# Trello

[9 tracked vendors](https://thirdpartyindex.com/vendors/trello#used-by) name Trello as a subprocessor, including [Black Forest Labs](https://thirdpartyindex.com/vendors/black-forest-labs), [Frill](https://thirdpartyindex.com/vendors/frill-co) and [Termly](https://thirdpartyindex.com/vendors/termly). Trello is part of [Atlassian](https://thirdpartyindex.com/vendors/atlassian), whose subprocessor list declares [41 subprocessors](https://thirdpartyindex.com/vendors/atlassian#subprocessors), which we last checked on 2026-11-11. We have not found a separate list published by Trello.

Trello (trello.com): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/trello
- Documents last verified: 2026-11-11
- Transparency rating: 55/100 (how much it publishes, not how secure it is): Subprocessor list 0/30 (not found); Processing locations 0/8 (no list); Purposes 0/7 (no list); Data processing addendum 12/12; Trust center 8/8; Privacy policy 6/6; security.txt 6/6; Security page 5/5; Status page 5/5; Vulnerability disclosure 5/5; Pages still reachable 8/8
- Part of: [Atlassian](https://thirdpartyindex.com/vendors/atlassian)
- Supply chain: relies on 0 tracked vendors directly, 0 within two hops, 0 within three; 9 tracked vendors rely on it directly, 23 within two hops, 116 within three
- Cite as: Trello, Third Party Index, https://thirdpartyindex.com/vendors/trello (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Trust center | https://trello.com/trust | 2026-11-11 | 2026-09-21 |
| Data processing addendum | https://www.atlassian.com/legal/data-processing-addendum | 2026-11-11 | 2026-11-07 |
| Privacy policy | https://www.atlassian.com/legal/privacy-policy | 2026-11-11 | 2026-11-04 |
| Terms | https://www.atlassian.com/legal/atlassian-customer-agreement | 2026-11-11 | 2026-11-04 |
| Security page | https://www.atlassian.com/trust/data-protection | 2026-11-11 | 2026-11-10 |
| security.txt | https://trello.com/.well-known/security.txt | 2026-11-11 | 2026-09-21 |
| Status page | https://trello.status.atlassian.com/ | 2026-11-11 | 2026-11-11 |
| Security advisories | https://www.atlassian.com/trust/security/advisories | 2026-11-11 | 2026-11-10 |
| Subprocessor list (parent company's) | https://www.atlassian.com/legal/sub-processors | 2026-11-11 | 2026-11-04 |

## Subprocessors (0)

It publishes no list of its own; its parent company Atlassian lists 41: https://thirdpartyindex.com/vendors/atlassian.md

## Web Technologies

Trello's homepage made 134 requests to 10 domains, and 4 services controlled by another company. Loaded on 2026-11-04 by a browser that accepted nothing; other visits may load more or less. What a page loads is not a list of who receives customer data.

4 third parties by category: Tag managers 1 (Google Cloud); Cookie compliance 1 (OneTrust); Digital asset management 1 (reviewed: Orange Logic); Personalisation 1 (usually detected as Personalisation: Contentful). Each company that appears controlled by another organization is counted once, under the main category of the technologies detected from it on this homepage or, when none was, the category recorded from the company's own page (marked reviewed) or else the one it is usually detected as on other published homepages (marked as such); unclassified: none of these.

### Third parties (4)

- Contentful: 62 requests to ctfassets.net
- Google Cloud: 17 requests to gstatic.com, recaptcha.net, googletagmanager.com; Google Tag Manager, reCAPTCHA
- OneTrust: 11 requests to cookielaw.org, onetrust.com; OneTrust
- Orange Logic: 8 requests to orangelogic.com

### Affiliates (1)

- Atlassian: 32 requests to atlassian.com, atl-paas.net

### First party (1)

- Trello: 4 requests to trello.com; Amazon CloudFront, Amazon Web Services, Contentful, HSTS, HTTP/3, React, React Router 6, Sentry, Statsig 3.30.2, styled-components 6.1.19

3 tracked companies loaded by the homepage are not in Trello's subprocessor list. A website can use a service without it processing customer data.

## Subprocessor of (9)

Tracked vendors whose own subprocessor lists name it, and what they say they use it for.

- [Black Forest Labs](https://thirdpartyindex.com/vendors/black-forest-labs.md)
- [CodeAnt AI](https://thirdpartyindex.com/vendors/codeant-ai.md): Product management tools
- [Frill](https://thirdpartyindex.com/vendors/frill-co.md): Project Management
- [Kulturra.com](https://thirdpartyindex.com/vendors/kulturra-com.md): Project management
- [Qless](https://thirdpartyindex.com/vendors/qless.md)
- [Relay Commerce](https://thirdpartyindex.com/vendors/relay-commerce.md)
- [Skedda](https://thirdpartyindex.com/vendors/skedda.md): Collaboration; Used only by the Skedda sales team to help manage the sales process with Skedda leads and other prospective Skedda customers (venue System admins…
- [Snowfire AI](https://thirdpartyindex.com/vendors/snowfire-ai.md)
- [Termly](https://thirdpartyindex.com/vendors/termly.md): Work Management

## Security record

Breaches listed by Have I Been Pwned (CC BY 4.0, haveibeenpwned.com):

- Trello, 2024-01-16: 15111945 accounts; data: Email addresses, Names, Usernames

## Service status

Incidents it reported on its own status page.

- Last 90 days: 0 reported incidents (0 major or critical, 0 minor, 0 with no impact stated)
- Status page last read: 2026-11-12
- No incidents reported in the last 12 months
- 2026-05-17: Trello - degraded performance (minor)
- 2026-05-15: Trello - degraded performance (resolved) (minor)
- 2026-05-14: Users experiencing issues accessing multiple Atlassian products (critical)
- 2026-05-08: Multiple Atlassian services are experiencing issues (minor)
- 2026-02-21: Trello Slow or down for users (major)
- 2026-02-19: Degraded performance of Trello (minor)
- 2026-02-09: Trello performance is degraded (no impact stated)
- 2025-12-27: Outbound Email, Mobile Push Notifications, and Support Ticket Delivery Impacting All Cloud Products (critical)

## Security contact

From its security.txt (https://trello.com/.well-known/security.txt) ([evidence](https://thirdpartyindex.com/evidence/1468)):

- Contact: https://www.atlassian.com/trust/security/report-a-vulnerability
- Contact: mailto:security@atlassian.com
- Disclosure policy: https://www.atlassian.com/trust/security/report-a-vulnerability
- Encryption key: https://security-static-bifrost.prod-east.frontend.public.atl-paas.net/assets/atlassian-security-public.asc
- Security jobs: https://www.atlassian.com/company/careers/all-jobs?team=Security
- Languages: en
- Valid until 2027-02-04
- Signed

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api
