# Spline

Spline declares [6 subprocessors](https://thirdpartyindex.com/vendors/spline#subprocessors) in [its subprocessor list](https://trust.spline.design/subprocessors), which we last checked on 2026-10-10 ([evidence](https://thirdpartyindex.com/evidence/77835)). They include [Amazon Web Services](https://thirdpartyindex.com/vendors/amazon-web-services), [Google Cloud](https://thirdpartyindex.com/vendors/google-cloud) and [GitHub](https://thirdpartyindex.com/vendors/github). No published changes since we first read it on 2026-10-10.

Spline (spline.design): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/spline
- Documents last verified: 2026-10-10
- Transparency rating: 77/100 (how much it publishes, not how secure it is): Subprocessor list 30/30; Processing locations 8/8; Purposes 7/7; Data processing addendum 0/12 (not found); Trust center 8/8; Privacy policy 6/6; security.txt 0/6 (not found); Security page 5/5; Status page 5/5; Vulnerability disclosure 0/5 (not found); Pages still reachable 8/8
- Supply chain: relies on 6 tracked vendors directly, 64 within two hops, 259 within three; 0 tracked vendors rely on it directly, 0 within two hops, 0 within three
- Cite as: Spline, Third Party Index, https://thirdpartyindex.com/vendors/spline (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Trust center | https://trust.spline.design/ | 2026-10-10 | 2026-10-10 |
| Subprocessor list | https://trust.spline.design/subprocessors | 2026-10-10 | 2026-10-10 |
| Privacy policy | https://spline.design/privacy | 2026-10-10 | 2026-10-10 |
| Terms | https://spline.design/terms | 2026-10-10 | 2026-10-10 |
| Security page | https://spline.design/security | 2026-10-10 | 2026-10-10 |
| Status page | https://status.spline.design/ | 2026-10-10 | 2026-10-10 |

## Subprocessors (6)

As its own list states them.

| Subprocessor | Purpose | Location | Listed since |
|---|---|---|---|
| [Amazon Web Services](https://thirdpartyindex.com/vendors/amazon-web-services.md) | Cloud provider | Cloud-based | 2026-10-10 |
| [Amplitude](https://thirdpartyindex.com/vendors/amplitude.md) | Data analytics | Cloud-based | 2026-10-10 |
| [Baremetrics](https://thirdpartyindex.com/vendors/baremetrics.md) | Data analytics | Cloud-based | 2026-10-10 |
| [Github](https://thirdpartyindex.com/vendors/github.md) | Version control | Cloud-based | 2026-10-10 |
| [Google Workspace](https://thirdpartyindex.com/vendors/google-cloud.md) | Email and Document management | Cloud-based | 2026-10-10 |
| [Metabase](https://thirdpartyindex.com/vendors/metabase.md) | Data analytics | Cloud-based | 2026-10-10 |

Read from ([evidence](https://thirdpartyindex.com/evidence/77835)). CSV: https://thirdpartyindex.com/vendors/spline/subprocessors.csv

## Compliance

As its trust center lists them.

- Audited: SOC 2 Type II, SOC 2 Type I, ISO/IEC 27001 ([evidence](https://thirdpartyindex.com/evidence/77832))
- Claimed: GDPR ([evidence](https://thirdpartyindex.com/evidence/77832))

## Subprocessor of (0)

No tracked vendor lists it.

## Incidents reported by Spline's subprocessors

Incidents reported in the last 30 days on their own status pages by 2 vendors Spline lists as subprocessors. A subprocessor list names a company, not the service an incident touched.

- 2026-10-08: [Amplitude](https://thirdpartyindex.com/vendors/amplitude#status), which Spline lists as a subprocessor, reported BigQuery exports are lagging for US. (minor)
- 2026-10-07: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Spline lists as a subprocessor, reported Incident with Git Operations, Issues, Actions and Pull Requests (critical)
- 2026-10-07: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Spline lists as a subprocessor, reported Incident with Git Operations, Pull Requests and Actions (critical)
- 2026-10-06: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Spline lists as a subprocessor, reported Several services are degraded (critical)
- 2026-10-05: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Spline lists as a subprocessor, reported Disruption with some GitHub services (major)
- 2026-10-05: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Spline lists as a subprocessor, reported Incident with Actions (critical)
- 2026-10-05: [Amplitude](https://thirdpartyindex.com/vendors/amplitude#status), which Spline lists as a subprocessor, reported Guides and Surveys Service Disruption (no impact stated)
- 2026-10-02: [Amplitude](https://thirdpartyindex.com/vendors/amplitude#status), which Spline lists as a subprocessor, reported Amplitude- Platform Loading Issues (no impact stated)
- 2026-10-01: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Spline lists as a subprocessor, reported Actions Job Delays (minor)
- 2026-10-01: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Spline lists as a subprocessor, reported Elevated request latency (minor)
- 2026-10-01: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Spline lists as a subprocessor, reported \[Retroactive\] Actions workflow run failures after deployment gate approvals (minor)
- 2026-09-28: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Spline lists as a subprocessor, reported Copilot Code Review is unable to complete reviews (critical)
- 2026-09-28: [Amplitude](https://thirdpartyindex.com/vendors/amplitude#status), which Spline lists as a subprocessor, reported We are actively investigating an incident in our data exports (minor)
- 2026-09-24: [Amplitude](https://thirdpartyindex.com/vendors/amplitude#status), which Spline lists as a subprocessor, reported Export Destinations data delivery issue (minor)
- 2026-09-24: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Spline lists as a subprocessor, reported Disruption with billing information updates (minor)
- 2026-09-23: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Spline lists as a subprocessor, reported Incident across several services (minor)
- 2026-09-23: [Amplitude](https://thirdpartyindex.com/vendors/amplitude#status), which Spline lists as a subprocessor, reported Export Destinations data delivery issue (major)
- 2026-09-22: [Amplitude](https://thirdpartyindex.com/vendors/amplitude#status), which Spline lists as a subprocessor, reported Snowflake Data Share export delivery issue (major)
- 2026-09-20: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Spline lists as a subprocessor, reported Incident with Pull Requests (minor)
- 2026-09-17: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Spline lists as a subprocessor, reported Elevated rate of errors for OpenAI models provided by Copilot (minor)
- 2026-09-17: [Amplitude](https://thirdpartyindex.com/vendors/amplitude#status), which Spline lists as a subprocessor, reported Realtime Data Pipeline Delay (minor)
- 2026-09-16: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Spline lists as a subprocessor, reported Degradation with Gemini 3.8 Flash (major)
- 2026-09-15: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Spline lists as a subprocessor, reported Disruption with some GitHub services (minor)
- 2026-09-15: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Spline lists as a subprocessor, reported Disruption with some GitHub services (minor)
- 2026-09-14: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Spline lists as a subprocessor, reported Actions Larger Runner Jobs for some customers may be slow to start (minor)
- 2026-09-13: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Spline lists as a subprocessor, reported Incident with several GitHub Services (critical)

The subprocessor list as we read it on any date: https://thirdpartyindex.com/labs/time-machine/spline

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api