# Submittable Submittable declares [16 subprocessors](https://thirdpartyindex.com/vendors/submittable#subprocessors) in [its subprocessor list](https://www.submittable.com/subprocessors), which we last checked on 2026-11-11 ([evidence](https://thirdpartyindex.com/evidence/93020)). They include [Amazon Web Services](https://thirdpartyindex.com/vendors/amazon-web-services), [Microsoft](https://thirdpartyindex.com/vendors/microsoft) and [Stripe](https://thirdpartyindex.com/vendors/stripe). No published changes since we first read it on 2026-09-22. Submittable (submittable.com): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index. - Page: https://thirdpartyindex.com/vendors/submittable - Documents last verified: 2026-11-11 - Transparency rating: 64/100 (how much it publishes, not how secure it is): Subprocessor list 30/30; Processing locations 0/8 (partial); Purposes 7/7; Data processing addendum 0/12 (not found); Trust center 8/8; Privacy policy 6/6; security.txt 0/6 (not found); Security page 5/5; Status page 0/5 (not found); Vulnerability disclosure 0/5 (not found); Pages still reachable 8/8 - Supply chain: relies on 14 tracked vendors directly, 113 within two hops, 388 within three; 0 tracked vendors rely on it directly, 0 within two hops, 0 within three - Cite as: Submittable, Third Party Index, https://thirdpartyindex.com/vendors/submittable (data CC BY 4.0) ## Documents | Document | URL | Last verified | Last changed | |---|---|---|---| | Trust center | https://trust.submittable.com/ | 2026-11-11 | 2026-11-11 | | Subprocessor list | https://www.submittable.com/subprocessors | 2026-11-11 | 2026-10-13 | | Privacy policy | https://www.submittable.com/privacy | 2026-11-11 | 2026-11-03 | | Terms | https://www.submittable.com/terms-and-conditions | 2026-11-11 | 2026-10-13 | | Security page | https://www.submittable.com/security | 2026-11-11 | 2026-10-13 | ## Subprocessors (16) As its own list states them. | Subprocessor | Purpose | Location | Listed since | |---|---|---|---| | [Akamai](https://thirdpartyindex.com/vendors/akamai.md) | CDN, WAF, DDoS, and visitor prioritization | — | 2026-10-07 | | [AWS](https://thirdpartyindex.com/vendors/amazon-web-services.md) | Cloud hosting | — | 2026-10-07 | | [Datadog](https://thirdpartyindex.com/vendors/datadog.md) | Centralized logging and metrics | — | 2026-10-07 | | [DocuSign](https://thirdpartyindex.com/vendors/docusign.md) | Electronic Signature | — | 2026-10-07 | | [Fivetran](https://thirdpartyindex.com/vendors/fivetran.md) | Data replication to Snowflake for analytics | — | 2026-10-07 | | [Intercom](https://thirdpartyindex.com/vendors/intercom.md) | Marketing and communication with users | — | 2026-10-07 | | LocalizeJS | Translation of select accounts | — | 2026-10-07 | | [MailGun](https://thirdpartyindex.com/vendors/mailgun.md) | Email sending | — | 2026-10-07 | | [Microsoft Azure](https://thirdpartyindex.com/vendors/microsoft.md) | Cloud hosting | — | 2026-10-07 | | [Payoneer](https://thirdpartyindex.com/vendors/payoneer.md) | Payment processing for Funds Distribution feature | — | 2026-10-07 | | [PubNub](https://thirdpartyindex.com/vendors/pubnub.md) | Live in-app event messaging for collaborative drafts feature | — | 2026-10-07 | | [Snowflake](https://thirdpartyindex.com/vendors/snowflake.md) | Data Warehouse to power internal analytics and external tools for customers | — | 2026-10-07 | | [Stripe](https://thirdpartyindex.com/vendors/stripe.md) | Payment processing | — | 2026-10-07 | | [TransUnion](https://thirdpartyindex.com/vendors/transunion.md) | Knowledge based authentication quiz | — | 2026-10-07 | | U.S. Bank | Payment processing for Funds Distribution feature | — | 2026-10-07 | | [Veriff](https://thirdpartyindex.com/vendors/veriff.md) | Identity Verification (SGMS) | — | 2026-10-07 | Read from ([evidence](https://thirdpartyindex.com/evidence/16514)). CSV: https://thirdpartyindex.com/vendors/submittable/subprocessors.csv ## Compliance As its trust center lists them. - Audited: SOC 2 Type II ([evidence](https://thirdpartyindex.com/evidence/10682)) - Claimed: HIPAA, GDPR, CCPA/CPRA ([evidence](https://thirdpartyindex.com/evidence/10682)) ## Web Technologies Submittable's homepage made 270 requests to 33 domains, and 15 services controlled by another company. Loaded on 2026-11-09 by a browser that accepted nothing; other visits may load more or less. What a page loads is not a list of who receives customer data. 15 third parties by category: Analytics 6 (HubSpot, G2.com, LinkedIn, Meta, ZoomInfo, Cloudflare); Advertising 3 (Google Cloud, Microsoft, Capterra Inc.); Live chat 1 (Qualified.com, Inc.); CDN 1 (jsDelivr); Issue trackers 1 (usually detected as Issue trackers: Sentry); JavaScript libraries 1 (Webflow); Page builders 1 (Finsweet); Security 1 (ClickCease™). Each company that appears controlled by another organization is counted once, under the main category of the technologies detected from it on this homepage or, when none was, the category recorded from the company's own page (marked reviewed) or else the one it is usually detected as on other published homepages (marked as such); unclassified: none of these. ### Third parties (15) - Webflow: 136 requests to website-files.com, d3e54v103j8qbb.cloudfront.net; Webflow 1.6.0, jQuery 3.5.1 - Qualified.com, Inc.: 35 requests to qualified.com; Qualified - Google Cloud: 27 requests to google.com, doubleclick.net, googletagmanager.com, fonts.googleapis.com, gstatic.com; DoubleClick Floodlight, Google Analytics, Google Tag Manager - jsDelivr: 26 requests to jsdelivr.net; jsDelivr - HubSpot: 13 requests to hs-banner.com, hubspot.com, hscollectedforms.net, hs-analytics.net, hs-scripts.com, hsadspixel.net, hsforms.com, hubapi.com; HubSpot, HubSpot Analytics - Microsoft: 9 requests to clarity.ms, bing.com; Microsoft Advertising (its subprocessor list names it too) - Capterra Inc.: 3 requests to capterra.com; Capterra - G2.com: 3 requests to g2.com, g2crowd.com; G2 Track Your Prospects - LinkedIn: 3 requests to linkedin.com, licdn.com; Linkedin Insight Tag - Meta: 3 requests to facebook.net, facebook.com; Facebook Pixel 2.9.438 - ZoomInfo: 3 requests to zi-scripts.com, zoominfo.com; Zoominfo - ClickCease™: 1 request to clickcease.com; ClickCease - Cloudflare: 1 request to cloudflareinsights.com; Cloudflare Browser Insights - Finsweet: 1 request to finsweet.com; Finsweet - Sentry: 1 request to sentry.io ### First party (1) - Submittable: 5 requests to submittable.com; Cloudflare, GSAP 3.15.0, Google Font API, HSTS, HubSpot Cookie Policy Banner, Linkedin Ads, Microsoft Clarity, Open Graph, Priority Hints, Sentry, Swiper, Webpack 11 tracked companies loaded by the homepage are not in Submittable's subprocessor list. A website can use a service without it processing customer data. ## Subprocessor of (0) No tracked vendor lists it. ## Incidents reported by Submittable's subprocessors Incidents reported in the last 30 days on their own status pages by 9 vendors Submittable lists as subprocessors. A subprocessor list names a company, not the service an incident touched. - 2026-11-12: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which Submittable lists as a subprocessor, reported INC20000347 (minor) - 2026-11-07: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which Submittable lists as a subprocessor, reported INC20000337 (minor) - 2026-11-06: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which Submittable lists as a subprocessor, reported INC20000336 (minor) - 2026-11-06: [Intercom](https://thirdpartyindex.com/vendors/intercom#status), which Submittable lists as a subprocessor, reported Elevated errors and latencies in the European hosting region. (major) - 2026-11-03: [Akamai](https://thirdpartyindex.com/vendors/akamai#status), which Submittable lists as a subprocessor, reported Property Manager Property Activation Errors (no impact stated) - 2026-11-01: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Submittable lists as a subprocessor, reported Elevated Instant Payouts failures (no impact stated) - 2026-10-30: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which Submittable lists as a subprocessor, reported INC20000321 (minor) - 2026-10-30: [Intercom](https://thirdpartyindex.com/vendors/intercom#status), which Submittable lists as a subprocessor, reported Slow Fin Procedures (minor) - 2026-10-30: [Akamai](https://thirdpartyindex.com/vendors/akamai#status), which Submittable lists as a subprocessor, reported Customer Security Advisory: CVE-2026-98432 (no impact stated) - 2026-10-29: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which Submittable lists as a subprocessor, reported INC20000319 (minor) - 2026-10-28: [Veriff](https://thirdpartyindex.com/vendors/veriff#status), which Submittable lists as a subprocessor, reported Delayed decision for a subset of verification sessions (minor) - 2026-10-28: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Submittable lists as a subprocessor, reported Elevated Issuing errors from 17:13 - 20:41 UTC (minor) - 2026-10-28: [Datadog](https://thirdpartyindex.com/vendors/datadog#status), which Submittable lists as a subprocessor, reported Metrics query are disrupted (major) - 2026-10-28: [Mailgun](https://thirdpartyindex.com/vendors/mailgun#status), which Submittable lists as a subprocessor, reported Route delays in EU Region (minor) - 2026-10-27: [Veriff](https://thirdpartyindex.com/vendors/veriff#status), which Submittable lists as a subprocessor, reported Our service is experiencing issues (minor) - 2026-10-27: [Akamai](https://thirdpartyindex.com/vendors/akamai#status), which Submittable lists as a subprocessor, reported Performance Degradation for Customers in Mumbai and Chennai (no impact stated) - 2026-10-27: [Akamai](https://thirdpartyindex.com/vendors/akamai#status), which Submittable lists as a subprocessor, reported Enterprise Application Access (EAA) Connector Issues (minor) - 2026-10-26: [PubNub](https://thirdpartyindex.com/vendors/pubnub#status), which Submittable lists as a subprocessor, reported Errors with history readers in FRA (minor) - 2026-10-26: [PubNub](https://thirdpartyindex.com/vendors/pubnub#status), which Submittable lists as a subprocessor, reported Errors and Latency for Presence (minor) - 2026-10-26: [Datadog](https://thirdpartyindex.com/vendors/datadog#status), which Submittable lists as a subprocessor, reported Elevated Error Rates for Workflow Automation, App Builder, Bits Code, Bits Agent Builder (major) - 2026-10-25: [Akamai](https://thirdpartyindex.com/vendors/akamai#status), which Submittable lists as a subprocessor, reported Edge Delivery issues between Indonesia and Singapore (minor) - 2026-10-24: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Submittable lists as a subprocessor, reported Elevated Blik errors (no impact stated) - 2026-10-23: [Veriff](https://thirdpartyindex.com/vendors/veriff#status), which Submittable lists as a subprocessor, reported Retrospective Update (no impact stated) - 2026-10-23: [Akamai](https://thirdpartyindex.com/vendors/akamai#status), which Submittable lists as a subprocessor, reported Customer Security Advisory: Brotli Remote Code Execution Vulnerabilities \[CVE-2026-111497\] (no impact stated) - 2026-10-22: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Submittable lists as a subprocessor, reported Elevated Bancontact errors (no impact stated) - 2026-10-22: [Akamai](https://thirdpartyindex.com/vendors/akamai#status), which Submittable lists as a subprocessor, reported Customer Security Advisory: Critical F5/NGINX Out-of-Band Vulnerabilities (no impact stated) - 2026-10-22: [PubNub](https://thirdpartyindex.com/vendors/pubnub#status), which Submittable lists as a subprocessor, reported Errors and Latency for Presence in FRA and BOM (minor) - 2026-10-22: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Submittable lists as a subprocessor, reported Elevated Bancontact errors (no impact stated) - 2026-10-22: [PubNub](https://thirdpartyindex.com/vendors/pubnub#status), which Submittable lists as a subprocessor, reported Certificate Issue Causing Potential Connection Issues (major) - 2026-10-21: [Akamai](https://thirdpartyindex.com/vendors/akamai#status), which Submittable lists as a subprocessor, reported Edge Delivery Secure CDN platform at Risk of Capacity Issues (no impact stated) - 2026-10-21: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which Submittable lists as a subprocessor, reported INC20000301 (critical) - 2026-10-21: [Akamai](https://thirdpartyindex.com/vendors/akamai#status), which Submittable lists as a subprocessor, reported Web Security Analytics, Reporting and Configuration Deployment Issues (minor) - 2026-10-21: [Akamai](https://thirdpartyindex.com/vendors/akamai#status), which Submittable lists as a subprocessor, reported Customer Security Advisory: PHP Remote Code Execution Vulnerabilities (no impact stated) - 2026-10-21: [Akamai](https://thirdpartyindex.com/vendors/akamai#status), which Submittable lists as a subprocessor, reported NetStorage issues in Los Angeles (minor) - 2026-10-21: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which Submittable lists as a subprocessor, reported INC20000299 (minor) - 2026-10-20: [Payoneer](https://thirdpartyindex.com/vendors/payoneer#status), which Submittable lists as a subprocessor, reported API - General issue (major) - 2026-10-20: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Submittable lists as a subprocessor, reported Spike in cancellations and expired errors with PayByBank payments (no impact stated) - 2026-10-20: [Payoneer](https://thirdpartyindex.com/vendors/payoneer#status), which Submittable lists as a subprocessor, reported API - General issue (major) - 2026-10-20: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Submittable lists as a subprocessor, reported Elevated Revolut Pay errors (no impact stated) - 2026-10-20: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which Submittable lists as a subprocessor, reported INC20000294 (critical) - 2026-10-19: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which Submittable lists as a subprocessor, reported INC20000290 (minor) - 2026-10-16: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which Submittable lists as a subprocessor, reported INC20000287 (critical) - 2026-10-15: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Submittable lists as a subprocessor, reported Elevated declines on Mastercard (no impact stated) - 2026-10-15: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Submittable lists as a subprocessor, reported Elevated declines on Visa (no impact stated) - 2026-10-15: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Submittable lists as a subprocessor, reported Elevated Amazon Pay errors (no impact stated) - 2026-10-14: [Intercom](https://thirdpartyindex.com/vendors/intercom#status), which Submittable lists as a subprocessor, reported Customer contact details showing up as "Redacted" in the Intercom Inbox (minor) - 2026-10-13: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which Submittable lists as a subprocessor, reported INC20000277 (minor) The subprocessor list as we read it on any date: https://thirdpartyindex.com/labs/time-machine/submittable --- Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api