Snyk
Snyk declares 20 subprocessors in its subprocessor list, which we last checked on Nov 11, 2026 (evidence). They include Amazon Web Services, Google Cloud and Slack. No published changes since we first read it on Sep 23, 2026. 8 tracked vendors name Snyk as a subprocessor, including Meridian AI, Serverless Framework and Cloudevolve.
Not loaded by any published homepage.
Subprocessors CSV of Snyk's subprocessors · Atom feed of Snyk's subprocessors DORA draft CSV of Snyk's subprocessors as declared by Snyk what's this? ·
20 third parties.
| Name | Purpose | Location | Listed since |
|---|---|---|---|
| Akamai Technologies, Inc. | Engineering; SnykContent Delivery Network provider - Snyk uses the CDN for managing user traffic on its products and services. Developer personal data may be included in the short term data cache for this service. | ||
| Amazon Web Services (AWS) | IT; SaaS Services hosting provider serving as the backbone of our infrastructure for several of our products and Services. AWS may have access to all Customer Data. However, as a general principle, AWS will not access any Customer instances of the Snyk Services except in limited cases such as to investigate service issues. | Data can be hosted in the U.S., EU or Australia at Customer’s election. May be accessed globally by Snyk employees. | |
| Amplitude, Inc. | Data analytics; Snyk uses Amplitude to obtain usage analytics in relation to its products and services. To compile these analytics, Amplitude may access personal data relating to a user’s use of Snyk’s services, their features and functionality. Snyk uses these analytics to optimize and improve its offerings. | Hosted in the U.S. May be accessed globally by Snyk employees. | |
| Confluent, Inc. | IT; Snyk uses Confluent, a data pipeline service, for real-time communication and data streaming between systems that compose the Services. Confluent keeps disparate data sources at Snyk in sync. | Hosted in the U.S. May be accessed globally by Snyk employees. | |
| CrowdStrike, Inc. | CrowdStrike provides cybersecurity services to Snyk, including threat intelligence and endpoint protection, to safeguard Snyk's digital infrastructure, products and services. Processing of developer personal data is not its primary purpose, but may occur incidentally as part of the services.; Security | Hosted in the US or EU (Frankfurt, Germany). May be accessed globally by Snyk employees. | |
| Datadog, Inc. | Datadog provides application monitoring and logging services for the Snyk products and services. Processing of developer personal data is not its primary purpose, but may occur incidentally as part of the services.; Security | Hosted in the U.S. May be accessed globally by Snyk employees. | |
| DBT Labs, Inc. | DBT is a transformation tool used to configure data, which may include developer personal data, stored in Snowflake. DBT serves as a tool to provide meaningful insights on our products and services.; Data analytics | Hosted in the U.S. May be accessed globally by Snyk employees. | |
| Functional Software, Inc. (Sentry) | Cloud monitoring; Sentry is a debugging and support tool used by Snyk to collect automated error reports relating to users of Snyk’s services. This allows Snyk to obtain details about these errors and to resolve them more efficiently. Processing of developer personal data is not its primary purpose, but may occur incidentally as part of the services. | Hosted in the U.S. May be accessed globally by Snyk employees. | |
| Google Cloud Platform | Cloud provider; Communication tool for all employees within the organization. Gmail, a part of Google Workspace, offers a user-friendly interface and robust features that enhance productivity, collaboration, and information sharing among team members. Overall, Gmail serves as our organization’s primary internal email subprocessor, fostering efficient communication and collaboration while maintaining a high level of security and data privacy. Snyk also uses Google Drive and other products in the Workspace suite to facilitate collaboration and information sharing internally and with customers. | Hosted in the U.S. May be accessed globally by Snyk employees. | |
| Google Drive | Communication tool for all employees within the organization. Gmail, a part of Google Workspace, offers a user-friendly interface and robust features that enhance productivity, collaboration, and information sharing among team members. Overall, Gmail serves as our organization’s primary internal email subprocessor, fostering efficient communication and collaboration while maintaining a high level of security and data privacy. Snyk also uses Google Drive and other products in the Workspace suite to facilitate collaboration and information sharing internally and with customers.; Document management | Hosted in the U.S. May be accessed globally by Snyk employees. | |
| Looker | Data analytics; Looker is a modern data platform that enables Snyk to explore, analyze, and visualize data. It streamlines data-driven decision-making by providing insights across various departments. In Looker, Snyk creates dashboards, making it easier to understand complex datasets, discover trends and support day-to-day operation of our products and services. Personal data may be an input into Looker via Snowflake and DBT. | Hosted in the EU. May be accessed globally by Snyk employees. | |
| MongoDB | Data storage and processing; Snyk’s products and services rely on MongoDB’s Atlas tool to efficiently manage and store diverse data types as part of our data processing pipeline. MongoDB plays a crucial role in enabling seamless data storage, retrieval, and manipulation, contributing to our ability to handle high volumes of data with ease. | Data can be hosted in the U.S., EU or Australia depending on Customer’s selection with respect to Customer’s hosting location. | |
| Okta | Auth0 serves as an identity provider which is used to authenticate users of Snyk’s services. To perform this authentication, Auth0 will have access to personal data of the users.; IT | Hosted in the U.S, EU or Australia at Customer’s election. May be accessed globally by Snyk employees. | |
| Orca Security UK Ltd | Orca is a Cloud Security Posture Management tool that facilitates Snyk’s managing and monitoring of its cloud assets which host and process Customer Data.; Security | Hosted in the EU. May be accessed globally by Snyk employees. | |
| Salesforce.com, Inc. | Customer Relationship Management System - Salesforce will process all personal data listed on Schedule 1 of the DPA. Salesforce allows Snyk to manage all of our customer relationships and engagements as a central repository and source of truth. Details such as the products and services customers have purchased, Snyk’s engagement with customers and key points of contact are all managed in Salesforce. Snyk also uses Salesforce to operate its service desk and as its ticketing provider for professional and technical support. Customer details are requested as part of creating and handling a ticket.; Sales | Hosted in the U.S. May be accessed globally by Snyk employees. | |
| Shoreline Labs, Inc. (d/b/a Nightfall) | Nightfall is a data security and compliance platform that helps detect and protect sensitive data (including Personal Data). It is integrated with various internal tools used by Snyk, for example, Slack, and scans these tools to detect if sensitive data is shared within them. If any such data is detected, an alert will be generated, which could contain Personal Data.; Security | Hosted in the U.S. May be accessed globally by Snyk employees. | |
| Slack Technologies Limited | Slack is one of Snyk’s key internal communications systems. Snyk team members use Slack to facilitate service provision and provide customer support expeditiously. Team members may include Customer Data and personal data in internal conversations to optimize service provision. | Slack services are hosted in the United States, but processing may occur globally wherever Snyk users access the services. | |
| Snowflake, Inc. | Snowflake is our data warehouse where we host data to facilitate business intelligence and analytics. Personal data is hosted within Snowflake for the purposes of providing and optimizing the Snyk products and services. | ||
| Sublime, Security Inc. | Security; Sublime Security provides email security solutions to Snyk. It conducts security scans of emails transmitted to Snyk’s Gmail accounts to detect and flag potentially dangerous emails. If customer data or personal data is transmitted to Snyk in any such emails, Sublime Security may scan that data. | Hosted in the U.S. May be accessed globally by Snyk employees. | |
| Twilio Ireland Limited (Segment.io) | Sales; Segment facilitates managing customer data, enabling Snyk to collect, centralize, and unify data from various system inputs. As a customer data platform, Segment plays an instrumental role in enhancing our understanding of customer behavior. | Hosted in the U.S. May be accessed globally by Snyk employees. |
Web TechnologiesCSV of Snyk's web technologies · Atom feed of Snyk's web technologies
Snyk's homepage made 210 requests to 34 domains, 22 services controlled by another company, and 1 domain not identified.
22 third parties by category: Advertising 8Analytics 4Marketing automation 3Live chat 1Cookie compliance 1CDN 1Other 4
Third parties 22 · 157 requests
Qualified.com, Inc. Qualified 40
6Sense Insights, Inc. 6sense 19
Trendemon Trendemon 12
X Corp. Twitter Ads 5
Reddit, Inc. Reddit Ads 3
The Trade Desk, Inc. theTradeDesk 3
Yahoo yimg.com, yahoo.com 3
Intentsify, LLC Intentsify 1
Unknown 1 · 1 request
usbrowserspeed.com
First party 1 · 52 requests
Snyk Cloudinary Framer Motion HSTS Next.js 16.4.3 Next.js App Router Open Graph Priority Hints React Sentry Turbopack Vercel Vercel Analytics Vercel Speed Insights 2.0.0 Webpack 52
12 tracked companies loaded by the homepage are not in Snyk's subprocessor list. A website can use a service without it processing customer data.
Subprocessor of (8)CSV of the companies listing Snyk · Atom feed of the companies listing Snyk
Cloudevolve cloudevolve.com Software composition analysis and vulnerability scanning
INVIDI Technologies invidi.com Developer Security Platform
Meridian AI meridian-ai.com Code security scanning; Scans Meridian's source code and open source dependencies for security vulnerabilities. Data processed: Meridian source code and dependency data.
Pendula pendula.com
QuilrAI quilr.ai
Serverless Framework serverless.com Security; Security tooling used to identify and remediate vulnerabilities in application code and dependencies.
StudyFetch studyfetch.com
SuccessKPI successkpi.com Security
ComplianceCSV of Snyk's compliance · Atom feed of Snyk's compliance
FedRAMP Marketplace
| Offering | Status | Impact | Agencies | Since |
|---|---|---|---|---|
| Snyk for Government | Authorized | Moderate | 2 |
Certifications as Snyk's trust center lists them; reports are usually shared on request (evidence) FedRAMP status from the FedRAMP Marketplace (evidence)
Service statusCSV of Snyk's status page incidents · Atom feed of Snyk's status page incidents
- minor Intermittent failures for Go-based projects
- minor The status page says: Partially Degraded Service · SNYK-US-01 (app.snyk.io): degraded performance
90 days agotoday
- 26 incidents in 90 days
- 4 major or critical
- 17 h 44 min typical time to resolve
- 3 days longest major
| Began | Incident | Impact | Lasted |
|---|---|---|---|
| PNPM project testing and import degraded for SCM scans in regional environments | minor | 19 days | |
| Intermittent failures for Go-based projects | minor | ongoing | |
| Issue Resolving Entitlements | major | 17 h 44 min | |
| BitBucket Cloud Integrations Degraded | major | 3 h 31 min | |
| Snyk Test Down in SNYK-US-01 | major | 2 days | |
| Snyk Support portal degradation | minor | 6 h 5 min | |
| Snyk Container Degradation in SNYK-US-01 | major | 3 days | |
| PR Check Invalid Credential Error | minor | 2 h 58 min |
Incidents per month
critical major minor no impact stated
Components affected
| Component | Incidents | Bar |
|---|---|---|
| Snyk Open Source | 18 | |
| Snyk Code | 13 | |
| Snyk Container | 11 | |
| Snyk IaC | 8 | |
| Snyk Secrets | 4 | |
| Snyk API & Web | 3 | |
| Snyk AppRisk | 3 | |
| Support Portal | 1 |
As Snyk's status page reports its own incidents (scheduled maintenance left out), read every few hours since (evidence)
Incidents reported by Snyk's subprocessorsCSV of incidents reported by vendors Snyk lists · Atom feed of incidents reported by vendors Snyk lists
259 reported incidents in the last 30 days, by 10 of the vendors Snyk lists as subprocessors.
A subprocessor list names a company, not the service an incident touched. This does not show that Snyk was involved.
And 234 more. All of them: CSV · Who is around them.
ChangesCSV of Snyk's changes · Atom feed of Snyk's changes
See the list as we read it on any date: Time machine
None since tracking began.
Rating badge for Snyk's site
It updates with the rating.
<a href="https://thirdpartyindex.com/vendors/snyk"><img src="https://thirdpartyindex.com/badge/snyk.svg" alt="Snyk transparency rating on Third Party Index" height="20"></a>[](https://thirdpartyindex.com/vendors/snyk)