# Tulip

Tulip (tulip.com): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/tulip
- Documents last verified: 2026-10-08
- Transparency rating: 75/100 (how much it publishes, not how secure it is): Subprocessor list 30/30; Processing locations 8/8; Purposes 7/7; Data processing addendum 0/12 (not found); Trust center 0/8 (not found); Privacy policy 6/6; security.txt 6/6; Security page 5/5; Status page 5/5; Vulnerability disclosure 0/5 (not found); Pages still reachable 8/8
- Supply chain: relies on 9 tracked vendors directly, 111 within two hops, 339 within three; 0 tracked vendors rely on it directly, 0 within two hops, 0 within three
- Cite as: Tulip, Third Party Index, https://thirdpartyindex.com/vendors/tulip (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Subprocessor list | https://www.tulip.com/subprocessors/ | 2026-10-08 | 2026-10-08 |
| Privacy policy | https://www.tulip.com/privacy-policy/ | 2026-10-08 | 2026-10-08 |
| Terms | https://www.tulip.com/documents-legal-msa/ | 2026-10-08 | 2026-10-08 |
| Security page | https://www.tulip.com/security/ | 2026-10-08 | 2026-10-08 |
| security.txt | https://www.tulip.com/.well-known/security.txt | 2026-10-08 | 2026-10-08 |
| Status page | https://status.tulip.com/ | 2026-10-08 | 2026-10-08 |

## Subprocessors (12)

As its own list states them.

| Subprocessor | Purpose | Location | Listed since |
|---|---|---|---|
| [AWS](https://thirdpartyindex.com/vendors/amazon-web-services.md) | Cloud infrastructure hosting | United States | 2026-10-08 |
| Crashlytics | Crash reporting, application logging, online review and statistical analysis of application logs | United States | 2026-10-08 |
| [Datadog](https://thirdpartyindex.com/vendors/datadog.md) | Infrastructure monitoring, application performance monitoring, and log management | United States | 2026-10-08 |
| [Firebase](https://thirdpartyindex.com/vendors/firebase.md) | Mobile development platform | United States | 2026-10-08 |
| G Suite | Cloud computing, productivity and collaboration tools | United States | 2026-10-08 |
| [GitLab](https://thirdpartyindex.com/vendors/gitlab.md) | Source code management and CI/CD (software engineering and maintenance) | United States | 2026-10-08 |
| Google Chronicle | Cloud infrastructure hosting | United States | 2026-10-08 |
| [Google Cloud Platform](https://thirdpartyindex.com/vendors/google-cloud.md) | Security Information and Event Management | United States | 2026-10-08 |
| [Mailgun](https://thirdpartyindex.com/vendors/mailgun.md) | Email APIs | United States | 2026-10-08 |
| [SalesForce](https://thirdpartyindex.com/vendors/salesforce.md) | Customer Service and marketing automation | United States | 2026-10-08 |
| [Twilio](https://thirdpartyindex.com/vendors/twilio.md) | Communication (SMS, other) | United States | 2026-10-08 |
| [ZenDesk](https://thirdpartyindex.com/vendors/zendesk.md) | Support ticketing | United States | 2026-10-08 |

Read from ([evidence](https://thirdpartyindex.com/evidence/62928)). CSV: https://thirdpartyindex.com/vendors/tulip/subprocessors.csv

## Subprocessor of (0)

No tracked vendor lists it.

## Security contact

From its security.txt (https://www.tulip.com/.well-known/security.txt) ([evidence](https://thirdpartyindex.com/evidence/62923)):

- Contact: mailto:security@tulip.com
- Encryption key: https://tulip.com/pgp-public-key.txt
- Security jobs: https://tulip.com/about/careers/
- No expiry date

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api