Retool
Certifications and attestations: SOC 2 Type IIISO/IEC 27001
Says it complies with: GDPR, CCPA/CPRA
As listed on Retool's trust center (evidence) ; reports themselves are usually shared on request.
Transparency
Breakdown
| Subprocessor list | 30 / 30 | |
| Processing locations | 8 / 8 | |
| Purposes | 7 / 7 | |
| Data processing addendum | 12 / 12 | |
| Trust center | 8 / 8 | |
| Privacy policy | 6 / 6 | |
| security.txt | 6 / 6 | |
| Security page | 5 / 5 | |
| Status page | 5 / 5 | |
| Vulnerability disclosure | not found | 0 / 5 |
| Pages still reachable | 8 / 8 | |
| Total | 95 / 100 |
Only documents we can retrieve count: a page behind a login or a broken link scores nothing.
Badge
For Retool's own site; it updates with the rating.
<a href="https://thirdpartyindex.com/vendors/retool"><img src="https://thirdpartyindex.com/badge/retool.svg" alt="Retool transparency rating on Third Party Index" height="20"></a>[](https://thirdpartyindex.com/vendors/retool)Documents
| Document | Verified | Changed | Evidence |
|---|---|---|---|
| Trust center safebase | snapshot | ||
| Subprocessor list | snapshot | ||
| Data processing addendum safebase | snapshot | ||
| Privacy policy | snapshot | ||
| Terms | snapshot | ||
| Security page | snapshot | ||
| security.txt | snapshot | ||
| Status page statuspage | snapshot |
Subprocessors
| Name | Purpose | Location | Listed since |
|---|---|---|---|
| AlphaAI Technologies Inc. dba Tavily | Third-Party web search provider for LLMs | United States | |
| Amazon Web Services, Inc. | Third-party hosting provider; Third-party hosting provider for queries and workflow caching | United States | |
| Anthropic, PBC | Third-Party Model Provider | United States | |
| Baseten Labs, Inc. | Third-Party infrastructure provider for open-source models | United States | |
| ClickHouse, Inc. | Third-Party data store for managing Agent logs | United States | |
| Cloudflare, Inc. | DDoS protection services | United States | |
| Intercom, Inc.. | Third-party service provider of customer support tools | United States | |
| Mailgun Technologies Inc. | Third-party service provider for sending Retool Email | United States | |
| Neon, Inc. | Third-party hosting provider | United States | |
| OpenAI, LLC | Third-Party Model Provider | United States | |
| Salesforce, Inc. | Third-party service provider of customer support tools | United States | |
| Temporal Technologies, Inc. | Third-party hosting provider for Workflow orchestration; Third-party hosting provider for workflow orchestration if electing to use Retool-managed Temporal Cloud | United States |
Listed as a subprocessor by (19)
Purposes as each company states them.
BrightHire brighthire.com Internal Support Tools
CoLab colabsoftware.com Software Development Platform; Used for the development of internal tools and applications for reporting and customer support.
Cohere cohere.com Software Delivery Platform
Daily daily.co Internal admin and debug tooling
Descript descript.com
Double doublehq.com Database Management
Drata drata.com [SafeBase] Retool is a platform used to build internal tools that interact with our databases and APIs. It allows authorized team members to securely view, manage, and update data through custom user interfaces for operational and administrative purposes.
Fathom fathom.ai Data Analytics & ETL
Heron herondata.io
Inngest inngest.com
Linear linear.app Product analytics and management
NimbleRx nimblerx.com
Pilosa pilosa.com Internal tooling
Postscript postscript.io Customer Service
Prefect prefect.io Admin console for creating and managing Prefect Cloud accounts
Resend resend.com Internal admin tools
Speechmatics speechmatics.com Speechmatics portal customer management
Termly termly.io Dashboards to improve Customer Service
Voltage Park voltagepark.com
Service status
10 incidents in the last 60 days (3 major or critical, 5 minor, 2 with no stated impact) · typically resolved in 3 h 35 min · longest major: 9 h 29 min
| Began | Incident | Impact | Lasted |
|---|---|---|---|
| Retool MCP connection errors | minor | 6 h 10 min evidence | |
| Retool MCP connection failures | minor | 2 h 13 min evidence | |
| Errors running generic JDBC resource type queries | none | 3 h 35 min evidence | |
| React App Builder Sandbox Installs May Fail to Install Dependencies | major | 5 h 54 min evidence | |
| Errors or a blank preview when editing apps | none | — evidence | |
| Source Control Degradation due to Github Outage | minor | 3 h 17 min evidence | |
| Errors calling resources with Per-User authentication in Apps built with the New App Editor | major | 3 h 53 min evidence | |
| Errors saving changes in React apps | minor | 49 min evidence |
As Retool's status page reports its own incidents (scheduled maintenance left out), read every few hours since .