay Core Processing (RAFT) transaction Authorizations. (no impact stated)
- 2026-10-18: [Worldpay](https://thirdpartyindex.com/vendors/worldpay#status), which Paddle lists as a subprocessor, reported INC0694689 - Latin American (LatAm) - Transaction Authorisations - Prosa (no impact stated)
- 2026-10-18: [wiz.io](https://thirdpartyindex.com/vendors/wiz-io#status), which Paddle lists as a subprocessor, reported We are investigating an issue affecting the security graph and dependent features in prod-US38. (no impact stated)
- 2026-10-17: [Worldpay](https://thirdpartyindex.com/vendors/worldpay#status), which Paddle lists as a subprocessor, reported INC0693317 Integrated Payments - Express - MercuryPay (no impact stated)
- 2026-10-17: [Worldpay](https://thirdpartyindex.com/vendors/worldpay#status), which Paddle lists as a subprocessor, reported INC0692779 - We have resolved issues with Authorization & Payments. (no impact stated)
- 2026-10-17: [Worldpay](https://thirdpartyindex.com/vendors/worldpay#status), which Paddle lists as a subprocessor, reported INC0692392 There was an increase in Mastercard payout processing failures on the Worldwide Payment Gateway platform. (no impact stated)
- 2026-10-16: [IXOPAY](https://thirdpartyindex.com/vendors/ixopay#status), which Paddle lists as a subprocessor, reported Intermittent Network Tokenization Timeouts (no impact stated)
- 2026-10-15: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Paddle lists as a subprocessor, reported Elevated declines on Mastercard (no impact stated)
- 2026-10-15: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Paddle lists as a subprocessor, reported Elevated declines on Visa (no impact stated)
- 2026-10-15: [Worldpay](https://thirdpartyindex.com/vendors/worldpay#status), which Paddle lists as a subprocessor, reported INC0690885 - Conduent Network - Electronic Benefit Transfer (EBT) & Women, Infants, and Children (WIC) (minor)
- 2026-10-15: [Worldpay](https://thirdpartyindex.com/vendors/worldpay#status), which Paddle lists as a subprocessor, reported INC0690781 Credit/Debit Network - Mastercard Debit (no impact stated)
- 2026-10-15: [Worldpay](https://thirdpartyindex.com/vendors/worldpay#status), which Paddle lists as a subprocessor, reported Electronic Benefit Transfer (EBT) & Women, Infants, and Children (WIC) - Conduent - Multiple States (no impact stated)
- 2026-10-15: [Worldpay](https://thirdpartyindex.com/vendors/worldpay#status), which Paddle lists as a subprocessor, reported INC0690017 - We have resolved issues with Authorization & Payments. (no impact stated)
- 2026-10-15: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Paddle lists as a subprocessor, reported Elevated Amazon Pay errors (no impact stated)
- 2026-10-14: [Worldpay](https://thirdpartyindex.com/vendors/worldpay#status), which Paddle lists as a subprocessor, reported INC0689911 - Latin American (LatAm) - Transaction Authorisations - Prosa (no impact stated)
- 2026-10-14: [Worldpay](https://thirdpartyindex.com/vendors/worldpay#status), which Paddle lists as a subprocessor, reported INC0689569 - Latin American (LatAm) Acquiring - Transaction Authorizations - Prosa (no impact stated)
- 2026-10-14: [wiz.io](https://thirdpartyindex.com/vendors/wiz-io#status), which Paddle lists as a subprocessor, reported We are investigating an issue causing GitHub pull request scans to remain pending, potentially blocking merges where Wiz checks are required. (no impact stated)
- 2026-10-14: [IXOPAY](https://thirdpartyindex.com/vendors/ixopay#status), which Paddle lists as a subprocessor, reported pciapply.com Service Disruption (no impact stated)
- 2026-10-14: [Worldpay](https://thirdpartyindex.com/vendors/worldpay#status), which Paddle lists as a subprocessor, reported INC0689284 - eCommerce (VAP) iQ - Reporting (minor)
- 2026-10-14: [IXOPAY](https://thirdpartyindex.com/vendors/ixopay#status), which Paddle lists as a subprocessor, reported pciapply.com Portal Unavailable (no impact stated)
- 2026-10-13: [IXOPAY](https://thirdpartyindex.com/vendors/ixopay#status), which Paddle lists as a subprocessor, reported Universal Tokenization Service Issues (no impact stated)

The subprocessor list as we read it on any date: https://thirdpartyindex.com/labs/time-machine/paddle

## Security contact

From its security.txt (https://www.paddle.com/.well-known/security.txt) ([evidence](https://thirdpartyindex.com/evidence/2051)):

- Contact: https://vdp.paddle.com/
- Contact: https://yeswehack.com/programs/paddle-com-public-bug-bounty-program
- Contact: mailto:security@paddle.com
- Disclosure policy: https://www.paddle.com/vulnerability-disclosure-policy
- Encryption key: https://www.paddle.com/security-gpg.txt
- Acknowledgments: https://www.paddle.com/security/acknowledgments
- Security jobs: https://www.paddle.com/careers
- Languages: en
- Valid until 2027-01-22

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api