# Runlayer

Runlayer (runlayer.com): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/runlayer
- Documents last verified: 2026-10-02
- Transparency rating: 66/100 (how much it publishes, not how secure it is): Subprocessor list 30/30; Processing locations 8/8; Purposes 7/7; Data processing addendum 0/12 (not found); Trust center 8/8; Privacy policy 0/6 (not found); security.txt 0/6 (not found); Security page 5/5; Status page 0/5 (not found); Vulnerability disclosure 0/5 (not found); Pages still reachable 8/8
- Supply chain: relies on 4 tracked vendors directly, 35 within two hops, 191 within three; 2 tracked vendors rely on it directly, 32 within two hops, 125 within three
- Cite as: Runlayer, Third Party Index, https://thirdpartyindex.com/vendors/runlayer (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Trust center | https://trust.runlayer.com/ | 2026-10-02 | 2026-10-01 |
| Subprocessor list | https://trust.runlayer.com/subprocessors | 2026-10-02 | 2026-09-30 |
| Security page | https://www.runlayer.com/solutions/it-security | 2026-10-02 | 2026-09-30 |

## Subprocessors (4)

As its own list states them.

| Subprocessor | Purpose | Location | Listed since |
|---|---|---|---|
| [Amazon Web Services](https://thirdpartyindex.com/vendors/amazon-web-services.md) | Services used are ECS/EKS, RDS (Aurora PostgreSQL, ElastiCache (Redis), S3, KMS, Secrets Manager | Cloud Provider | 2026-09-30 |
| [Sentry](https://thirdpartyindex.com/vendors/sentry.md) | Application performance monitoring, error tracking, telemetry (with Sentry Relay for PII scrubbing) | Cloud Monitoring | 2026-09-30 |
| [Slack](https://thirdpartyindex.com/vendors/slack.md) | Integration for notifications and agent workflows | Notifications | 2026-09-30 |
| [WorkOS](https://thirdpartyindex.com/vendors/workos.md) | Authentication & identity (SSO/SAML, OIDC, SCIM 2.0 directory sync, MFA) | Auth & Identity | 2026-09-30 |

Read from ([evidence](https://thirdpartyindex.com/evidence/25597)). CSV: https://thirdpartyindex.com/vendors/runlayer/subprocessors.csv

## Compliance

As its trust center lists them.

- Audited: SOC 2 Type II ([evidence](https://thirdpartyindex.com/evidence/25327))
- Claimed: HIPAA, GDPR ([evidence](https://thirdpartyindex.com/evidence/25327))

## Subprocessor of (2)

Tracked vendors whose own subprocessor lists name it, and what they say they use it for.

- [Notion](https://thirdpartyindex.com/vendors/notion.md): Security for MCP connections
- [Notion](https://thirdpartyindex.com/vendors/notion-com.md): Security for MCP connections

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api