# Rewardful

Rewardful declares [15 subprocessors](https://thirdpartyindex.com/vendors/rewardful#subprocessors) in [its subprocessor list](https://trust.rewardful.com/subprocessors), which we last checked on 2026-11-11 ([evidence](https://thirdpartyindex.com/evidence/56341)). They include [Amazon Web Services](https://thirdpartyindex.com/vendors/amazon-web-services), [Google Cloud](https://thirdpartyindex.com/vendors/google-cloud) and [Stripe](https://thirdpartyindex.com/vendors/stripe). No published changes since we first read it on 2026-09-22. [4 tracked vendors](https://thirdpartyindex.com/vendors/rewardful#used-by) name Rewardful as a subprocessor, including [Userlist](https://thirdpartyindex.com/vendors/userlist), [Relevance AI](https://thirdpartyindex.com/vendors/relevance-ai) and [Finsweet](https://thirdpartyindex.com/vendors/finsweet).

Rewardful (rewardful.com): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/rewardful
- Documents last verified: 2026-11-11
- Transparency rating: 67/100 (how much it publishes, not how secure it is): Subprocessor list 30/30; Processing locations 8/8; Purposes 7/7; Data processing addendum 0/12 (not found); Trust center 8/8; Privacy policy 6/6; security.txt 0/6 (not found); Security page 0/5 (not found); Status page 0/5 (not found); Vulnerability disclosure 0/5 (not found); Pages still reachable 8/8
- Supply chain: relies on 15 tracked vendors directly, 144 within two hops, 475 within three; 4 tracked vendors rely on it directly, 18 within two hops, 349 within three
- Cite as: Rewardful, Third Party Index, https://thirdpartyindex.com/vendors/rewardful (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Trust center | https://trust.rewardful.com/ | 2026-11-11 | 2026-11-11 |
| Subprocessor list | https://trust.rewardful.com/subprocessors | 2026-11-11 | 2026-10-06 |
| Privacy policy | https://www.rewardful.com/privacy | 2026-11-11 | 2026-09-27 |
| Terms | https://www.rewardful.com/terms | 2026-11-11 | 2026-09-27 |

## Subprocessors (15)

As its own list states them.

| Subprocessor | Purpose | Location | Listed since |
|---|---|---|---|
| [Amazon Web Services](https://thirdpartyindex.com/vendors/amazon-web-services.md) | Cloud platform offering computing power, storage, databases, machine learning, and security tools to help businesses scale applications and manage infrastructure globally.; Cloud provider | United States | 2026-09-28 |
| [Cloudflare](https://thirdpartyindex.com/vendors/cloudflare.md) | Cloud monitoring; Cloudflare is a web platform for securing websites, optimizing traffic, and protecting against cyberattacks. | United States | 2026-09-28 |
| [DigitalOcean](https://thirdpartyindex.com/vendors/digitalocean.md) | Cloud infrastructure platform providing scalable virtual servers, storage, and networking tools for developers to deploy and manage applications efficiently.; Cloud provider | United States | 2026-09-28 |
| [GitHub](https://thirdpartyindex.com/vendors/github.md) | Platform for developers to collaborate on software projects, providing tools for version control, code hosting, and project management.; Version control | United States | 2026-09-28 |
| [Google Workspace](https://thirdpartyindex.com/vendors/google-cloud.md) | Cloud-based productivity suite offering email, document creation, storage, and collaboration tools.; Identity provider | United States | 2026-09-28 |
| [Heroku](https://thirdpartyindex.com/vendors/salesforce.md) | Cloud provider; Heroku is a cloud platform for deploying, managing, and scaling web applications | United States | 2026-09-28 |
| [HubSpot](https://thirdpartyindex.com/vendors/hubspot.md) | CRM platform offering marketing, sales, and customer service tools to manage and analyze customer interactions.; Marketing | Ireland | 2026-09-28 |
| [Intercom](https://thirdpartyindex.com/vendors/intercom.md) | Customer support; Human customer communication platform for messaging, support and engagement. | United States | 2026-09-28 |
| [jiminny](https://thirdpartyindex.com/vendors/jiminny.md) | Call Recording; cloud platform offering conversation intelligence, call recording, and sales coaching tools to help businesses improve team performance, analyze interactions, and scale sales operations globally. | Ireland | 2026-09-28 |
| [PostHog](https://thirdpartyindex.com/vendors/posthog.md) | — | Analytics | 2026-09-28 |
| [Postmark](https://thirdpartyindex.com/vendors/postmark.md) | Engineering; Postmark is a cloud platform offering transactional email delivery, tracking, and management tools to help businesses communicate efficiently and reliably with customers while ensuring high deliverability and security. | United States | 2026-09-28 |
| [Rollbar](https://thirdpartyindex.com/vendors/rollbar.md) | Cloud monitoring; Error monitoring and debugging tool for tracking, analyzing, and resolving application errors in real-time across development environments. | United States | 2026-09-28 |
| [Stripe](https://thirdpartyindex.com/vendors/stripe.md) | Finance and payments; cloud platform offering payment processing, billing, and financial tools to help businesses manage transactions, accept payments globally, and scale their online commerce efficiently. | United States | 2026-09-28 |
| [Usercentrics](https://thirdpartyindex.com/vendors/usercentrics.md) | cloud platform offering consent management, privacy compliance, and user data protection tools to help businesses manage user consent and ensure compliance with data protection regulations globally. | United States | 2026-09-28 |
| [Webflow](https://thirdpartyindex.com/vendors/webflow.md) | Marketing; platform offering web design, hosting, and content management tools to help businesses build, launch, and scale websites without needing to write code. | United States | 2026-09-28 |

Read from ([evidence](https://thirdpartyindex.com/evidence/14484)). CSV: https://thirdpartyindex.com/vendors/rewardful/subprocessors.csv

## Compliance

As its trust center lists them.

- Claimed: GDPR ([evidence](https://thirdpartyindex.com/evidence/10121))

## Web Technologies

Rewardful's homepage made 214 requests to 34 domains, and 16 services controlled by another company. Loaded on 2026-11-05 by a browser that accepted nothing; other visits may load more or less. What a page loads is not a list of who receives customer data.

16 third parties by category: Analytics 5 (LinkedIn, Meta, Known Agents; usually detected as Analytics: Cloudflare, Wingify); JavaScript libraries 3 (Webflow, Fastly; usually detected as JavaScript libraries: bunny.net); Advertising 2 (Google Cloud, Reddit, Inc.); Marketing automation 1 (HubSpot); Live chat 1 (reviewed: Intercom); Cookie compliance 1 (Usercentrics); Personalisation 1 (ConvertBox); Video players 1 (reviewed: Vimeo); Widgets 1 (Elfsight). Each company that appears controlled by another organization is counted once, under the main category of the technologies detected from it on this homepage or, when none was, the category recorded from the company's own page (marked reviewed) or else the one it is usually detected as on other published homepages (marked as such); unclassified: none of these.

### Third parties (16)

- Webflow: 101 requests to website-files.com, d3e54v103j8qbb.cloudfront.net; Webflow 1.6.0, jQuery 3.5.1 (its subprocessor list names it too)
- Vimeo: 30 requests to vimeocdn.com, vimeo.com
- Google Cloud: 29 requests to gstatic.com, google.com, doubleclick.net, googletagmanager.com, ajax.googleapis.com, fonts.googleapis.com; DoubleClick Floodlight, Google Analytics, Google Font API, Google Hosted Libraries, Google Tag Manager (its subprocessor list names it too)
- Usercentrics: 9 requests to usercentrics.eu; Usercentrics (its subprocessor list names it too)
- HubSpot: 8 requests to hs-scripts.com, hscollectedforms.net, hs-analytics.net, hs-banner.com, hubspot.com; HubSpot (its subprocessor list names it too)
- ConvertBox: 6 requests to convertbox.com; ConvertBox
- Elfsight: 6 requests to elfsight.com, elfsightcdn.com; Elfsight
- Intercom: 5 requests to intercom.io, intercomcdn.com (its subprocessor list names it too)
- LinkedIn: 3 requests to linkedin.com, licdn.com; Linkedin Insight Tag
- Meta: 3 requests to facebook.net, facebook.com; Facebook Pixel 2.9.435
- Reddit, Inc.: 3 requests to reddit.com, redditstatic.com; Reddit Ads
- Cloudflare: 2 requests to cloudflare.com (its subprocessor list names it too)
- Wingify: 2 requests to visualwebsiteoptimizer.com
- Fastly: 1 request to polyfill-fastly.io; Fastly Polyfill
- Known Agents: 1 request to knownagents.com; Known Agents
- bunny.net: 1 request to bunny.net

### First party (1)

- Rewardful: 4 requests to rewardful.com, getrewardful.com; Cloudflare, Cloudflare Turnstile, HSTS, HTTP/3, Howler.js, Intercom, Open Graph, React, Rewardful, Vimeo, Webpack, styled-components 6.5.3

6 tracked companies loaded by the homepage are not in Rewardful's subprocessor list. A website can use a service without it processing customer data.

## Subprocessor of (4)

Tracked vendors whose own subprocessor lists name it, and what they say they use it for.

- [Finsweet](https://thirdpartyindex.com/vendors/finsweet.md): Affiliate Marketing; Referral program tracking and management.
- [Relevance AI](https://thirdpartyindex.com/vendors/relevance-ai.md): Affiliate marketing; Sales
- [Storydoc](https://thirdpartyindex.com/vendors/storydoc.md): Affiliate and referral tracking
- [Userlist](https://thirdpartyindex.com/vendors/userlist.md): Affiliate program

## Incidents reported by Rewardful's subprocessors

Incidents reported in the last 30 days on their own status pages by 8 vendors Rewardful lists as subprocessors. A subprocessor list names a company, not the service an incident touched.

- 2026-11-11: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Rewardful lists as a subprocessor, reported Impact across multiple GitHub products including Actions, Pages, and Copilot products. (critical)
- 2026-11-11: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Rewardful lists as a subprocessor, reported Incident with Webhooks (minor)
- 2026-11-10: [Webflow](https://thirdpartyindex.com/vendors/webflow#status), which Rewardful lists as a subprocessor, reported Reports of form notification emails not being delivered to customers in the US (major)
- 2026-11-10: [HubSpot](https://thirdpartyindex.com/vendors/hubspot#status), which Rewardful lists as a subprocessor, reported Some HubSpot tools may be unavailable for some users (no impact stated)
- 2026-11-10: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Rewardful lists as a subprocessor, reported Incident with Git Operations and Pull Requests (critical)
- 2026-11-09: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Rewardful lists as a subprocessor, reported Degraded availability for GPT-5.3 Codex and GPT-5.6 models in Copilot (major)
- 2026-11-09: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Rewardful lists as a subprocessor, reported Incident with Actions and Checks API (critical)
- 2026-11-09: [Webflow](https://thirdpartyindex.com/vendors/webflow#status), which Rewardful lists as a subprocessor, reported \[RESOLVED\] Reports of issues deploying Cloud apps (major)
- 2026-11-09: [Webflow](https://thirdpartyindex.com/vendors/webflow#status), which Rewardful lists as a subprocessor, reported \[RESOLVED\] Reports of intermittent issues accessing some hosted sites (no impact stated)
- 2026-11-09: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Rewardful lists as a subprocessor, reported Incident with Webhooks and Actions (major)
- 2026-11-09: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Rewardful lists as a subprocessor, reported Increased timeouts due to surge in anonymous users (minor)
- 2026-11-08: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Rewardful lists as a subprocessor, reported Increase in timeouts for some unauthenticated users (minor)
- 2026-11-06: [Intercom](https://thirdpartyindex.com/vendors/intercom#status), which Rewardful lists as a subprocessor, reported Elevated errors and latencies in the European hosting region. (major)
- 2026-11-05: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Rewardful lists as a subprocessor, reported Degraded performance for multiple GitHub services (minor)
- 2026-11-05: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Rewardful lists as a subprocessor, reported Incident with Actions (minor)
- 2026-11-05: [Postmark](https://thirdpartyindex.com/vendors/postmark#status), which Rewardful lists as a subprocessor, reported Delays in activity data (no impact stated)
- 2026-11-04: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Rewardful lists as a subprocessor, reported Incident with Actions (major)
- 2026-11-04: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Rewardful lists as a subprocessor, reported Incident with Actions and Pages (major)
- 2026-11-04: [Postmark](https://thirdpartyindex.com/vendors/postmark#status), which Rewardful lists as a subprocessor, reported Delays processing Inbound messages (no impact stated)
- 2026-11-04: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Rewardful lists as a subprocessor, reported Incident with Pull Requests, Git Operations and Issues (major)
- 2026-11-04: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Rewardful lists as a subprocessor, reported Increased task-related errors for Copilot Mission Control (minor)
- 2026-11-04: [Webflow](https://thirdpartyindex.com/vendors/webflow#status), which Rewardful lists as a subprocessor, reported \[RESOLVED\] Reports of issues accessing the Dashboard for some customers (critical)
- 2026-11-03: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Rewardful lists as a subprocessor, reported Incident with Git Operations (minor)
- 2026-11-03: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Rewardful lists as a subprocessor, reported Incident with API, Git, and Copilot requests (minor)
- 2026-11-02: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Rewardful lists as a subprocessor, reported Elevated errors on GPT-5.4 Nano (minor)
- 2026-11-02: [HubSpot](https://thirdpartyindex.com/vendors/hubspot#status), which Rewardful lists as a subprocessor, reported HubSpot is experiencing issues (no impact stated)
- 2026-11-01: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Rewardful lists as a subprocessor, reported Elevated Instant Payouts failures (no impact stated)
- 2026-10-30: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Rewardful lists as a subprocessor, reported Incident with Dependabot (minor)
- 2026-10-30: [Intercom](https://thirdpartyindex.com/vendors/intercom#status), which Rewardful lists as a subprocessor, reported Slow Fin Procedures (minor)
- 2026-10-30: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Rewardful lists as a subprocessor, reported Incident with Actions, Pages, and Webhooks (major)
- 2026-10-30: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Rewardful lists as a subprocessor, reported Disruption with GitHub services (critical)
- 2026-10-29: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Rewardful lists as a subprocessor, reported Disruption with Copilot Cloud services (minor)
- 2026-10-28: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Rewardful lists as a subprocessor, reported Elevated Issuing errors from 17:13 - 20:41 UTC (minor)
- 2026-10-28: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Rewardful lists as a subprocessor, reported Disruption with some Copilot services (critical)
- 2026-10-28: [rollbar](https://thirdpartyindex.com/vendors/rollbar#status), which Rewardful lists as a subprocessor, reported Increased occurrence processing pipeline latency (minor)
- 2026-10-27: [DigitalOcean](https://thirdpartyindex.com/vendors/digitalocean#status), which Rewardful lists as a subprocessor, reported Kubernetes Cluster Management Operations (major)
- 2026-10-27: [Postmark](https://thirdpartyindex.com/vendors/postmark#status), which Rewardful lists as a subprocessor, reported SMS codes for two-factor authentication may not arrive (no impact stated)
- 2026-10-27: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Rewardful lists as a subprocessor, reported Elevated 404s for GitHub App s2s tokens in git/API (no impact stated)
- 2026-10-26: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Rewardful lists as a subprocessor, reported Incident with Actions, Issues, API Requests and Pull Requests (minor)
- 2026-10-24: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Rewardful lists as a subprocessor, reported Elevated Blik errors (no impact stated)
- 2026-10-23: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Rewardful lists as a subprocessor, reported Grok 4.6 and Grok 4.7 Service Issues (minor)
- 2026-10-23: [HubSpot](https://thirdpartyindex.com/vendors/hubspot#status), which Rewardful lists as a subprocessor, reported Some HubSpot tools may be unavailable for some users (no impact stated)
- 2026-10-23: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Rewardful lists as a subprocessor, reported Disruption with Dependabot Alerts (minor)
- 2026-10-23: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Rewardful lists as a subprocessor, reported Delayed Actions status check results (minor)
- 2026-10-22: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Rewardful lists as a subprocessor, reported Elevated Bancontact errors (no impact stated)
- 2026-10-22: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Rewardful lists as a subprocessor, reported Project updates delayed (minor)
- 2026-10-22: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Rewardful lists as a subprocessor, reported Elevated Bancontact errors (no impact stated)
- 2026-10-22: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Rewardful lists as a subprocessor, reported Incident with Actions (minor)
- 2026-10-22: [HubSpot](https://thirdpartyindex.com/vendors/hubspot#status), which Rewardful lists as a subprocessor, reported Update on PHP security vulnerability (no impact stated)
- 2026-10-21: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Rewardful lists as a subprocessor, reported Delays for Pull Requests and Webhook deliveries (critical)
- 2026-10-20: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Rewardful lists as a subprocessor, reported Spike in cancellations and expired errors with PayByBank payments (no impact stated)
- 2026-10-20: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Rewardful lists as a subprocessor, reported Elevated Revolut Pay errors (no impact stated)
- 2026-10-19: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Rewardful lists as a subprocessor, reported Degraded availability for GitHub Actions, GitHub Pages and Webhooks (critical)
- 2026-10-15: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Rewardful lists as a subprocessor, reported Elevated declines on Mastercard (no impact stated)
- 2026-10-15: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Rewardful lists as a subprocessor, reported CCA Automations are delayed when starting an Automation (minor)
- 2026-10-15: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Rewardful lists as a subprocessor, reported Elevated declines on Visa (no impact stated)
- 2026-10-15: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Rewardful lists as a subprocessor, reported Elevated Amazon Pay errors (no impact stated)
- 2026-10-14: [Intercom](https://thirdpartyindex.com/vendors/intercom#status), which Rewardful lists as a subprocessor, reported Customer contact details showing up as "Redacted" in the Intercom Inbox (minor)
- 2026-10-13: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Rewardful lists as a subprocessor, reported \[Retroactive\] Actions workflow run logs delayed (minor)
- 2026-10-13: [DigitalOcean](https://thirdpartyindex.com/vendors/digitalocean#status), which Rewardful lists as a subprocessor, reported App Platform Deployments (no impact stated)

The subprocessor list as we read it on any date: https://thirdpartyindex.com/labs/time-machine/rewardful

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api
