# Root

Root declares [8 subprocessors](https://thirdpartyindex.com/vendors/root#subprocessors) in [its subprocessor list](https://trustcenter.aikido.dev/subprocessors), which we last checked on 2026-11-11 ([evidence](https://thirdpartyindex.com/evidence/227821)). They include [Amazon Web Services](https://thirdpartyindex.com/vendors/amazon-web-services), [Google Cloud](https://thirdpartyindex.com/vendors/google-cloud) and [OpenAI](https://thirdpartyindex.com/vendors/openai). The list last changed on 2026-11-04: 0 added, 0 removed, 8 changed. [2 tracked vendors](https://thirdpartyindex.com/vendors/root#used-by) name Root as a subprocessor, including [Textkernel](https://thirdpartyindex.com/vendors/textkernel) and [Bullhorn](https://thirdpartyindex.com/vendors/bullhorn).

Root (root.io): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/root
- Documents last verified: 2026-11-11
- Transparency rating: 87/100 (how much it publishes, not how secure it is): Subprocessor list 30/30; Processing locations 8/8; Purposes 4/7 (partial); Data processing addendum 12/12; Trust center 8/8; Privacy policy 6/6; security.txt 6/6; Security page 0/5 (not found); Status page 5/5; Vulnerability disclosure 0/5 (not found); Pages still reachable 8/8
- Supply chain: relies on 8 tracked vendors directly, 68 within two hops, 288 within three; 2 tracked vendors rely on it directly, 11 within two hops, 22 within three
- Cite as: Root, Third Party Index, https://thirdpartyindex.com/vendors/root (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Trust center | https://www.aikido.dev/trust-center | 2026-11-11 | 2026-11-02 |
| Subprocessor list | https://trustcenter.aikido.dev/subprocessors | 2026-11-11 | 2026-11-06 |
| Data processing addendum | https://www.aikido.dev/legal/dpa | 2026-11-11 | 2026-11-08 |
| Privacy policy | https://www.aikido.dev/policies/privacy | 2026-11-11 | 2026-11-09 |
| Terms | https://www.aikido.dev/policies/terms | 2026-11-11 | 2026-11-09 |
| security.txt | https://www.aikido.dev/.well-known/security.txt | 2026-11-11 | 2026-09-23 |
| Status page | https://status.aikido.dev/ | 2026-11-11 | 2026-11-11 |

## Subprocessors (8)

As its own list states them.

| Subprocessor | Purpose | Location | Listed since |
|---|---|---|---|
| [Amazon Web Services](https://thirdpartyindex.com/vendors/amazon-web-services.md) | - Aikido: Infrastructure hosting, AI inference | EU/US/ME/AP | 2026-11-06 |
| [Apideck](https://thirdpartyindex.com/vendors/apideck.md) | — | - Aikido: Task tracker integrations (optional) | 2026-11-04 |
| [Flare](https://thirdpartyindex.com/vendors/flare.md) | — | - Aikido: Dark web leaked data monitoring (optional) - Noon: Dark web leaked data monitoring | 2026-11-04 |
| [Google Cloud](https://thirdpartyindex.com/vendors/google-cloud.md) | - Aikido: AI inference - Noon: Infrastructure hosting, mail integration | EU/US | 2026-11-06 |
| [Microsoft Azure Cloud](https://thirdpartyindex.com/vendors/microsoft.md) | - Aikido: AI inference - Noon: Mail integration, AI inference | EU/US | 2026-11-04 |
| [Monad](https://thirdpartyindex.com/vendors/monad.md) | — | - Aikido: SIEM integrations (optional) | 2026-11-04 |
| [OpenAI Developer API Access](https://thirdpartyindex.com/vendors/openai.md) (AI model provider: OpenAI) | - Aikido: AI inference | EU/US | 2026-11-06 |
| [Vonage](https://thirdpartyindex.com/vendors/vonage.md) | - Noon: Delivery of vishing | EU/US | 2026-11-04 |

Read from ([evidence](https://thirdpartyindex.com/evidence/227821)). CSV: https://thirdpartyindex.com/vendors/root/subprocessors.csv

AI model providers (or a cloud provider's AI model service) among these entries: 1. All vendors that list one: https://thirdpartyindex.com/ai

## Security program

What Root, Inc.'s Form 10-K for fiscal 2025, filed Feb 25, 2026 (Item 1C) says, in its words (https://www.sec.gov/Archives/edgar/data/1788882/000178888226000014/0001788882-26-000014-index.htm).

- Led by: Chief Information Security Officer, reporting to the Company’s President and Chief Technology Officer
- Board oversight: Board of Directors
- Practices named: Incident response plan, Tabletop exercises, Security training, Phishing simulations
- Engages outside assessors or consultants
- Reviews its suppliers' security
- Says no cybersecurity incident has materially affected it

## Subprocessor of (2)

Tracked vendors whose own subprocessor lists name it, and what they say they use it for.

- [Bullhorn](https://thirdpartyindex.com/vendors/bullhorn.md): Cloud hosting services
- [Textkernel](https://thirdpartyindex.com/vendors/textkernel.md): Cloud hosting services

## Service status

Incidents it reported on its own status page.

- Last 43 days: 1 reported incidents (0 major or critical, 1 minor, 0 with no impact stated)
- Typical time to resolve: 10 h 50 min
- Status page last read: 2026-11-11
- 2026-11-02: Persistent permission popups generated by Aikido Device Protection (minor)

## Incidents reported by Root's subprocessors

Incidents reported in the last 30 days on their own status pages by 1 vendor Root lists as a subprocessor. A subprocessor list names a company, not the service an incident touched.

- 2026-11-10: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Root lists as a subprocessor, reported Incorrect cost data in Costs API exports (no impact stated)
- 2026-11-09: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Root lists as a subprocessor, reported Elevated Errors On API (minor)
- 2026-11-09: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Root lists as a subprocessor, reported Elevated ChatGPT Conversation Errors (minor)
- 2026-11-08: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Root lists as a subprocessor, reported Elevated errors with image generation (minor)
- 2026-11-06: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Root lists as a subprocessor, reported Elevated error rates with some U.S. business Mastercards (no impact stated)
- 2026-11-05: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Root lists as a subprocessor, reported ChatGPT Work and Dots Errors (minor)
- 2026-11-04: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Root lists as a subprocessor, reported Elevated error rates across paid ChatGPT plans (minor)
- 2026-11-03: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Root lists as a subprocessor, reported File upload errors in ChatGPT (minor)
- 2026-10-30: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Root lists as a subprocessor, reported Elevated errors with search in Dots, ChatGPT Work, and certain ChatGPT thinking experiences (minor)
- 2026-10-30: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Root lists as a subprocessor, reported Elevated errors for GPT Image 2 API image edits (minor)
- 2026-10-27: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Root lists as a subprocessor, reported 6.1 Sol Degraded Model Performance (minor)
- 2026-10-27: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Root lists as a subprocessor, reported Elevated error rates for most hosted Code Reviews and Security Reviews on private GitHub repositories (no impact stated)
- 2026-10-26: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Root lists as a subprocessor, reported Elevated error rates for Ads POST requests (minor)
- 2026-10-23: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Root lists as a subprocessor, reported Degraded experience with ChatGPT app connections using CIMD (minor)
- 2026-10-23: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Root lists as a subprocessor, reported Help Center Chat Support Degraded (no impact stated)
- 2026-10-23: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Root lists as a subprocessor, reported Delays in customer support responses (no impact stated)
- 2026-10-22: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Root lists as a subprocessor, reported New Ad Accounts failing to provision admins (minor)
- 2026-10-22: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Root lists as a subprocessor, reported Degraded Performance of Dots on Enterprise (minor)
- 2026-10-22: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Root lists as a subprocessor, reported Elevated ChatGPT conversation and Responses API errors (minor)
- 2026-10-21: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Root lists as a subprocessor, reported Authentication errors for some users (major)
- 2026-10-21: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Root lists as a subprocessor, reported Elevated error rates for gpt-5.6-luna API requests (minor)
- 2026-10-21: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Root lists as a subprocessor, reported Elevated FedRAMP API error rates for Astra and Sol (minor)
- 2026-10-21: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Root lists as a subprocessor, reported Degraded performance in ChatGPT, Codex, and APIs (minor)
- 2026-10-19: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Root lists as a subprocessor, reported File Download errors (minor)
- 2026-10-15: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Root lists as a subprocessor, reported Widespread feature degradation (major)
- 2026-10-14: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Root lists as a subprocessor, reported Delayed Costs data in the Compliance API (minor)
- 2026-10-14: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Root lists as a subprocessor, reported Limited availability on gpt-image-2.5-flare and gpt-image-2.5-sunburst (minor)
- 2026-10-14: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Root lists as a subprocessor, reported Degraded performance in Codex and ChatGPT Work (minor)
- 2026-10-13: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Root lists as a subprocessor, reported Degraded performance in GPT-6.1 Sol Codex and Work mode (minor)

## Recent changes

Changes to its documents and subprocessor list since monitoring began.

- 2026-11-04: Changed subprocessor: Amazon Web Services (purpose: (Aikido), Aikido: Infrastructure Hosting → Aikido: Infrastructure Hosting) ([evidence](https://thirdpartyindex.com/evidence/212568))
- 2026-11-04: Changed subprocessor: Apideck (locations: (Aikido) → Aikido: Task tracker integrations (optional); purpose: Aikido: Task tracker integrations (optional) → none) ([evidence](https://thirdpartyindex.com/evidence/212568))
- 2026-11-04: Changed subprocessor: Flare (locations: Aikido: Dark web leaked data monitoring (optional) Noon: Dark web leaked data monitoring → Aikido: Dark web leaked data monitoring (optional) - Noon: Dark web leaked data monitoring) ([evidence](https://thirdpartyindex.com/evidence/212568))
- 2026-11-04: Changed subprocessor: Google Cloud (purpose: Aikido: AI inference Noon: Hosting provider, mail integration → Aikido: AI inference - Noon: Hosting provider, mail integration) ([evidence](https://thirdpartyindex.com/evidence/212568))
- 2026-11-04: Changed subprocessor: Microsoft Azure Cloud (purpose: Aikido: AI inference Noon: Mail integration, AI inference → Aikido: AI inference - Noon: Mail integration, AI inference) ([evidence](https://thirdpartyindex.com/evidence/212568))
- 2026-11-04: Changed subprocessor: Monad (locations: (Aikido) → Aikido: SIEM integrations (optional); purpose: Aikido: SIEM integrations (optional) → none) ([evidence](https://thirdpartyindex.com/evidence/212568))
- 2026-11-04: Changed subprocessor: OpenAI Developer API Access (purpose: (Aikido), Aikido: AI Inference → Aikido: AI Inference) ([evidence](https://thirdpartyindex.com/evidence/212568))
- 2026-11-04: Changed subprocessor: Vonage (locations: (Noon) → EU/US) ([evidence](https://thirdpartyindex.com/evidence/212568))

Feed: https://thirdpartyindex.com/vendors/root/changes.atom

The subprocessor list as we read it on any date: https://thirdpartyindex.com/labs/time-machine/root

## Security contact

From its security.txt (https://www.aikido.dev/.well-known/security.txt) ([evidence](https://thirdpartyindex.com/evidence/6703)):

- Contact: https://app.intigriti.com/programs/aikido/aikido/detail
- Contact: mailto:security@aikido.dev
- Disclosure policy: https://app.intigriti.com/programs/aikido/aikido/detail
- Acknowledgments: https://app.intigriti.com/programs/aikido/aikido/detail
- Security jobs: https://www.aikido.dev/careers
- Languages: en
- Valid until 2027-02-01

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api