# Sawtooth Software

Sawtooth Software (sawtoothsoftware.com): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/sawtooth-software
- Documents last verified: 2026-10-04
- Transparency rating: 79/100 (how much it publishes, not how secure it is): Subprocessor list 30/30; Processing locations 8/8; Purposes 7/7; Data processing addendum 12/12; Trust center 8/8; Privacy policy 6/6; security.txt 0/6 (not found); Security page 0/5 (not found); Status page 0/5 (not found); Vulnerability disclosure 0/5 (not found); Pages still reachable 8/8
- Supply chain: relies on 7 tracked vendors directly, 87 within two hops, 306 within three; 1 tracked vendors rely on it directly, 2 within two hops, 3 within three
- Cite as: Sawtooth Software, Third Party Index, https://thirdpartyindex.com/vendors/sawtooth-software (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Trust center | https://trust.sawtoothsoftware.com/ | 2026-10-04 | 2026-10-04 |
| Subprocessor list | https://trust.sawtoothsoftware.com/?itemUid=e3fae2ca-94a9-416b-b577-5c90e382df57 | 2026-10-04 | 2026-10-04 |
| Data processing addendum | https://content.sawtoothsoftware.com/assets/ff897dc0-ab83-4174-85b7-6de2abeb882b | 2026-10-04 | 2026-10-04 |
| Privacy policy | https://sawtoothsoftware.com/privacy-policy | 2026-10-04 | 2026-10-04 |
| Terms | https://sawtoothsoftware.com/terms-of-use | 2026-10-04 | 2026-10-04 |

## Subprocessors (13)

As its own list states them.

| Subprocessor | Purpose | Location | Listed since |
|---|---|---|---|
| [Amazon Web Services (AWS)](https://thirdpartyindex.com/vendors/amazon-web-services.md) | Providing Sawtooth with hosting server tools and cloud space | US, EU, Global | 2026-10-04 |
| Bettermode | Providing a customizable community forum for Sawtooth account users/forum members | US and/or Canada | 2026-10-04 |
| [DocuSign](https://thirdpartyindex.com/vendors/docusign.md) | Generating contract execution process and storing signatures, timestamps, and parties’ personal information. | US | 2026-10-04 |
| [Drata](https://thirdpartyindex.com/vendors/drata.md) | Providing compliance management and vendor risk and information management. | US | 2026-10-04 |
| [HubSpot](https://thirdpartyindex.com/vendors/hubspot.md) | AI Features via Open AI - Automated processing of support (i.e., support@sawtooth.com) and sales (i.e., sales@sawtooth.com) email content to generate concise summaries and recommended response actions.; Processing prospective and existing customer contact information and sales-related documents and notes; processing help support | US | 2026-10-04 |
| [Microsoft](https://thirdpartyindex.com/vendors/microsoft.md) (AI model provider: Azure OpenAI) | Microsoft Azure AI Foundry - When Data Subjects (i.e., Users and/or Survey Respondents) interact with Sawtooth’s AI help agent or a product AI feature, prompts and answers of the Data Subjects and the resulting outputs are processed/transferred. | US | 2026-10-04 |
| [Microsoft 365](https://thirdpartyindex.com/vendors/microsoft.md) | Processing and transferring email content, attachments, messages, invitations, and recordings. | US | 2026-10-04 |
| [Microsoft Azure](https://thirdpartyindex.com/vendors/microsoft.md) | Providing Sawtooth with hosting server tools and cloud space | US | 2026-10-04 |
| [QuickBooks](https://thirdpartyindex.com/vendors/intuit.md) | Processing invoices, account receivable, and accounts payable information | US | 2026-10-04 |
| Rackspace Technology | Providing Sawtooth with hosting server tools and cloud space | US | 2026-10-04 |
| [SafeBase](https://thirdpartyindex.com/vendors/drata.md) | Trust Center hosting and access management. | US | 2026-10-04 |
| Stova | Processing event registrant information | US | 2026-10-04 |
| [Stripe](https://thirdpartyindex.com/vendors/stripe.md) | Processing credit card payment information | US and/or Ireland | 2026-10-04 |

Read from ([evidence](https://thirdpartyindex.com/evidence/41238)). CSV: https://thirdpartyindex.com/vendors/sawtooth-software/subprocessors.csv

AI model providers (or a cloud provider's AI model service) among these entries: 1. All vendors that list one: https://thirdpartyindex.com/ai

## Compliance

As its trust center lists them.

- Audited: SOC 2 Type II, PCI DSS ([evidence](https://thirdpartyindex.com/evidence/41228))
- Claimed: GDPR ([evidence](https://thirdpartyindex.com/evidence/41228))

## Subprocessor of (1)

Tracked vendors whose own subprocessor lists name it, and what they say they use it for.

- [Nectar HR](https://thirdpartyindex.com/vendors/nectar-hr.md): Customer survey technology

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api