Third Party Index

Snyk

snyk.io

Transparency

Exemplary

Breakdown
Subprocessor list30 / 30
Processing locationspartial7 / 8
Purposes7 / 7
Data processing addendum12 / 12
Trust center8 / 8
Privacy policy6 / 6
security.txt6 / 6
Security page5 / 5
Status page5 / 5
Vulnerability disclosurenot found0 / 5
Pages still reachable8 / 8
Total94 / 100

Only documents we can retrieve count: a page behind a login or a broken link scores nothing.

Badge

Snyk transparency rating

For Snyk's own site; it updates with the rating.

<a href="https://thirdpartyindex.com/vendors/snyk"><img src="https://thirdpartyindex.com/badge/snyk.svg" alt="Snyk transparency rating on Third Party Index" height="20"></a>
[![Snyk transparency rating on Third Party Index](https://thirdpartyindex.com/badge/snyk.svg)](https://thirdpartyindex.com/vendors/snyk)

Documents

DocumentVerifiedChangedEvidence
Trust center vanta snapshot
Subprocessor list vanta snapshot
Data processing addendum snapshot
Privacy policy snapshot
Terms snapshot
Security page snapshot
security.txt snapshot
Status page statuspage snapshot

Subprocessors

20 third parties. CSV · Atom

NamePurposeLocationListed since
Akamai Technologies, Inc. Engineering; SnykContent Delivery Network provider - Snyk uses the CDN for managing user traffic on its products and services. Developer personal data may be included in the short term data cache for this service.
Amazon Web Services (AWS) IT; SaaS Services hosting provider serving as the backbone of our infrastructure for several of our products and Services. AWS may have access to all Customer Data. However, as a general principle, AWS will not access any Customer instances of the Snyk Services except in limited cases such as to investigate service issues.Data can be hosted in the U.S., EU or Australia at Customer’s election. May be accessed globally by Snyk employees.
Amplitude, Inc. Data analytics; Snyk uses Amplitude to obtain usage analytics in relation to its products and services. To compile these analytics, Amplitude may access personal data relating to a user’s use of Snyk’s services, their features and functionality. Snyk uses these analytics to optimize and improve its offerings.Hosted in the U.S. May be accessed globally by Snyk employees.
Confluent, Inc. IT; Snyk uses Confluent, a data pipeline service, for real-time communication and data streaming between systems that compose the Services. Confluent keeps disparate data sources at Snyk in sync.Hosted in the U.S. May be accessed globally by Snyk employees.
CrowdStrike, Inc. CrowdStrike provides cybersecurity services to Snyk, including threat intelligence and endpoint protection, to safeguard Snyk's digital infrastructure, products and services. Processing of developer personal data is not its primary purpose, but may occur incidentally as part of the services.; SecurityHosted in the US or EU (Frankfurt, Germany). May be accessed globally by Snyk employees.
Datadog, Inc. Datadog provides application monitoring and logging services for the Snyk products and services. Processing of developer personal data is not its primary purpose, but may occur incidentally as part of the services.; SecurityHosted in the U.S. May be accessed globally by Snyk employees.
DBT Labs, Inc. DBT is a transformation tool used to configure data, which may include developer personal data, stored in Snowflake. DBT serves as a tool to provide meaningful insights on our products and services.; Data analyticsHosted in the U.S. May be accessed globally by Snyk employees.
Functional Software, Inc. (Sentry) Cloud monitoring; Sentry is a debugging and support tool used by Snyk to collect automated error reports relating to users of Snyk’s services. This allows Snyk to obtain details about these errors and to resolve them more efficiently. Processing of developer personal data is not its primary purpose, but may occur incidentally as part of the services.Hosted in the U.S. May be accessed globally by Snyk employees.
Google Cloud Platform Cloud provider; Communication tool for all employees within the organization. Gmail, a part of Google Workspace, offers a user-friendly interface and robust features that enhance productivity, collaboration, and information sharing among team members. Overall, Gmail serves as our organization’s primary internal email subprocessor, fostering efficient communication and collaboration while maintaining a high level of security and data privacy. Snyk also uses Google Drive and other products in the Workspace suite to facilitate collaboration and information sharing internally and with customers.Hosted in the U.S. May be accessed globally by Snyk employees.
Google Drive Communication tool for all employees within the organization. Gmail, a part of Google Workspace, offers a user-friendly interface and robust features that enhance productivity, collaboration, and information sharing among team members. Overall, Gmail serves as our organization’s primary internal email subprocessor, fostering efficient communication and collaboration while maintaining a high level of security and data privacy. Snyk also uses Google Drive and other products in the Workspace suite to facilitate collaboration and information sharing internally and with customers.; Document managementHosted in the U.S. May be accessed globally by Snyk employees.
Looker Data analytics; Looker is a modern data platform that enables Snyk to explore, analyze, and visualize data. It streamlines data-driven decision-making by providing insights across various departments. In Looker, Snyk creates dashboards, making it easier to understand complex datasets, discover trends and support day-to-day operation of our products and services. Personal data may be an input into Looker via Snowflake and DBT.Hosted in the EU. May be accessed globally by Snyk employees.
MongoDB Data storage and processing; Snyk’s products and services rely on MongoDB’s Atlas tool to efficiently manage and store diverse data types as part of our data processing pipeline. MongoDB plays a crucial role in enabling seamless data storage, retrieval, and manipulation, contributing to our ability to handle high volumes of data with ease.Data can be hosted in the U.S., EU or Australia depending on Customer’s selection with respect to Customer’s hosting location.
Okta Auth0 serves as an identity provider which is used to authenticate users of Snyk’s services. To perform this authentication, Auth0 will have access to personal data of the users.; ITHosted in the U.S, EU or Australia at Customer’s election. May be accessed globally by Snyk employees.
Orca Security UK Ltd Orca is a Cloud Security Posture Management tool that facilitates Snyk’s managing and monitoring of its cloud assets which host and process Customer Data.; SecurityHosted in the EU. May be accessed globally by Snyk employees.
Salesforce.com, Inc. Customer Relationship Management System - Salesforce will process all personal data listed on Schedule 1 of the DPA. Salesforce allows Snyk to manage all of our customer relationships and engagements as a central repository and source of truth. Details such as the products and services customers have purchased, Snyk’s engagement with customers and key points of contact are all managed in Salesforce. Snyk also uses Salesforce to operate its service desk and as its ticketing provider for professional and technical support. Customer details are requested as part of creating and handling a ticket.; SalesHosted in the U.S. May be accessed globally by Snyk employees.
Shoreline Labs, Inc. (d/b/a Nightfall) Nightfall is a data security and compliance platform that helps detect and protect sensitive data (including Personal Data). It is integrated with various internal tools used by Snyk, for example, Slack, and scans these tools to detect if sensitive data is shared within them. If any such data is detected, an alert will be generated, which could contain Personal Data.; SecurityHosted in the U.S. May be accessed globally by Snyk employees.
Slack Technologies Limited Slack is one of Snyk’s key internal communications systems. Snyk team members use Slack to facilitate service provision and provide customer support expeditiously. Team members may include Customer Data and personal data in internal conversations to optimize service provision.Slack services are hosted in the United States, but processing may occur globally wherever Snyk users access the services.
Snowflake, Inc. Snowflake is our data warehouse where we host data to facilitate business intelligence and analytics. Personal data is hosted within Snowflake for the purposes of providing and optimizing the Snyk products and services.
Sublime, Security Inc. Security; Sublime Security provides email security solutions to Snyk. It conducts security scans of emails transmitted to Snyk’s Gmail accounts to detect and flag potentially dangerous emails. If customer data or personal data is transmitted to Snyk in any such emails, Sublime Security may scan that data.Hosted in the U.S. May be accessed globally by Snyk employees.
Twilio Ireland Limited (Segment.io) Sales; Segment facilitates managing customer data, enabling Snyk to collect, centralize, and unify data from various system inputs. As a customer data platform, Segment plays an instrumental role in enhancing our understanding of customer behavior.Hosted in the U.S. May be accessed globally by Snyk employees.

Listed as a subprocessor by (1)

Purposes as each company states them.

Changes

None since tracking began.