# Privy

Privy declares [14 subprocessors](https://thirdpartyindex.com/vendors/privy#subprocessors) in [its subprocessor list](https://trust.privy.io/subprocessors), which we last checked on 2026-10-31 ([evidence](https://thirdpartyindex.com/evidence/147293)). They include [Amazon Web Services](https://thirdpartyindex.com/vendors/amazon-web-services), [Google Cloud](https://thirdpartyindex.com/vendors/google-cloud) and [Cloudflare](https://thirdpartyindex.com/vendors/cloudflare). No published changes since we first read it on 2026-10-24. [1 tracked vendor](https://thirdpartyindex.com/vendors/privy#used-by), [Stripe](https://thirdpartyindex.com/vendors/stripe), names Privy as a subprocessor.

Privy (privy.io): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/privy
- Documents last verified: 2026-10-31
- Transparency rating: 70/100 (how much it publishes, not how secure it is): Subprocessor list 30/30; Processing locations 7/8 (partial); Purposes 1/7 (partial); Data processing addendum 0/12 (not found); Trust center 8/8; Privacy policy 6/6; security.txt 0/6 (not found); Security page 5/5; Status page 5/5; Vulnerability disclosure 0/5 (not found); Pages still reachable 8/8
- Supply chain: relies on 10 tracked vendors directly, 92 within two hops, 324 within three; 1 tracked vendors rely on it directly, 832 within two hops, 2012 within three
- Cite as: Privy, Third Party Index, https://thirdpartyindex.com/vendors/privy (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Trust center | https://trust.privy.io/ | 2026-10-31 | 2026-10-30 |
| Subprocessor list | https://trust.privy.io/subprocessors | 2026-10-31 | 2026-10-24 |
| Privacy policy | https://www.privy.io/privacy-policy | 2026-10-31 | 2026-10-24 |
| Terms | https://www.privy.io/user-terms-of-service | 2026-10-31 | 2026-10-24 |
| Security page | https://www.privy.io/security | 2026-10-31 | 2026-10-24 |
| Status page | https://status.privy.io/ | 2026-10-31 | 2026-10-29 |

## Subprocessors (14)

As its own list states them.

| Subprocessor | Purpose | Location | Listed since |
|---|---|---|---|
| [Amazon Web Services](https://thirdpartyindex.com/vendors/amazon-web-services.md) | Database (and Vercel via upstream) runs on AWS. | Cloud provider | 2026-10-24 |
| [Cloudflare](https://thirdpartyindex.com/vendors/cloudflare.md) | — | Cloud monitoring | 2026-10-24 |
| [Coingecko](https://thirdpartyindex.com/vendors/coingecko.md) | — | — | 2026-10-24 |
| [Datadog](https://thirdpartyindex.com/vendors/datadog.md) | — | Data monitoring | 2026-10-24 |
| [GitHub](https://thirdpartyindex.com/vendors/github.md) | — | Version control | 2026-10-24 |
| [Google Drive](https://thirdpartyindex.com/vendors/google-cloud.md) | — | Document management | 2026-10-24 |
| [Google Workspace](https://thirdpartyindex.com/vendors/google-cloud.md) | — | Identity provider and SSO | 2026-10-24 |
| [Hightouch](https://thirdpartyindex.com/vendors/hightouch.md) | — | — | 2026-10-24 |
| [Hubspot](https://thirdpartyindex.com/vendors/hubspot.md) | — | Marketing | 2026-10-24 |
| Infura | — | Used for RPC provider requests. | 2026-10-24 |
| [Metabase](https://thirdpartyindex.com/vendors/metabase.md) | — | Data visualization, Dashboards, Analytics | 2026-10-24 |
| [Rippling](https://thirdpartyindex.com/vendors/rippling.md) | HR management, MDM | Employee and device management | 2026-10-24 |
| Semgrep | — | Code scanning, secret scanning and dependency scanning | 2026-10-24 |
| Socket | — | Dependency scanning | 2026-10-24 |

Read from ([evidence](https://thirdpartyindex.com/evidence/147293)). CSV: https://thirdpartyindex.com/vendors/privy/subprocessors.csv

## Compliance

As its trust center lists them.

- Audited: SOC 2 ([evidence](https://thirdpartyindex.com/evidence/147294))
- Claimed: SOC 2 Type II, SOC 2 Type I, GDPR, CCPA/CPRA ([evidence](https://thirdpartyindex.com/evidence/147294))

## Subprocessor of (1)

Tracked vendors whose own subprocessor lists name it, and what they say they use it for.

- [Stripe](https://thirdpartyindex.com/vendors/stripe.md): Crypto and stablecoin related services. See here for Privy’s own sub-processor list.

## Service status

Incidents it reported on its own status page.

- Last 90 days: 13 reported incidents (0 major or critical, 0 minor, 13 with no impact stated)
- Typical time to resolve: 1 h 17 min
- Status page last read: 2026-10-31
- 2026-10-28: Elevated RPC failures primarily in EU (no impact stated)
- 2026-10-10: Upstream provider outage impacting wallet actions (no impact stated)
- 2026-10-10: Delayed webhooks and transaction processing (no impact stated)
- 2026-09-18: Database issues causing API outages (no impact stated)
- 2026-09-18: Wallet actions and transaction finality delayed (no impact stated)
- 2026-09-11: Solana balance webhooks are delayed (no impact stated)
- 2026-09-04: Delays on webhooks and wallet actions (no impact stated)
- 2026-09-04: Robinhood chain experiencing delays (no impact stated)

## Incidents reported by Privy's subprocessors

Incidents reported in the last 30 days on their own status pages by 5 vendors Privy lists as subprocessors. A subprocessor list names a company, not the service an incident touched.

- 2026-10-30: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Privy lists as a subprocessor, reported Incident with Dependabot (minor)
- 2026-10-30: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Privy lists as a subprocessor, reported Incident with Actions, Pages, and Webhooks (major)
- 2026-10-30: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Privy lists as a subprocessor, reported Disruption with GitHub services (critical)
- 2026-10-29: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Privy lists as a subprocessor, reported Disruption with Copilot Cloud services (minor)
- 2026-10-29: [Rippling](https://thirdpartyindex.com/vendors/rippling#status), which Privy lists as a subprocessor, reported Issues editing Supergroups (no impact stated)
- 2026-10-28: [Datadog](https://thirdpartyindex.com/vendors/datadog#status), which Privy lists as a subprocessor, reported Metrics query are disrupted (major)
- 2026-10-28: [Rippling](https://thirdpartyindex.com/vendors/rippling#status), which Privy lists as a subprocessor, reported QuickBooks data import delayed for some customers (minor)
- 2026-10-28: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Privy lists as a subprocessor, reported Disruption with some Copilot services (critical)
- 2026-10-28: [Rippling](https://thirdpartyindex.com/vendors/rippling#status), which Privy lists as a subprocessor, reported Rippling AI is down (major)
- 2026-10-27: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Privy lists as a subprocessor, reported Elevated 404s for GitHub App s2s tokens in git/API (no impact stated)
- 2026-10-26: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Privy lists as a subprocessor, reported Incident with Actions, Issues, API Requests and Pull Requests (minor)
- 2026-10-26: [Datadog](https://thirdpartyindex.com/vendors/datadog#status), which Privy lists as a subprocessor, reported Elevated Error Rates for Workflow Automation, App Builder, Bits Code, Bits Agent Builder (major)
- 2026-10-23: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Privy lists as a subprocessor, reported Grok 4.6 and Grok 4.7 Service Issues (minor)
- 2026-10-23: [HubSpot](https://thirdpartyindex.com/vendors/hubspot#status), which Privy lists as a subprocessor, reported Some HubSpot tools may be unavailable for some users (no impact stated)
- 2026-10-23: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Privy lists as a subprocessor, reported Disruption with Dependabot Alerts (minor)
- 2026-10-23: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Privy lists as a subprocessor, reported Delayed Actions status check results (minor)
- 2026-10-22: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Privy lists as a subprocessor, reported Project updates delayed (minor)
- 2026-10-22: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Privy lists as a subprocessor, reported Incident with Actions (minor)
- 2026-10-22: [HubSpot](https://thirdpartyindex.com/vendors/hubspot#status), which Privy lists as a subprocessor, reported Update on PHP security vulnerability (no impact stated)
- 2026-10-21: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Privy lists as a subprocessor, reported Delays for Pull Requests and Webhook deliveries (critical)
- 2026-10-21: [CoinGecko](https://thirdpartyindex.com/vendors/coingecko#status), which Privy lists as a subprocessor, reported Onchain Endpoints - Intermittent Errors (no impact stated)
- 2026-10-19: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Privy lists as a subprocessor, reported Degraded availability for GitHub Actions, GitHub Pages and Webhooks (critical)
- 2026-10-15: [Rippling](https://thirdpartyindex.com/vendors/rippling#status), which Privy lists as a subprocessor, reported Products partially degraded (major)
- 2026-10-15: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Privy lists as a subprocessor, reported CCA Automations are delayed when starting an Automation (minor)
- 2026-10-13: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Privy lists as a subprocessor, reported \[Retroactive\] Actions workflow run logs delayed (minor)
- 2026-10-12: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Privy lists as a subprocessor, reported Incident with Actions, Pull Requests and Issues (minor)
- 2026-10-08: [HubSpot](https://thirdpartyindex.com/vendors/hubspot#status), which Privy lists as a subprocessor, reported Marketing email statistics are delayed (no impact stated)
- 2026-10-07: [Rippling](https://thirdpartyindex.com/vendors/rippling#status), which Privy lists as a subprocessor, reported Issues using 1Password passkeys (minor)
- 2026-10-07: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Privy lists as a subprocessor, reported Incident with Git Operations, Issues, Actions and Pull Requests (critical)
- 2026-10-07: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Privy lists as a subprocessor, reported Incident with Git Operations, Pull Requests and Actions (critical)
- 2026-10-06: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Privy lists as a subprocessor, reported Several services are degraded (critical)
- 2026-10-06: [Rippling](https://thirdpartyindex.com/vendors/rippling#status), which Privy lists as a subprocessor, reported RPass Chrome extension login failures (no impact stated)
- 2026-10-05: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Privy lists as a subprocessor, reported Disruption with some GitHub services (major)
- 2026-10-05: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Privy lists as a subprocessor, reported Incident with Actions (critical)
- 2026-10-02: [HubSpot](https://thirdpartyindex.com/vendors/hubspot#status), which Privy lists as a subprocessor, reported HubSpot is experiencing issues (no impact stated)
- 2026-10-02: [Datadog](https://thirdpartyindex.com/vendors/datadog#status), which Privy lists as a subprocessor, reported Delayed RUM sessions (no impact stated)
- 2026-10-01: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Privy lists as a subprocessor, reported Actions Job Delays (minor)
- 2026-10-01: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Privy lists as a subprocessor, reported Elevated request latency (minor)

The subprocessor list as we read it on any date: https://thirdpartyindex.com/labs/time-machine/privy

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api