# remove.bg remove.bg declares [11 subprocessors](https://thirdpartyindex.com/vendors/remove-bg#subprocessors) in [its subprocessor list](https://www.remove.bg/subprocessors), which we last checked on 2026-11-11 ([evidence](https://thirdpartyindex.com/evidence/6677)). They include [Microsoft](https://thirdpartyindex.com/vendors/microsoft), [Cloudflare](https://thirdpartyindex.com/vendors/cloudflare) and [Datadog](https://thirdpartyindex.com/vendors/datadog). No published changes since we first read it on 2026-09-23. [3 tracked vendors](https://thirdpartyindex.com/vendors/remove-bg#used-by) name remove.bg as a subprocessor, including [Uploadcare](https://thirdpartyindex.com/vendors/uploadcare), [BioRender](https://thirdpartyindex.com/vendors/biorender) and [Ceros](https://thirdpartyindex.com/vendors/ceros). remove.bg (remove.bg): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index. - Page: https://thirdpartyindex.com/vendors/remove-bg - Documents last verified: 2026-11-11 - Transparency rating: 71/100 (how much it publishes, not how secure it is): Subprocessor list 30/30; Processing locations 8/8; Purposes 7/7; Data processing addendum 12/12; Trust center 0/8 (not found); Privacy policy 6/6; security.txt 0/6 (not found); Security page 0/5 (not found); Status page 0/5 (not found); Vulnerability disclosure 0/5 (not found); Pages still reachable 8/8 - Part of: [Canva](https://thirdpartyindex.com/vendors/canva) - Supply chain: relies on 7 tracked vendors directly, 63 within two hops, 280 within three; 3 tracked vendors rely on it directly, 13 within two hops, 185 within three - Cite as: remove.bg, Third Party Index, https://thirdpartyindex.com/vendors/remove-bg (data CC BY 4.0) ## Documents | Document | URL | Last verified | Last changed | |---|---|---|---| | Subprocessor list | https://www.remove.bg/subprocessors | 2026-11-11 | 2026-09-23 | | Data processing addendum | https://www.remove.bg/dpa | 2026-11-11 | 2026-09-23 | | Privacy policy | https://www.remove.bg/privacy | 2026-11-11 | 2026-09-23 | | Trust center (parent company's) | https://www.canva.com/trust/ | 2026-11-11 | 2026-11-11 | | Terms (parent company's) | https://www.canva.com/policies/terms-of-use/ | 2026-11-11 | 2026-11-11 | | Security page (parent company's) | https://www.canva.com/security/ | 2026-11-11 | 2026-10-24 | | security.txt (parent company's) | https://www.canva.com/.well-known/security.txt | 2026-11-11 | 2026-09-21 | | Status page (parent company's) | https://www.canvastatus.com/ | 2026-11-11 | 2026-11-11 | ## Subprocessors (11) As its own list states them. | Subprocessor | Purpose | Location | Listed since | |---|---|---|---| | [Canva Pty Ltd](https://thirdpartyindex.com/vendors/canva.md) | Support management and communication | Australia | 2026-09-23 | | [Canva Solutions Inc](https://thirdpartyindex.com/vendors/canva.md) | Support management and communication | Philippines | 2026-09-23 | | [Canva UK Operations Limited](https://thirdpartyindex.com/vendors/canva.md) | Support management and communication | United Kingdom | 2026-09-23 | | [Canva US, Inc](https://thirdpartyindex.com/vendors/canva.md) | Support management and Printing and Distribution Services | USA | 2026-09-23 | | [Cloudflare](https://thirdpartyindex.com/vendors/cloudflare.md) | Application Security and Performance | United States | 2026-09-23 | | [Datadog](https://thirdpartyindex.com/vendors/datadog.md) | Application logs collection and analysis | United States | 2026-09-23 | | Google Australia Pty Ltd | Cloud server hosting | The Netherlands | 2026-09-23 | | [Hetzner Online GmbH](https://thirdpartyindex.com/vendors/hetzner-online.md) | Cloud server hosting | European Union (Germany) | 2026-09-23 | | [Microsoft Azure](https://thirdpartyindex.com/vendors/microsoft.md) | Cloud server hosting (only use for remove.bg) | European Union | 2026-09-23 | | [MongoDB](https://thirdpartyindex.com/vendors/mongodb.md) | Data server management | United States | 2026-09-23 | | [Zendesk, Inc.](https://thirdpartyindex.com/vendors/zendesk.md) | Customer Support | United States | 2026-09-23 | Read from ([evidence](https://thirdpartyindex.com/evidence/6677)). CSV: https://thirdpartyindex.com/vendors/remove-bg/subprocessors.csv ## Web Technologies remove.bg's homepage made 42 requests to 11 domains, and 3 services controlled by another company. Loaded on 2026-11-10 by a browser that accepted nothing; other visits may load more or less. What a page loads is not a list of who receives customer data. 3 third parties by category: Analytics 2 (Google Cloud, Hotjar); Miscellaneous 1 (reviewed: Product Hunt). Each company that appears controlled by another organization is counted once, under the main category of the technologies detected from it on this homepage or, when none was, the category recorded from the company's own page (marked reviewed) or else the one it is usually detected as on other published homepages (marked as such); unclassified: none of these. ### Third parties (3) - Google Cloud: 5 requests to doubleclick.net, fonts.googleapis.com, google.com, googletagmanager.com, gstatic.com; Google Analytics, Google Tag Manager - Hotjar: 2 requests to hotjar.com; Hotjar - Product Hunt: 2 requests to producthunt.com ### Affiliates (1) - Canva: 1 request to canva.com (its subprocessor list names it too) ### First party (1) - remove.bg: 32 requests to remove.bg, kaleidousercontent.com, kaleido.ai; Bootstrap 4.4.1, Cloudflare, Google Cloud, Google Cloud CDN, Google Font API, HSTS, Headless UI, Konva.js 9.2.0, Linkedin Ads, Open Graph, PWA, Prism, Ruby, Ruby on Rails, Stimulus, Vue.js, core-js 3.28.0, jQuery 3.6.0 2 tracked companies loaded by the homepage are not in remove.bg's subprocessor list. A website can use a service without it processing customer data. ## Subprocessor of (3) Tracked vendors whose own subprocessor lists name it, and what they say they use it for. - [BioRender](https://thirdpartyindex.com/vendors/biorender.md): Supports image generation tools - [Ceros](https://thirdpartyindex.com/vendors/ceros.md): Image Processing; Relevant Customer Data: Any images uploaded to Ceros. - [Uploadcare](https://thirdpartyindex.com/vendors/uploadcare.md): Visual AI solution tool ## Incidents reported by remove.bg's subprocessors Incidents reported in the last 30 days on their own status pages by 2 vendors remove.bg lists as subprocessors. A subprocessor list names a company, not the service an incident touched. - 2026-10-28: [Datadog](https://thirdpartyindex.com/vendors/datadog#status), which remove.bg lists as a subprocessor, reported Metrics query are disrupted (major) - 2026-10-26: [Datadog](https://thirdpartyindex.com/vendors/datadog#status), which remove.bg lists as a subprocessor, reported Elevated Error Rates for Workflow Automation, App Builder, Bits Code, Bits Agent Builder (major) - 2026-10-20: [MongoDB](https://thirdpartyindex.com/vendors/mongodb#status), which remove.bg lists as a subprocessor, reported GCP Availability Zone europe-west2-b connectivity issues (minor) The subprocessor list as we read it on any date: https://thirdpartyindex.com/labs/time-machine/remove-bg ## Security contact From its security.txt (https://www.canva.com/.well-known/security.txt) ([evidence](https://thirdpartyindex.com/evidence/642)): - Contact: https://canva.com/security/bug-bounty - Contact: https://www.canva.com/help/describe-your-issue - Disclosure policy: https://canva.com/security/vulnerability-disclosure - Acknowledgments: https://bugcrowd.com/engagements/canva/hall_of_fames - Security jobs: https://www.canva.com/careers/jobs/?specialty=security - Languages: en - No expiry date - The parent company's file --- Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api