# TrustArc

TrustArc declares [10 subprocessors](https://thirdpartyindex.com/vendors/trustarc#subprocessors) in [its subprocessor list](https://trust.trustarc.com/en-US/policies/sub-processors-and-affiliates), which we last checked on 2026-11-11 ([evidence](https://thirdpartyindex.com/evidence/76726)). They include [Amazon Web Services](https://thirdpartyindex.com/vendors/amazon-web-services), [Google Cloud](https://thirdpartyindex.com/vendors/google-cloud) and [Microsoft](https://thirdpartyindex.com/vendors/microsoft). No published changes since we first read it on 2026-09-22. [3 tracked vendors](https://thirdpartyindex.com/vendors/trustarc#used-by) name TrustArc as a subprocessor, including [Redis](https://thirdpartyindex.com/vendors/redis), [Egnyte](https://thirdpartyindex.com/vendors/egnyte) and [Posit](https://thirdpartyindex.com/vendors/posit).

TrustArc (trustarc.com): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/trustarc
- Documents last verified: 2026-11-11
- Transparency rating: 84/100 (how much it publishes, not how secure it is): Subprocessor list 30/30; Processing locations 8/8; Purposes 7/7; Data processing addendum 12/12; Trust center 8/8; Privacy policy 6/6; security.txt 0/6 (not found); Security page 0/5 (not found); Status page 5/5; Vulnerability disclosure 0/5 (not found); Pages still reachable 8/8
- Supply chain: relies on 10 tracked vendors directly, 109 within two hops, 344 within three; 3 tracked vendors rely on it directly, 75 within two hops, 1454 within three
- Cite as: TrustArc, Third Party Index, https://thirdpartyindex.com/vendors/trustarc (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Trust center | https://trust.trustarc.com/en-US/ | 2026-11-11 | 2026-10-15 |
| Subprocessor list | https://trust.trustarc.com/en-US/policies/sub-processors-and-affiliates | 2026-11-11 | 2026-10-10 |
| Data processing addendum | https://trust.trustarc.com/en-US/policies | 2026-11-11 | 2026-09-22 |
| Privacy policy | https://trust.trustarc.com/en-US/policies/trustarc-privacy-notice | 2026-11-11 | 2026-11-10 |
| Status page | https://status.trustarc.com/ | 2026-11-11 | 2026-11-11 |

## Subprocessors (10)

As its own list states them.

| Subprocessor | Purpose | Location | Listed since |
|---|---|---|---|
| [Amazon Web Services](https://thirdpartyindex.com/vendors/amazon-web-services.md) (AI model provider: Amazon Bedrock) | Hosting service for TrustArc platform; Web search for AI-enabled features (Amazon Bedrock AgentCore) | Data Center for Cookie Consent Manager: EU West-1 (Dublin, Ireland) or AP South-1 (Mumbai, India); Data Center for Nymity Products: Canada Central-1 (Canada); Data Center for Platform: US East-1 (N. Virginia, USA) or EU Central-1 (Frankfurt, Germany); US East-1 (Fairfax, Virginia) or EU West-1 (Dublin, Ireland) | 2026-10-10 |
| [Daytona Platforms, Inc.](https://thirdpartyindex.com/vendors/daytona.md) | Secure sandbox environment for executing isolated AI-generated code and processing tasks | US or EU | 2026-09-22 |
| [Google LLC](https://thirdpartyindex.com/vendors/google-cloud.md) (AI model provider: Google Vertex AI / Gemini) | Image generation for AI-enabled features (Gemini); bot protection on consen and; individual rights request forms (reCAPTCHA) | US or EU | 2026-09-22 |
| [LangChain Inc.](https://thirdpartyindex.com/vendors/langchain.md) | Monitoring and tracing of AI-enabled feature activity within a TrustArc-controlled workspace | US Central1 (Iowa, US) or EU West4 (Netherlands) | 2026-10-10 |
| [Mailjet SAS (a Sinch company)](https://thirdpartyindex.com/vendors/mailjet.md) | Nymity R&A (Research & Alerts) email delivery service | Frankfurt, Germany, Saint-; Ghislain, Belgium | 2026-09-22 |
| [Microsoft Corporation](https://thirdpartyindex.com/vendors/microsoft.md) (AI model provider: Azure OpenAI) | Microsoft Azure AI Platform hosting large language model instance for AI-enabled features; Cloud services supporting application logging and messaging queue capabilities for e-mail delivery for Nymity R&A | Canada, Central (Toronto, ON) for Nymity R&A; US East (Virginia, US) or EU Germany West Central (Frankurt, Germany) and | 2026-10-10 |
| [MongoDB Atlas](https://thirdpartyindex.com/vendors/mongodb.md) | Embedding generation, semantic search and reranking supporting AI-enabled features | US or EU | 2026-09-22 |
| [Pinecone Systems, Inc.](https://thirdpartyindex.com/vendors/pinecone.md) | Vector database storing embeddings used by AI-; enabled features | (Frankfurt); US East-1 (Fairfax,; Virginia) or EU Central-1 | 2026-09-22 |
| [Salesforce.com](https://thirdpartyindex.com/vendors/salesforce.md) | Customer service, sales, and support | California, USA | 2026-09-22 |
| [Workato, Inc.](https://thirdpartyindex.com/vendors/workato.md) | TrustArc platform integration tool | Virginia, US or Frankfurt, Germany | 2026-09-22 |

Read from ([evidence](https://thirdpartyindex.com/evidence/76726)). CSV: https://thirdpartyindex.com/vendors/trustarc/subprocessors.csv

AI model providers (or a cloud provider's AI model service) among these entries: 3. All vendors that list one: https://thirdpartyindex.com/ai

## Web Technologies

TrustArc's homepage made 99 requests to 7 domains, and 2 services controlled by another company. Loaded on 2026-11-05 by a browser that accepted nothing; other visits may load more or less. What a page loads is not a list of who receives customer data.

2 third parties by category: Advertising 1 (Google Cloud); Marketing automation 1 (Adobe). Each company that appears controlled by another organization is counted once, under the main category of the technologies detected from it on this homepage or, when none was, the category recorded from the company's own page (marked reviewed) or else the one it is usually detected as on other published homepages (marked as such); unclassified: none of these.

### Third parties (2)

- Adobe: 26 requests to typekit.net, marketo.net, mktoresp.com; Marketo
- Google Cloud: 11 requests to google.com, doubleclick.net, googletagmanager.com; DoubleClick Floodlight, Google Analytics, Google Tag Manager (its subprocessor list names it too)

### First party (1)

- TrustArc: 62 requests to trustarc.com; Adobe Fonts, Cloudflare, HTTP/3, MySQL, Open Graph, PHP, Priority Hints, RSS, TrustArc, Twitter Emoji (Twemoji), Typekit, WP Engine, WordPress, Yoast SEO 28.8, Yoast SEO Premium 28.8, jQuery 3.6.0

1 tracked company loaded by the homepage is not in TrustArc's subprocessor list. A website can use a service without it processing customer data.

## Subprocessor of (3)

Tracked vendors whose own subprocessor lists name it, and what they say they use it for.

- [Egnyte](https://thirdpartyindex.com/vendors/egnyte.md)
- [Posit](https://thirdpartyindex.com/vendors/posit.md): Privacy compliance
- [Redis](https://thirdpartyindex.com/vendors/redis.md): Privacy compliance platform

## Service status

Incidents it reported on its own status page.

- Last 90 days: 0 reported incidents (0 major or critical, 0 minor, 0 with no impact stated)
- Status page last read: 2026-11-12
- No incidents reported in the last 12 months
- Latest incident reported: 2024-04-11: This is an example incident (no impact stated)

## Incidents reported by TrustArc's subprocessors

Incidents reported in the last 30 days on their own status pages by 5 vendors TrustArc lists as subprocessors. A subprocessor list names a company, not the service an incident touched.

- 2026-11-10: [Pinecone](https://thirdpartyindex.com/vendors/pinecone#status), which TrustArc lists as a subprocessor, reported \[Serverless\]\[GCP\]\[us-central1\] Elevated errors and timeouts on read operations for some indexes (major)
- 2026-11-05: [Workato](https://thirdpartyindex.com/vendors/workato#status), which TrustArc lists as a subprocessor, reported API Platform Performance Degradation (minor)
- 2026-11-03: [Daytona](https://thirdpartyindex.com/vendors/daytona#status), which TrustArc lists as a subprocessor, reported Degraded performance: API and sandbox operations (minor)
- 2026-11-03: [Pinecone](https://thirdpartyindex.com/vendors/pinecone#status), which TrustArc lists as a subprocessor, reported \[Metrics Endpoint\] 5xx Errors on \*/metrics/discovery (minor)
- 2026-11-02: [Pinecone](https://thirdpartyindex.com/vendors/pinecone#status), which TrustArc lists as a subprocessor, reported \[Pod-Based Indexes\] Stalled control plane operations. (minor)
- 2026-10-30: [LangChain](https://thirdpartyindex.com/vendors/langchain#status), which TrustArc lists as a subprocessor, reported Increased latency and 500 rate (major)
- 2026-10-30: [Workato](https://thirdpartyindex.com/vendors/workato#status), which TrustArc lists as a subprocessor, reported Webhooks Performance Degradation (minor)
- 2026-10-30: [Daytona](https://thirdpartyindex.com/vendors/daytona#status), which TrustArc lists as a subprocessor, reported Degraded performance for a subset of US runners (minor)
- 2026-10-30: [Daytona](https://thirdpartyindex.com/vendors/daytona#status), which TrustArc lists as a subprocessor, reported Sandbox listing (GET /sandbox) (minor)
- 2026-10-29: [Daytona](https://thirdpartyindex.com/vendors/daytona#status), which TrustArc lists as a subprocessor, reported US Region Runner Degradation (minor)
- 2026-10-29: [Workato](https://thirdpartyindex.com/vendors/workato#status), which TrustArc lists as a subprocessor, reported Intermittent errors in knowledge base search (minor)
- 2026-10-27: [Workato](https://thirdpartyindex.com/vendors/workato#status), which TrustArc lists as a subprocessor, reported Issue with Genie Conversation History and AIRO Chats (minor)
- 2026-10-22: [Daytona](https://thirdpartyindex.com/vendors/daytona#status), which TrustArc lists as a subprocessor, reported Some feature flags are unavailable in the Dashboard (minor)
- 2026-10-20: [MongoDB](https://thirdpartyindex.com/vendors/mongodb#status), which TrustArc lists as a subprocessor, reported GCP Availability Zone europe-west2-b connectivity issues (minor)
- 2026-10-20: [Workato](https://thirdpartyindex.com/vendors/workato#status), which TrustArc lists as a subprocessor, reported Genie and AIRO Not Responding in Workato UI (no impact stated)
- 2026-10-20: [Workato](https://thirdpartyindex.com/vendors/workato#status), which TrustArc lists as a subprocessor, reported Log Processing Service Degradation (minor)
- 2026-10-16: [Daytona](https://thirdpartyindex.com/vendors/daytona#status), which TrustArc lists as a subprocessor, reported Reduced GPU capacity (minor)
- 2026-10-16: [Workato](https://thirdpartyindex.com/vendors/workato#status), which TrustArc lists as a subprocessor, reported Errors in AI by Workato Analyze text action (minor)
- 2026-10-14: [LangChain](https://thirdpartyindex.com/vendors/langchain#status), which TrustArc lists as a subprocessor, reported Sandbox Performance Degraded (minor)
- 2026-10-14: [Pinecone](https://thirdpartyindex.com/vendors/pinecone#status), which TrustArc lists as a subprocessor, reported \[Inference\] 5xx errors on some \`llama-text-embed-v2\` requests (minor)
- 2026-10-14: [Workato](https://thirdpartyindex.com/vendors/workato#status), which TrustArc lists as a subprocessor, reported Issues with AI by Workato (minor)

The subprocessor list as we read it on any date: https://thirdpartyindex.com/labs/time-machine/trustarc

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api