# Tailscale

Tailscale declares [10 subprocessors](https://thirdpartyindex.com/vendors/tailscale#subprocessors) in [its subprocessor list](https://tailscale.com/dpa-subprocessors), which we last checked on 2026-11-11 ([evidence](https://thirdpartyindex.com/evidence/233014)). They include [Amazon Web Services](https://thirdpartyindex.com/vendors/amazon-web-services), [OpenAI](https://thirdpartyindex.com/vendors/openai) and [Atlassian](https://thirdpartyindex.com/vendors/atlassian). No published changes since we first read it on 2026-09-21. [8 tracked vendors](https://thirdpartyindex.com/vendors/tailscale#used-by) name Tailscale as a subprocessor, including [ElevenLabs](https://thirdpartyindex.com/vendors/elevenlabs), [Monad](https://thirdpartyindex.com/vendors/monad) and [Anyscale](https://thirdpartyindex.com/vendors/anyscale).

Tailscale (tailscale.com): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/tailscale
- Documents last verified: 2026-11-11
- Transparency rating: 92/100 (how much it publishes, not how secure it is): Subprocessor list 30/30; Processing locations 8/8; Purposes 7/7; Data processing addendum 12/12; Trust center 0/8 (not found); Privacy policy 6/6; security.txt 6/6; Security page 5/5; Status page 5/5; Vulnerability disclosure 5/5; Pages still reachable 8/8
- Supply chain: relies on 10 tracked vendors directly, 81 within two hops, 372 within three; 8 tracked vendors rely on it directly, 163 within two hops, 2085 within three
- Cite as: Tailscale, Third Party Index, https://thirdpartyindex.com/vendors/tailscale (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Subprocessor list | https://tailscale.com/dpa-subprocessors | 2026-11-11 | 2026-11-07 |
| Data processing addendum | https://tailscale.com/dpa | 2026-11-11 | 2026-11-07 |
| Privacy policy | https://tailscale.com/privacy-policy | 2026-11-11 | 2026-11-07 |
| Terms | https://tailscale.com/terms | 2026-11-11 | 2026-11-07 |
| Security page | https://tailscale.com/security | 2026-11-11 | 2026-11-07 |
| security.txt | https://tailscale.com/.well-known/security.txt | 2026-11-11 | 2026-09-21 |
| Status page | https://status.tailscale.com/ | 2026-11-11 | 2026-11-06 |
| Security advisories | https://tailscale.com/security-bulletins | 2026-11-11 | 2026-11-07 |

## Subprocessors (10)

As its own list states them.

| Subprocessor | Purpose | Location | Listed since |
|---|---|---|---|
| [Akamai Technologies, Inc. (Linode)](https://thirdpartyindex.com/vendors/akamai.md) | Cloud hosting provider for DERP servers (2) | United States | 2026-09-22 |
| [Amazon Web Services, Inc.](https://thirdpartyindex.com/vendors/amazon-web-services.md) | Cloud hosting provider; AI model hosting and processing for certain PAM features | United States, European Economic Area | 2026-09-22 |
| [Atlassian Corporation (Jira Service Management)](https://thirdpartyindex.com/vendors/atlassian.md) | Troubleshooting | United States | 2026-09-22 |
| [The Constant Company, LLC (Vultr)](https://thirdpartyindex.com/vendors/constant.md) | Cloud hosting provider for DERP servers (2) | United States, European Economic Area | 2026-09-22 |
| [DigitalOcean, LLC](https://thirdpartyindex.com/vendors/digitalocean.md) | Cloud hosting provider for DERP servers (2) | United States, European Economic Area | 2026-09-22 |
| [Hetzner Online GmbH](https://thirdpartyindex.com/vendors/hetzner-online.md) | Cloud hosting provider for DERP servers (2) | United States, European Economic Area | 2026-09-22 |
| [NetActuate, Inc.](https://thirdpartyindex.com/vendors/netactuate.md) | Cloud hosting provider for DERP servers (2) | United States | 2026-09-22 |
| [OpenAI](https://thirdpartyindex.com/vendors/openai.md) (AI model provider: OpenAI) | AI model provider for certain PAM features | United States | 2026-09-22 |
| [Snowflake Inc.](https://thirdpartyindex.com/vendors/snowflake.md) | Cloud-based data warehouse | United States | 2026-09-22 |
| [Vercel Inc.](https://thirdpartyindex.com/vendors/vercel.md) | Cloud hosting provider; AI gateway | United States (requests may transit global edge locations) | 2026-09-22 |

Read from ([evidence](https://thirdpartyindex.com/evidence/1433)). CSV: https://thirdpartyindex.com/vendors/tailscale/subprocessors.csv

AI model providers (or a cloud provider's AI model service) among these entries: 1. All vendors that list one: https://thirdpartyindex.com/ai

## Web Technologies

Tailscale's homepage made 194 requests to 15 domains, and 8 services controlled by another company. Loaded on 2026-11-04 by a browser that accepted nothing; other visits may load more or less. What a page loads is not a list of who receives customer data.

8 third parties by category: Advertising 3 (Google Cloud, Microsoft, Reddit, Inc.); Analytics 2 (Keyplay, Inc., LinkedIn); Cookie compliance 1 (Ketch); CMS 1 (usually detected as CMS: Sanity); Customer data platform 1 (RudderStack). Each company that appears controlled by another organization is counted once, under the main category of the technologies detected from it on this homepage or, when none was, the category recorded from the company's own page (marked reviewed) or else the one it is usually detected as on other published homepages (marked as such); unclassified: none of these.

### Third parties (8)

- Sanity: 58 requests to sanity.io
- Google Cloud: 14 requests to google.com, doubleclick.net, googletagmanager.com; DoubleClick Floodlight, Google Analytics, Google Tag Manager
- Microsoft: 10 requests to clarity.ms, bing.com; Microsoft Advertising
- Ketch: 7 requests to ketchcdn.com, ketchjs.com; Ketch
- RudderStack: 6 requests to rudderlabs.com; Rudderstack
- Reddit, Inc.: 5 requests to reddit.com, redditstatic.com; Reddit Ads
- Keyplay, Inc.: 3 requests to keyplay.io; Keyplay
- LinkedIn: 3 requests to linkedin.com, licdn.com; Linkedin Insight Tag

### First party (1)

- Tailscale: 88 requests to tailscale.com; HSTS, Microsoft Clarity, Next.js 16.4.3, Next.js App Router, Open Graph, Priority Hints, React, Sanity, Sanity.io, Turbopack, Vercel, Webpack

4 tracked companies loaded by the homepage are not in Tailscale's subprocessor list. A website can use a service without it processing customer data.

## Subprocessor of (8)

Tracked vendors whose own subprocessor lists name it, and what they say they use it for.

- [Acrolinx](https://thirdpartyindex.com/vendors/acrolinx.md): Network connectivity service for platform administration
- [Anyscale](https://thirdpartyindex.com/vendors/anyscale.md): Anyscale Services
- [Contour](https://thirdpartyindex.com/vendors/contour.md)
- [ElevenLabs](https://thirdpartyindex.com/vendors/elevenlabs.md): Networking
- [Epsio](https://thirdpartyindex.com/vendors/epsio.md): VPN (data is encrypted)
- [Monad](https://thirdpartyindex.com/vendors/monad.md): Identity-based VPN for access to production infrastructure
- [Serval](https://thirdpartyindex.com/vendors/serval.md): secure network access
- [WSO2](https://thirdpartyindex.com/vendors/wso2.md): To Provide a Secure VPN tunnel to transfer data.; To provide a Secure VPN tunnel to transfer data.

## Service status

Incidents it reported on its own status page.

- Last 90 days: 16 reported incidents (2 major or critical, 12 minor, 2 with no impact stated)
- Typical time to resolve: 2 h 12 min
- Status page last read: 2026-11-11
- 2026-11-06: DERP connection issues (minor)
- 2026-11-05: Funnel performance degradation (minor)
- 2026-10-30: Coordination service issues (minor)
- 2026-10-27: Funnel hostnames not resolving in public DNS (minor)
- 2026-10-24: Funnel hostnames not resolving in public DNS (minor)
- 2026-10-08: Admin Panel Login Issues (minor)
- 2026-10-02: Funnel performance degradation (minor)
- 2026-10-01: Coordination service issues (minor)

## Incidents reported by Tailscale's subprocessors

Incidents reported in the last 30 days on their own status pages by 5 vendors Tailscale lists as subprocessors. A subprocessor list names a company, not the service an incident touched.

- 2026-11-11: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Tailscale lists as a subprocessor, reported Unable to start new Workspace Agent runs (critical)
- 2026-11-11: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Tailscale lists as a subprocessor, reported Elevated errors affecting logins, sign-ups, and ChatGPT features (minor)
- 2026-11-10: [Vercel](https://thirdpartyindex.com/vendors/vercel#status), which Tailscale lists as a subprocessor, reported Elevated Sandbox and Blob request latency and errors (minor)
- 2026-11-10: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Tailscale lists as a subprocessor, reported Incorrect cost data in Costs API exports (no impact stated)
- 2026-11-09: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Tailscale lists as a subprocessor, reported Elevated Errors On API (minor)
- 2026-11-09: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Tailscale lists as a subprocessor, reported Elevated ChatGPT Conversation Errors (minor)
- 2026-11-08: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Tailscale lists as a subprocessor, reported Elevated errors with image generation (minor)
- 2026-11-07: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which Tailscale lists as a subprocessor, reported INC20000337 (minor)
- 2026-11-06: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which Tailscale lists as a subprocessor, reported INC20000336 (minor)
- 2026-11-06: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Tailscale lists as a subprocessor, reported Elevated error rates with some U.S. business Mastercards (no impact stated)
- 2026-11-05: [Vercel](https://thirdpartyindex.com/vendors/vercel#status), which Tailscale lists as a subprocessor, reported Build delays and degraded Vercel Dashboard performance (minor)
- 2026-11-05: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Tailscale lists as a subprocessor, reported ChatGPT Work and Dots Errors (minor)
- 2026-11-04: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Tailscale lists as a subprocessor, reported Elevated error rates across paid ChatGPT plans (minor)
- 2026-11-03: [Akamai](https://thirdpartyindex.com/vendors/akamai#status), which Tailscale lists as a subprocessor, reported Property Manager Property Activation Errors (no impact stated)
- 2026-11-03: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Tailscale lists as a subprocessor, reported File upload errors in ChatGPT (minor)
- 2026-10-30: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which Tailscale lists as a subprocessor, reported INC20000321 (minor)
- 2026-10-30: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Tailscale lists as a subprocessor, reported Elevated errors with search in Dots, ChatGPT Work, and certain ChatGPT thinking experiences (minor)
- 2026-10-30: [Akamai](https://thirdpartyindex.com/vendors/akamai#status), which Tailscale lists as a subprocessor, reported Customer Security Advisory: CVE-2026-98432 (no impact stated)
- 2026-10-30: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Tailscale lists as a subprocessor, reported Elevated errors for GPT Image 2 API image edits (minor)
- 2026-10-29: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which Tailscale lists as a subprocessor, reported INC20000319 (minor)
- 2026-10-27: [DigitalOcean](https://thirdpartyindex.com/vendors/digitalocean#status), which Tailscale lists as a subprocessor, reported Kubernetes Cluster Management Operations (major)
- 2026-10-27: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Tailscale lists as a subprocessor, reported 6.1 Sol Degraded Model Performance (minor)
- 2026-10-27: [Akamai](https://thirdpartyindex.com/vendors/akamai#status), which Tailscale lists as a subprocessor, reported Performance Degradation for Customers in Mumbai and Chennai (no impact stated)
- 2026-10-27: [Akamai](https://thirdpartyindex.com/vendors/akamai#status), which Tailscale lists as a subprocessor, reported Enterprise Application Access (EAA) Connector Issues (minor)
- 2026-10-27: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Tailscale lists as a subprocessor, reported Elevated error rates for most hosted Code Reviews and Security Reviews on private GitHub repositories (no impact stated)
- 2026-10-26: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Tailscale lists as a subprocessor, reported Elevated error rates for Ads POST requests (minor)
- 2026-10-25: [Akamai](https://thirdpartyindex.com/vendors/akamai#status), which Tailscale lists as a subprocessor, reported Edge Delivery issues between Indonesia and Singapore (minor)
- 2026-10-23: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Tailscale lists as a subprocessor, reported Degraded experience with ChatGPT app connections using CIMD (minor)
- 2026-10-23: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Tailscale lists as a subprocessor, reported Help Center Chat Support Degraded (no impact stated)
- 2026-10-23: [Vercel](https://thirdpartyindex.com/vendors/vercel#status), which Tailscale lists as a subprocessor, reported Delays in Logs and Observability data (minor)
- 2026-10-23: [Akamai](https://thirdpartyindex.com/vendors/akamai#status), which Tailscale lists as a subprocessor, reported Customer Security Advisory: Brotli Remote Code Execution Vulnerabilities \[CVE-2026-111497\] (no impact stated)
- 2026-10-23: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Tailscale lists as a subprocessor, reported Delays in customer support responses (no impact stated)
- 2026-10-22: [Akamai](https://thirdpartyindex.com/vendors/akamai#status), which Tailscale lists as a subprocessor, reported Customer Security Advisory: Critical F5/NGINX Out-of-Band Vulnerabilities (no impact stated)
- 2026-10-22: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Tailscale lists as a subprocessor, reported New Ad Accounts failing to provision admins (minor)
- 2026-10-22: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Tailscale lists as a subprocessor, reported Degraded Performance of Dots on Enterprise (minor)
- 2026-10-22: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Tailscale lists as a subprocessor, reported Elevated ChatGPT conversation and Responses API errors (minor)
- 2026-10-21: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Tailscale lists as a subprocessor, reported Authentication errors for some users (major)
- 2026-10-21: [Akamai](https://thirdpartyindex.com/vendors/akamai#status), which Tailscale lists as a subprocessor, reported Edge Delivery Secure CDN platform at Risk of Capacity Issues (no impact stated)
- 2026-10-21: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which Tailscale lists as a subprocessor, reported INC20000301 (critical)
- 2026-10-21: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Tailscale lists as a subprocessor, reported Elevated error rates for gpt-5.6-luna API requests (minor)
- 2026-10-21: [Akamai](https://thirdpartyindex.com/vendors/akamai#status), which Tailscale lists as a subprocessor, reported Web Security Analytics, Reporting and Configuration Deployment Issues (minor)
- 2026-10-21: [Akamai](https://thirdpartyindex.com/vendors/akamai#status), which Tailscale lists as a subprocessor, reported Customer Security Advisory: PHP Remote Code Execution Vulnerabilities (no impact stated)
- 2026-10-21: [Akamai](https://thirdpartyindex.com/vendors/akamai#status), which Tailscale lists as a subprocessor, reported NetStorage issues in Los Angeles (minor)
- 2026-10-21: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Tailscale lists as a subprocessor, reported Elevated FedRAMP API error rates for Astra and Sol (minor)
- 2026-10-21: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which Tailscale lists as a subprocessor, reported INC20000299 (minor)
- 2026-10-21: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Tailscale lists as a subprocessor, reported Degraded performance in ChatGPT, Codex, and APIs (minor)
- 2026-10-20: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which Tailscale lists as a subprocessor, reported INC20000294 (critical)
- 2026-10-19: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Tailscale lists as a subprocessor, reported File Download errors (minor)
- 2026-10-19: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which Tailscale lists as a subprocessor, reported INC20000290 (minor)
- 2026-10-16: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which Tailscale lists as a subprocessor, reported INC20000287 (critical)
- 2026-10-15: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Tailscale lists as a subprocessor, reported Widespread feature degradation (major)
- 2026-10-14: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Tailscale lists as a subprocessor, reported Delayed Costs data in the Compliance API (minor)
- 2026-10-14: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Tailscale lists as a subprocessor, reported Limited availability on gpt-image-2.5-flare and gpt-image-2.5-sunburst (minor)
- 2026-10-14: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Tailscale lists as a subprocessor, reported Degraded performance in Codex and ChatGPT Work (minor)
- 2026-10-13: [DigitalOcean](https://thirdpartyindex.com/vendors/digitalocean#status), which Tailscale lists as a subprocessor, reported App Platform Deployments (no impact stated)
- 2026-10-13: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which Tailscale lists as a subprocessor, reported INC20000277 (minor)
- 2026-10-13: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Tailscale lists as a subprocessor, reported Degraded performance in GPT-6.1 Sol Codex and Work mode (minor)

The subprocessor list as we read it on any date: https://thirdpartyindex.com/labs/time-machine/tailscale

## Security contact

From its security.txt (https://tailscale.com/.well-known/security.txt) ([evidence](https://thirdpartyindex.com/evidence/1442)):

- Contact: mailto:security@tailscale.com
- Disclosure policy: https://tailscale.com/security
- Security jobs: https://tailscale.com/careers/
- Languages: en
- Valid until 2027-03-05

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api
