Tines
Certifications and attestations: SOC 2 Type IISOC 2 Type IISO/IEC 27001ISO/IEC 27701ISO/IEC 42001TX-RAMPCSA STAR
Says it complies with: GDPR, CCPA/CPRA
Certifications as listed on Tines's trust center (evidence) ; reports themselves are usually shared on request.
Transparency
Breakdown
| Subprocessor list | 30 / 30 | |
| Processing locations | 8 / 8 | |
| Purposes | 7 / 7 | |
| Data processing addendum | 12 / 12 | |
| Trust center | 8 / 8 | |
| Privacy policy | 6 / 6 | |
| security.txt | 6 / 6 | |
| Security page | 5 / 5 | |
| Status page | 5 / 5 | |
| Vulnerability disclosure | not found | 0 / 5 |
| Pages still reachable | 8 / 8 | |
| Total | 95 / 100 |
Only documents we can retrieve count: a page behind a login or a broken link scores nothing.
Badge
For Tines's own site; it updates with the rating.
<a href="https://thirdpartyindex.com/vendors/tines"><img src="https://thirdpartyindex.com/badge/tines.svg" alt="Tines transparency rating on Third Party Index" height="20"></a>[](https://thirdpartyindex.com/vendors/tines)Documents
| Document | Verified | Changed | Evidence |
|---|---|---|---|
| Trust center safebase | snapshot | ||
| Subprocessor list | snapshot | ||
| Data processing addendum | snapshot | ||
| Privacy policy | snapshot | ||
| Terms | snapshot | ||
| Security page | snapshot | ||
| security.txt | snapshot | ||
| Status page | snapshot |
Subprocessors
| Name | Purpose | Location | Listed since |
|---|---|---|---|
| AWS | Cloud infrastructure and data | Customer-selected AWS region, typically one of: Japan (Tokyo), Australia (Sydney), Switzerland (Zurich), Ireland (Dublin), Sweden (Stockholm), United Kingdom (London), or United States (Oregon) | |
| AWS Bedrock | Hosting AI models (Tines-hosted or customer models) | Customer-selected AWS region, typically one of: Japan (Tokyo), Australia (Sydney), Switzerland (Zurich), Ireland (Dublin), Sweden (Stockholm), United Kingdom (London), or United States (Oregon) | |
| Cloudflare Inc | Network infrastructure and secure tunnel routing | USA | |
| Google Cloud Platform (Google LLC) | Provision of cloud infrastructure services including hosting, storage and processing of customer analytics and usage data | United States | |
| Intercom | User database management, chatbot support | USA, Ireland | |
| OpenAI | AI model processing and inference for automated workflows and natural language features | United States, Ireland, UK | |
| Plain | Customer support / ticketing | USA, UK | |
| Salesforce (SFDC) | CRM, pipeline management, lead scoring | USA, Germany, France, Japan | |
| Snowflake | Data warehouse services | Ireland | |
| Stripe | Consumption billing for Tines-hosted AI model | USA, Ireland | |
| Zendesk | Customer support and ticketing | USA, Ireland |
Listed as a subprocessor by (5)
Purposes as each company states them.
Barracuda Networks barracuda.com
Elasticsearch elastic.co Enterprise workflow automation based on alerts from the customer's Elastic Products (servicing customers in the US, Canada, and Mexico); Enterprise workflow automation based on alerts from the customer's Elastic Products (servicing customers in all locations except the US, Canada, and Mexico)
GitHub github.com Security management
Vendr vendr.com Integration Platform
Webflow webflow.com Security automation
Changes
None since tracking began.