# Tulu

Tulu (onetulu.com): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/tulu
- Documents last verified: 2026-10-04
- Transparency rating: 71/100 (how much it publishes, not how secure it is): Subprocessor list 30/30; Processing locations 0/8 (partial); Purposes 7/7; Data processing addendum 12/12; Trust center 8/8; Privacy policy 6/6; security.txt 0/6 (not found); Security page 0/5 (not found); Status page 0/5 (not found); Vulnerability disclosure 0/5 (not found); Pages still reachable 8/8
- Supply chain: relies on 2 tracked vendors directly, 29 within two hops, 148 within three; 0 tracked vendors rely on it directly, 0 within two hops, 0 within three
- Cite as: Tulu, Third Party Index, https://thirdpartyindex.com/vendors/tulu (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Trust center | https://www.onetulu.com/trust | 2026-10-04 | 2026-10-04 |
| Subprocessor list | https://www.onetulu.com/legal/data-processing#subprocessors | 2026-10-04 | 2026-10-04 |
| Data processing addendum | https://www.onetulu.com/legal/data-processing | 2026-10-04 | 2026-10-04 |
| Privacy policy | https://www.onetulu.com/legal/privacy-policy | 2026-10-04 | 2026-10-04 |
| Terms | https://www.onetulu.com/legal/terms-of-service | 2026-10-04 | 2026-10-04 |

## Subprocessors (11)

As its own list states them.

| Subprocessor | Purpose | Location | Listed since |
|---|---|---|---|
| [Anthropic (Claude API)](https://thirdpartyindex.com/vendors/anthropic.md) (AI model provider: Anthropic) | LLM processing of anonymised, aggregated data only (no PII transmitted). | — | 2026-10-04 |
| Google Ads API | Marketing campaign metrics ingestion (no PII). OAuth-triggered connection, then scheduled API pull. | — | 2026-10-04 |
| Google Analytics API (GA4) | Site analytics data ingestion (no PII). OAuth-triggered connection, then scheduled API pull. | — | 2026-10-04 |
| Google Cloud Platform (GCP) / BigQuery | Cloud infrastructure, data warehouse, storage. | — | 2026-10-04 |
| Google Workspace / Gmail | Incoming customer CSV file receipt; automatic 30-day purge. | — | 2026-10-04 |
| [HubSpot](https://thirdpartyindex.com/vendors/hubspot.md) | CRM data integration via API. | — | 2026-10-04 |
| LinkedIn Ads API | Marketing campaign metrics ingestion (no PII). OAuth-triggered connection, then scheduled API pull. | — | 2026-10-04 |
| Matomo Analytics API | Site analytics data ingestion (no PII). OAuth-triggered connection, then scheduled API pull. | — | 2026-10-04 |
| Meta / Facebook Ads API | Marketing campaign metrics ingestion (no PII). OAuth-triggered connection, then scheduled API pull. | — | 2026-10-04 |
| Microsoft / Bing Ads API | Marketing campaign metrics ingestion (no PII). OAuth-triggered connection, then scheduled API pull. | — | 2026-10-04 |
| Reddit Ads API | Marketing campaign metrics ingestion (no PII). OAuth-triggered connection, then scheduled API pull. | — | 2026-10-04 |

Read from ([evidence](https://thirdpartyindex.com/evidence/44497)). CSV: https://thirdpartyindex.com/vendors/tulu/subprocessors.csv

AI model providers (or a cloud provider's AI model service) among these entries: 1. All vendors that list one: https://thirdpartyindex.com/ai

## Subprocessor of (0)

No tracked vendor lists it.

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api