# Temporal

Temporal declares [7 subprocessors](https://thirdpartyindex.com/vendors/temporal#subprocessors) in [its subprocessor list](https://trust.temporal.io/subprocessors), which we last checked on 2026-10-12 ([evidence](https://thirdpartyindex.com/evidence/37286)). They include [Amazon Web Services](https://thirdpartyindex.com/vendors/amazon-web-services), [Google Cloud](https://thirdpartyindex.com/vendors/google-cloud) and [Microsoft](https://thirdpartyindex.com/vendors/microsoft). Our recent checks could not read the list; these entries are as of 2026-10-12. [59 tracked vendors](https://thirdpartyindex.com/vendors/temporal#used-by) name Temporal as a subprocessor, including [Salesforce](https://thirdpartyindex.com/vendors/salesforce), [Twilio](https://thirdpartyindex.com/vendors/twilio) and [SendGrid](https://thirdpartyindex.com/vendors/sendgrid).

Temporal (temporal.io): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/temporal
- Documents last verified: 2026-11-11
- Transparency rating: 87/100 (how much it publishes, not how secure it is): Subprocessor list 30/30; Processing locations 8/8; Purposes 7/7; Data processing addendum 12/12; Trust center 8/8; Privacy policy 6/6; security.txt 6/6; Security page 0/5 (not found); Status page 5/5; Vulnerability disclosure 5/5; Pages still reachable 0/8 (some unreachable this week)
- Supply chain: relies on 7 tracked vendors directly, 68 within two hops, 248 within three; 59 tracked vendors rely on it directly, 1502 within two hops, 2732 within three
- Cite as: Temporal, Third Party Index, https://thirdpartyindex.com/vendors/temporal (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Trust center | https://trust.temporal.io/ | 2026-11-11 | 2026-11-11 |
| Subprocessor list (currently unreachable) | https://trust.temporal.io/subprocessors | 2026-10-12 | 2026-10-03 |
| Data processing addendum | https://temporal.io/images/temporal-data-processing-agreement-10-10-24.pdf | 2026-11-11 | 2026-09-23 |
| Privacy policy | https://temporal.io/global-privacy-policy | 2026-11-11 | 2026-11-11 |
| Terms | https://temporal.io/terms-of-service | 2026-11-11 | 2026-10-13 |
| security.txt | https://temporal.io/.well-known/security.txt | 2026-11-11 | 2026-09-23 |
| Status page | https://status.temporal.io/ | 2026-11-11 | 2026-11-11 |
| Security advisories | https://temporal.io/security | 2026-11-11 | 2026-10-13 |

## Subprocessors (7)

As its own list states them.

| Subprocessor | Purpose | Location | Listed since |
|---|---|---|---|
| [Auth0](https://thirdpartyindex.com/vendors/okta.md) | Authentication | United States | 2026-10-03 |
| [AWS](https://thirdpartyindex.com/vendors/amazon-web-services.md) | Infrastructure for Namespaces that customers decide to host in Amazon Web Services. Control plane. | Customer-Defined Jurisdiction | 2026-10-03 |
| [Elastic](https://thirdpartyindex.com/vendors/elasticsearch.md) | (Optional) Visibility, monitoring and analysis of business and operational data for Namespaces hosted in Google Cloud or Microsoft Azure. | Customer-Defined Jurisdictions | 2026-10-03 |
| [Google Cloud](https://thirdpartyindex.com/vendors/google-cloud.md) | (Optional) Infrastructure for Namespaces that customers decide to host in Google Cloud. | Customer-Defined Jurisdictions | 2026-10-03 |
| [IBM](https://thirdpartyindex.com/vendors/ibm.md) | Datastax Database | Customer-Defined Jurisdictions | 2026-10-03 |
| [Microsoft Azure](https://thirdpartyindex.com/vendors/microsoft.md) | (Optional) Infrastructure for Namespaces that customers decide to host in Microsoft Azure. | Customer-Defined Jurisdictions | 2026-10-03 |
| [WorkOS](https://thirdpartyindex.com/vendors/workos.md) | Customer identity and access management platform | United States | 2026-10-03 |

Read from ([evidence](https://thirdpartyindex.com/evidence/37286)). CSV: https://thirdpartyindex.com/vendors/temporal/subprocessors.csv

## Compliance

As its trust center lists them.

- Audited: SOC 2 Type II ([evidence](https://thirdpartyindex.com/evidence/6888))
- Claimed: HIPAA, GDPR, CCPA/CPRA ([evidence](https://thirdpartyindex.com/evidence/6888))

## Web Technologies

Temporal's homepage made 247 requests to 30 domains, 15 services controlled by another company, and 2 domains not identified. Loaded on 2026-11-10 by a browser that accepted nothing; other visits may load more or less. What a page loads is not a list of who receives customer data.

15 third parties by category: Analytics 8 (Amplitude, TikTok, Reo.Dev, LinkedIn, Meta, ZoomInfo, TikTok; reviewed: Scarf Systems, Inc.); Advertising 4 (Google Cloud, OpenAI, X Corp., Reddit, Inc.); Marketing automation 2 (GetVector, Inc., Adobe); Personalisation 1 (usually detected as Personalisation: Contentful). Each company that appears controlled by another organization is counted once, under the main category of the technologies detected from it on this homepage or, when none was, the category recorded from the company's own page (marked reviewed) or else the one it is usually detected as on other published homepages (marked as such); unclassified: none of these.

### Third parties (15)

- Contentful: 31 requests to ctfassets.net
- Google Cloud: 23 requests to google.com, doubleclick.net, googletagmanager.com, google-analytics.com, googleadservices.com, googlesyndication.com; DoubleClick Floodlight, Google Analytics, Google Tag Manager (its subprocessor list names it too)
- GetVector, Inc.: 11 requests to vector.co; Vector
- Amplitude: 8 requests to amplitude.com; Amplitude
- TikTok: 6 requests to tiktok.com; TikTok Pixel
- Reo.Dev: 5 requests to reo.dev; Reo.Dev
- Adobe: 3 requests to marketo.net, mktoresp.com; Marketo
- LinkedIn: 3 requests to linkedin.com, licdn.com; Linkedin Insight Tag
- Meta: 3 requests to facebook.net, facebook.com; Facebook Pixel 2.9.439
- OpenAI: 3 requests to openai.com; ChatGPT Ads Measurement Pixel
- X Corp.: 3 requests to ads-twitter.com, t.co, twitter.com; Twitter Ads
- ZoomInfo: 3 requests to zi-scripts.com, zoominfo.com; Zoominfo
- Reddit, Inc.: 2 requests to reddit.com, redditstatic.com; Reddit Ads
- Scarf Systems, Inc.: 1 request to scarf.sh
- TikTok: 1 request to tiktokw.us; TikTok Pixel

### Unknown (2)

Domains not identified yet: cr-relay.com, usbrowserspeed.com

### First party (1)

- Temporal: 138 requests to temporal.io; Contentful, HSTS, Open Graph, PWA, Priority Hints, Sentry, Svelte, SvelteKit, Vercel, Vercel Speed Insights, Vite, core-js 3.49.0, lit-element 4.2.2, lit-html 3.3.3

7 tracked companies loaded by the homepage are not in Temporal's subprocessor list. A website can use a service without it processing customer data.

## Subprocessor of (59)

Tracked vendors whose own subprocessor lists name it, and what they say they use it for.

- [1mind](https://thirdpartyindex.com/vendors/1mind.md): Data importer is a workflow orchestration application.
- [Adaptive Security](https://thirdpartyindex.com/vendors/adaptive-security.md): Workflow orchestration platform used to manage and execute application processes.
- [Aleph](https://thirdpartyindex.com/vendors/aleph.md): Workflow orchestration
- [Ampersand](https://thirdpartyindex.com/vendors/ampersand.md): Orchestrates the execution of integration and synchronization workflows.; Workflow orchestration
- [Amplemarket](https://thirdpartyindex.com/vendors/amplemarket.md): Engineering; Used for workflow orchestration to manage and execute background processes reliably.
- [Atomicwork](https://thirdpartyindex.com/vendors/atomicwork.md): Development software
- [Beyond Work](https://thirdpartyindex.com/vendors/beyond-work.md): Runs workflow execution. Content is encrypted with a tenant-held key before it is transmitted
- [Blackbaud](https://thirdpartyindex.com/vendors/blackbaud.md)
- [Calendly.com](https://thirdpartyindex.com/vendors/calendly-com.md): Supports background workflows to sync Gmail metadata for contact email threads
- [Common Room](https://thirdpartyindex.com/vendors/common-room.md): Workflow orchestration
- [Contour](https://thirdpartyindex.com/vendors/contour.md)
- [Culture Amp](https://thirdpartyindex.com/vendors/culture-amp.md): Temporal provides background task processing for jobs that run on a schedule or other triggers (e.g. send email when the survey opens to all participants).
- [Demandbase](https://thirdpartyindex.com/vendors/demandbase.md): Workflow orchestration and task execution state
- [DevRev](https://thirdpartyindex.com/vendors/devrev.md): Execution system for WF and μServices orchestration/ Workflows orchestration.
- [Drivetrain](https://thirdpartyindex.com/vendors/drivetrain.md)
- [Endex](https://thirdpartyindex.com/vendors/endex.md): Engineering
- [Esendex](https://thirdpartyindex.com/vendors/esendex.md)
- [Fillout](https://thirdpartyindex.com/vendors/fillout.md)
- [Gator](https://thirdpartyindex.com/vendors/gator.md): Temporal Cloud provides durable workflow orchestration for Gator's scheduled delivery, early delivery, Slack event, OAuth, and related background processing.
- [Handshake](https://thirdpartyindex.com/vendors/joinhandshake-com.md): Workflow orchestration engine
- [Harness.io](https://thirdpartyindex.com/vendors/harness-io.md): --- Platform Services and Enablement ---  Workflow Orchestration and Batch Processing
- [Immuta](https://thirdpartyindex.com/vendors/immuta.md): Execute background workloads
- [incident.io](https://thirdpartyindex.com/vendors/incident-io.md): Workflow Orchestration
- [Kinde](https://thirdpartyindex.com/vendors/kinde.md)
- [Levenza](https://thirdpartyindex.com/vendors/levenza.md): Workflow orchestration
- [Lovable](https://thirdpartyindex.com/vendors/lovable.md): Workflow orchestration. Workflow payloads are retained in event history
- [Macroscope](https://thirdpartyindex.com/vendors/macroscope.md): Distributed software workflows; Temporal is an integral part of our infrastructure. Any customer data processed via Temporal is encrypted, and Temporal does not…
- [Motion](https://thirdpartyindex.com/vendors/motion.md): Async background job processing
- [nylas](https://thirdpartyindex.com/vendors/nylas.md): Workflow Orchestration
- [Oneleet](https://thirdpartyindex.com/vendors/oneleet.md): Platform Workloads
- [OverOps](https://thirdpartyindex.com/vendors/overops.md): --- Platform Services and Enablement ---  Workflow Orchestration and Batch Processing
- [Perceptyx](https://thirdpartyindex.com/vendors/perceptyx.md): Workflow orchestration platform
- [Precisely Software](https://thirdpartyindex.com/vendors/precisely-software.md): Data Infrastructure
- [QA Wolf](https://thirdpartyindex.com/vendors/qa-wolf.md): Temporal Cloud provides workflow orchestration services for durable and reliable execution of backend operations.
- [Relay Commerce](https://thirdpartyindex.com/vendors/relay-commerce.md)
- [Render](https://thirdpartyindex.com/vendors/render.md): Workflow Orchestration
- [replit](https://thirdpartyindex.com/vendors/replit.md)
- [Retool](https://thirdpartyindex.com/vendors/retool.md): Third-party hosting provider for Workflow orchestration; Third-party hosting provider for workflow orchestration if electing to use Retool-managed Temporal Clou…
- [Salesforce](https://thirdpartyindex.com/vendors/salesforce.md)
- [Sanity](https://thirdpartyindex.com/vendors/sanity.md): Sanity uses Temporal.io to coordinate distributed operational workflows. They include internal processes such as updating organizational records and propagating…
- [Scratchpad](https://thirdpartyindex.com/vendors/scratchpad.md): Job orchestration
- [Segment](https://thirdpartyindex.com/vendors/segment.md): Temporal Cloud schedules and executes the customer defined workflows for specific Twilio Products and Services
- [SendGrid](https://thirdpartyindex.com/vendors/sendgrid.md): Temporal Cloud schedules and executes the customer defined workflows for specific Twilio Products and Services
- [Serval](https://thirdpartyindex.com/vendors/serval.md): workflow orchestration
- [Split.io](https://thirdpartyindex.com/vendors/split-io.md): --- Platform Services and Enablement ---  Workflow Orchestration and Batch Processing
- [Superside](https://thirdpartyindex.com/vendors/superside.md)
- [Synder](https://thirdpartyindex.com/vendors/synder.md): Data storage and processing; Managed workflow orchestration for background processing.
- [Tableau](https://thirdpartyindex.com/vendors/tableau.md)
- [Tactiq](https://thirdpartyindex.com/vendors/tactiq.md): Software development; We use Temporal to build and manage workflows
- [telli](https://thirdpartyindex.com/vendors/telli.md)
- [Teramot](https://thirdpartyindex.com/vendors/teramot.md): Workflow orchestration
- [Todoist](https://thirdpartyindex.com/vendors/todoist.md): Data elements: User instructions, workflow data (may include personal data); Workflow Orchestration, Data Processing
- [Twilio](https://thirdpartyindex.com/vendors/twilio.md): Temporal Cloud schedules and executes the customer defined workflows for specific Twilio Products and Services
- [Unify](https://thirdpartyindex.com/vendors/unify.md): Cloud hosting service that coordinates the execution of different services and processes on the backend. Stores limited information about customer data used to …
- [Unily](https://thirdpartyindex.com/vendors/unily.md): Workflow orchestration that lets long-running tasks retry, recover and report progress. Workflow data may include customer content.
- [Von](https://thirdpartyindex.com/vendors/vonlabs-ai.md): Workflow Orchestration
- [Warp](https://thirdpartyindex.com/vendors/warp.md)
- [Weaviate](https://thirdpartyindex.com/vendors/weaviate.md): Infrastructure; Workload orchestration
- [zig.ai](https://thirdpartyindex.com/vendors/zig-ai.md): Development software

## Service status

Incidents it reported on its own status page.

- Last 90 days: 20 reported incidents (2 major or critical, 11 minor, 7 with no impact stated)
- Typical time to resolve: 2 h 17 min
- Status page last read: 2026-11-12
- Its status page says now: Partially Degraded Service (affected: Google Cloud Platform (GCP): degraded performance)
- Under way: New namespace creation restricted across few GCP regions. Impacted regions are us-central1 and europe-west3 (minor), since 2026-10-15 17:12 UTC
- 2026-11-06: Some customers connecting over AWS PrivateLink in us-west-2 might be experiencing connection failures (minor)
- 2026-10-31: Intermittent request failures for some namespaces in GCP us-east4 (minor)
- 2026-10-19: Elevated connection resets for some GCP namespaces (no impact stated)
- 2026-10-15: New namespace creation restricted across few GCP regions. Impacted regions are us-central1 and europe-west3 (minor)
- 2026-10-14: Elevated latency and errors in GCP us-west1 (no impact stated)
- 2026-10-09: Elevated latency and errors in AWS us-east-1 (minor)
- 2026-10-09: Elevated error rates for cross-region traffic between US AWS regions (no impact stated)
- 2026-10-08: Elevated GCP storage latency in us-central1 – precautionary namespace failover (no impact stated)

## Incidents reported by Temporal's subprocessors

Incidents reported in the last 30 days on their own status pages by 2 vendors Temporal lists as subprocessors. A subprocessor list names a company, not the service an incident touched.

- 2026-11-07: [WorkOS](https://thirdpartyindex.com/vendors/workos#status), which Temporal lists as a subprocessor, reported Intermittent 503 errors in certain regions (minor)
- 2026-11-04: [Elasticsearch](https://thirdpartyindex.com/vendors/elasticsearch#status), which Temporal lists as a subprocessor, reported mOLTP PrivateLink connectivity issue (major)
- 2026-10-29: [WorkOS](https://thirdpartyindex.com/vendors/workos#status), which Temporal lists as a subprocessor, reported SSO Profile API Timeouts (major)
- 2026-10-23: [WorkOS](https://thirdpartyindex.com/vendors/workos#status), which Temporal lists as a subprocessor, reported Elevated errors across SSO and AuthKit (major)
- 2026-10-23: [Elasticsearch](https://thirdpartyindex.com/vendors/elasticsearch#status), which Temporal lists as a subprocessor, reported Elastic Support Portal is unavailable (major)
- 2026-10-22: [Elasticsearch](https://thirdpartyindex.com/vendors/elasticsearch#status), which Temporal lists as a subprocessor, reported 403 error when trying to access Autoops in newly created serverless projects (major)
- 2026-10-20: [Elasticsearch](https://thirdpartyindex.com/vendors/elasticsearch#status), which Temporal lists as a subprocessor, reported Elastic Cloud scaling issues in Azure (major)
- 2026-10-20: [Elasticsearch](https://thirdpartyindex.com/vendors/elasticsearch#status), which Temporal lists as a subprocessor, reported Degraded availability for some Elastic Cloud Hosted and Serverless deployments in GCP europe-west2 (London) (major)
- 2026-10-19: [WorkOS](https://thirdpartyindex.com/vendors/workos#status), which Temporal lists as a subprocessor, reported Elevated AuthKit Error Rates (major)
- 2026-10-15: [WorkOS](https://thirdpartyindex.com/vendors/workos#status), which Temporal lists as a subprocessor, reported Radar SMS challenge failures for phone numbers in mainland China (+86) (major)

The subprocessor list as we read it on any date: https://thirdpartyindex.com/labs/time-machine/temporal

## Security contact

From its security.txt (https://temporal.io/.well-known/security.txt) ([evidence](https://thirdpartyindex.com/evidence/6898)):

- Contact: mailto:security@temporal.io
- Disclosure policy: https://temporal.io/security/
- Security jobs: https://temporal.io/careers
- Languages: en, en-au, en-gb
- Valid until 2027-01-15

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api
