# Signicat

Signicat (signicat.com): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/signicat
- Documents last verified: 2026-10-04
- Transparency rating: 63/100 (how much it publishes, not how secure it is): Subprocessor list 30/30; Processing locations 8/8; Purposes 0/7 (partial); Data processing addendum 0/12 (not found); Trust center 0/8 (not found); Privacy policy 6/6; security.txt 6/6; Security page 0/5 (not found); Status page 5/5; Vulnerability disclosure 0/5 (not found); Pages still reachable 8/8
- Supply chain: relies on 8 tracked vendors directly, 79 within two hops, 241 within three; 1 tracked vendors rely on it directly, 1 within two hops, 1 within three
- Cite as: Signicat, Third Party Index, https://thirdpartyindex.com/vendors/signicat (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Subprocessor list | https://developer.signicat.com/terms/agreements/appendix-9-sub-processors/version-3.0.html | 2026-10-04 | 2026-10-04 |
| Privacy policy | https://www.signicat.com/about/privacy-policy | 2026-10-04 | 2026-10-04 |
| security.txt | https://www.signicat.com/.well-known/security.txt | 2026-10-04 | 2026-10-04 |
| Status page | https://status.signicat.com/ | 2026-10-04 | 2026-10-04 |

## Subprocessors (18)

As its own list states them.

| Subprocessor | Purpose | Location | Listed since |
|---|---|---|---|
| [46elks AB](https://thirdpartyindex.com/vendors/46elks.md) | — | EU/EEA | 2026-10-04 |
| [Amazon Web Services](https://thirdpartyindex.com/vendors/amazon-web-services.md) | — | EU/EEA4 | 2026-10-04 |
| Buypass AS | — | EU/EEA | 2026-10-04 |
| [CloudAMQP](https://thirdpartyindex.com/vendors/84codes.md) | — | EU/EEA | 2026-10-04 |
| Commify Iberia S.L. | — | EU/EEA | 2026-10-04 |
| Dokobit, UAB | — | EU/EEA | 2026-10-04 |
| [Google Cloud EMEA Limited](https://thirdpartyindex.com/vendors/google-cloud.md) | — | EU/EEA1 | 2026-10-04 |
| Infraestructures I Serveis De Telecomunicacions I Certificacio Sa. (ACCV) | — | EU/EEA | 2026-10-04 |
| [Link Mobility AS](https://thirdpartyindex.com/vendors/link-mobility-group-asa.md) | — | EU/EEA | 2026-10-04 |
| [Mailchimp](https://thirdpartyindex.com/vendors/mailchimp.md) | — | USA | 2026-10-04 |
| [Mailgun](https://thirdpartyindex.com/vendors/mailgun.md) | — | EU/EEA | 2026-10-04 |
| [MongoDB](https://thirdpartyindex.com/vendors/mongodb.md) | — | EU/EEA2 | 2026-10-04 |
| Orange Business Digital Norway | — | EU/EEA | 2026-10-04 |
| SERVINFORM, S.A. | — | EU/EEA | 2026-10-04 |
| Symphonic Solutions Limited | — | EU/EEA; UK | 2026-10-04 |
| T-Systems International GmbH | — | EU/EEA | 2026-10-04 |
| UANATACA, S.A. | — | EU/EEA | 2026-10-04 |
| Zet Solutions BV | — | EU/EEA | 2026-10-04 |

Read from ([evidence](https://thirdpartyindex.com/evidence/41240)). CSV: https://thirdpartyindex.com/vendors/signicat/subprocessors.csv

### Its own affiliates (3)

- Signicat AB (EU/EEA)
- Signicat Iceland (EU/EEA)
- Signicat S.L.U. (EU/EEA)

## Subprocessor of (1)

Tracked vendors whose own subprocessor lists name it, and what they say they use it for.

- [Firmhouse](https://thirdpartyindex.com/vendors/firmhouse.md)

## Service status

Incidents it reported on its own status page.

- Last 26 days: 26 reported incidents (1 major or critical, 25 minor, 0 with no impact stated)
- Typical time to resolve: 1 h 52 min
- Status page last read: 2026-10-04
- 2026-10-04: Incident on 3rd party service - Data Verification - KvK (minor)
- 2026-10-02: Degraded performance - DigiD (minor)
- 2026-10-01: Incident on 3rd party service - eHerkenning/KPN and Reconi (minor)
- 2026-09-30: Degraded performance - Onfido (minor)
- 2026-09-30: Incident on 3rd party service - eHerkenning - KPN (minor)
- 2026-09-29: Incident on 3rd party service - Freja eID (minor)
- 2026-09-28: Incident on 3rd party service - eHerkenning/KPN and Reconi (minor)
- 2026-09-25: Incident on 3rd party service - Norwegian BankID (eSign) (minor)

## Security contact

From its security.txt (https://www.signicat.com/.well-known/security.txt) ([evidence](https://thirdpartyindex.com/evidence/41201)):

- Contact: https://app.intigriti.com/programs/signicat/signicatresponsibledisclosure/detail
- Contact: mailto:security@signicat.com
- Disclosure policy: https://www.signicat.com/security-and-compliance
- Encryption key: https://www.signicat.com/.well-known/signicat.pub.asc
- Security jobs: https://www.signicat.com/about/careers
- Languages: en
- Valid until 2027-03-04
- Signed

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api
