# TestingBot

TestingBot (testingbot.com): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/testingbot
- Documents last verified: 2026-09-30
- Transparency rating: 78/100 (how much it publishes, not how secure it is)
- Cite as: TestingBot, Third Party Index, https://thirdpartyindex.com/vendors/testingbot (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Trust center | https://trust.testingbot.com/ | 2026-09-30 | 2026-09-30 |
| Subprocessor list | https://trust.testingbot.com/#subprocessors | 2026-09-30 | 2026-09-30 |
| Privacy policy | https://testingbot.com/privacy | 2026-09-30 | 2026-09-30 |
| Terms | https://testingbot.com/terms | 2026-09-30 | 2026-09-30 |
| security.txt | https://testingbot.com/.well-known/security.txt | 2026-09-30 | 2026-09-30 |
| Status page | https://status.testingbot.com/ | 2026-09-30 | 2026-09-30 |

## Subprocessors (15)

As its own list states them.

| Subprocessor | Purpose | Location | Listed since |
|---|---|---|---|
| [ActiveCampaign, LLC (Postmark)](https://thirdpartyindex.com/vendors/activecampaign.md) | Account name and email address for transactional and product emails.; Transactional email delivery (Postmark) | 🇺🇸 USA | 2026-09-30 |
| [Amazon Web Services, Inc.](https://thirdpartyindex.com/vendors/amazon-web-services.md) | Encrypted test artefacts (video, screenshots, logs) stored in the EU region (eu-west-1, Ireland).; Storage (S3, EU region) | 🇪🇺 Europe | 2026-09-30 |
| [Anthropic, PBC](https://thirdpartyindex.com/vendors/anthropic.md) | AI test failure analysis (AI Insights); Masked, text-only failing-test logs for failure analysis. Opt-in. No model training; deleted within 30 days. | 🇺🇸 USA | 2026-09-30 |
| Billit | Billing contact name, billing email address, VAT number and postal address on the invoices we register for our own accounting. No test artefacts. Billit does not send invoices to customers; the invoice PDF comes from us.; Invoice generation and accounting | 🇪🇺 Europe | 2026-09-30 |
| Bright Market, LLC (FastSpring) | Billing contact and payment details for purchases processed through FastSpring.; Payment processing | 🇺🇸 USA | 2026-09-30 |
| [Cloudflare](https://thirdpartyindex.com/vendors/cloudflare.md) | CDN, security and object storage (R2); Request metadata and IP addresses for CDN and WAF; cached static assets; encrypted test artefacts in R2 object storage (EU jurisdiction). | 🇺🇸 USA | 2026-09-30 |
| Flow Swiss AG | Hosting (Swiss macOS device infrastructure); Hosts our Swiss Mac mini fleet; account and test data at rest, encrypted. | 🇨🇭 Switzerland | 2026-09-30 |
| [Google LLC (Google Cloud)](https://thirdpartyindex.com/vendors/google-cloud.md) | Geolocation Testing + AI Testing; Geolocation test routing; for AI features, masked text-only test logs. No model training. | 🇺🇸 Europe and USA | 2026-09-30 |
| [Hetzner](https://thirdpartyindex.com/vendors/hetzner-online.md) | Hosting and object storage; Hosts our EU infrastructure; account and test data at rest, encrypted; encrypted test artefacts in object storage (Helsinki, Finland). | 🇪🇺 Europe | 2026-09-30 |
| [Intercom](https://thirdpartyindex.com/vendors/intercom.md) | Customer support; Name, email address and the content of support conversations. | 🇺🇸 USA | 2026-09-30 |
| [OpenAI, L.L.C.](https://thirdpartyindex.com/vendors/openai.md) | AI Testing; Masked, text-only test context for codeless AI test generation. Opt-in. No model training. | 🇺🇸 USA | 2026-09-30 |
| [Sentry](https://thirdpartyindex.com/vendors/sentry.md) | Application error reports; may include an account email or IP address in stack-trace context. No test artefacts.; Error tracking | 🇪🇺 Europe | 2026-09-30 |
| [Stripe Inc.](https://thirdpartyindex.com/vendors/stripe.md) | Billing contact and card handled by Stripe; we store the last 4 digits only, never the full card.; Payment processing | 🇺🇸 USA | 2026-09-30 |
| Unix-Solutions | Hosting; Hosts our EU infrastructure; account and test data at rest, encrypted. | 🇪🇺 Europe | 2026-09-30 |
| Vonage America, LLC | Phone numbers and SMS message content for account verification and alerting.; SMS delivery (two-factor authentication and alerts) | 🇺🇸 USA | 2026-09-30 |

Read from ([evidence](https://thirdpartyindex.com/evidence/21146)). CSV: https://thirdpartyindex.com/vendors/testingbot/subprocessors.csv

## Listed as a subprocessor by (0)

No tracked vendor lists it.

## Service status

Incidents it reported on its own status page.

- Last 90 days: 4 reported incidents (4 major or critical, 0 minor, 0 with no impact stated)
- Typical time to resolve: 3 h 13 min
- 2026-09-28: Stability issues (major)
- 2026-09-14: Datacenter provider incident (critical)
- 2026-09-14: Datacenter provider incident (critical)
- 2026-09-06: Maestro tests on physical Android devices (major)
- 2026-02-03: TestingBot Storage downtime (no impact stated)
- 2025-12-05: Downtime all services (no impact stated)

## Security contact

From its security.txt (https://testingbot.com/.well-known/security.txt):

- Contact: mailto:info@testingbot.com
- Disclosure policy: https://testingbot.com/privacy
- Security jobs: https://testingbot.com/careers

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api