# Urlbox

Urlbox declares [20 subprocessors](https://thirdpartyindex.com/vendors/urlbox#subprocessors) in [its subprocessor list](https://trust.urlbox.com/subprocessors), which we last checked on 2026-11-11 ([evidence](https://thirdpartyindex.com/evidence/246011)). They include [Google Cloud](https://thirdpartyindex.com/vendors/google-cloud), [OpenAI](https://thirdpartyindex.com/vendors/openai) and [Stripe](https://thirdpartyindex.com/vendors/stripe). No published changes since we first read it on 2026-11-05. [4 tracked vendors](https://thirdpartyindex.com/vendors/urlbox#used-by) name Urlbox as a subprocessor, including [Zero](https://thirdpartyindex.com/vendors/zero), [Ceros](https://thirdpartyindex.com/vendors/ceros) and [Paved](https://thirdpartyindex.com/vendors/paved).

Urlbox (urlbox.com): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/urlbox
- Documents last verified: 2026-11-11
- Transparency rating: 76/100 (how much it publishes, not how secure it is): Subprocessor list 30/30; Processing locations 8/8; Purposes 0/7 (partial); Data processing addendum 0/12 (not found); Trust center 8/8; Privacy policy 6/6; security.txt 6/6; Security page 5/5; Status page 5/5; Vulnerability disclosure 0/5 (not found); Pages still reachable 8/8
- Supply chain: relies on 19 tracked vendors directly, 170 within two hops, 534 within three; 4 tracked vendors rely on it directly, 6 within two hops, 8 within three
- Cite as: Urlbox, Third Party Index, https://thirdpartyindex.com/vendors/urlbox (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Trust center | https://trust.urlbox.com/ | 2026-11-11 | 2026-11-09 |
| Subprocessor list | https://trust.urlbox.com/subprocessors | 2026-11-11 | 2026-11-09 |
| Privacy policy | https://urlbox.com/policies/privacy | 2026-11-11 | 2026-11-11 |
| Terms | https://urlbox.com/policies/terms | 2026-11-11 | 2026-11-05 |
| Security page | https://urlbox.com/security | 2026-11-11 | 2026-11-07 |
| security.txt | https://urlbox.com/.well-known/security.txt | 2026-11-11 | 2026-11-05 |
| Status page | https://status.urlbox.com/ | 2026-11-11 | 2026-11-05 |

## Subprocessors (20)

As its own list states them.

| Subprocessor | Purpose | Location | Listed since |
|---|---|---|---|
| [AC PM LLC (Postmark)](https://thirdpartyindex.com/vendors/postmark.md) | — | Customer support | 2026-11-05 |
| [Anthropic](https://thirdpartyindex.com/vendors/anthropic.md) (AI model provider: Anthropic) | — | Engineering | 2026-11-09 |
| [Cloudflare](https://thirdpartyindex.com/vendors/cloudflare.md) | — | Cloud monitoring | 2026-11-05 |
| [Crisp](https://thirdpartyindex.com/vendors/crisp.md) | — | Support | 2026-11-05 |
| [Crunchy Data](https://thirdpartyindex.com/vendors/crunchy-data.md) | — | Data Storage | 2026-11-05 |
| [Customer.io](https://thirdpartyindex.com/vendors/customer-io.md) | Marketing Emails sent via Customer.io | Marketing | 2026-11-09 |
| [Fathom Analytics](https://thirdpartyindex.com/vendors/fathom-analytics.md) | — | Data analytics | 2026-11-05 |
| [Google Cloud Platform](https://thirdpartyindex.com/vendors/google-cloud.md) | — | Cloud provider | 2026-11-05 |
| [Google Workspace](https://thirdpartyindex.com/vendors/google-cloud.md) | — | Identity provider | 2026-11-05 |
| [MongoDB Atlas](https://thirdpartyindex.com/vendors/mongodb.md) | — | Data storage and processing | 2026-11-05 |
| [n8n](https://thirdpartyindex.com/vendors/n8n.md) | — | Collaboration | 2026-11-05 |
| [OpenAI](https://thirdpartyindex.com/vendors/openai.md) (AI model provider: OpenAI) | — | Engineering | 2026-11-09 |
| [Paddle.com Market Ltd (ProfitWell)](https://thirdpartyindex.com/vendors/paddle.md) | — | Finance and payments | 2026-11-05 |
| [Redis](https://thirdpartyindex.com/vendors/redis.md) | — | Data storage and processing | 2026-11-05 |
| [SavvyCal LLC](https://thirdpartyindex.com/vendors/savvycal.md) | — | Customer support | 2026-11-05 |
| [Simple Analytics](https://thirdpartyindex.com/vendors/simple-analytics.md) | — | Data analytics | 2026-11-05 |
| [Slack](https://thirdpartyindex.com/vendors/slack.md) | — | Collaboration | 2026-11-05 |
| [Stripe](https://thirdpartyindex.com/vendors/stripe.md) | — | Finance and payments | 2026-11-05 |
| [UserList](https://thirdpartyindex.com/vendors/userlist.md) | — | Marketing | 2026-11-05 |
| [Zapier](https://thirdpartyindex.com/vendors/zapier.md) | — | Collaboration | 2026-11-05 |

Read from ([evidence](https://thirdpartyindex.com/evidence/220846)). CSV: https://thirdpartyindex.com/vendors/urlbox/subprocessors.csv

AI model providers (or a cloud provider's AI model service) among these entries: 2. All vendors that list one: https://thirdpartyindex.com/ai

## Compliance

As its trust center lists them.

- Audited: SOC 2 Type II ([evidence](https://thirdpartyindex.com/evidence/220845))
- Claimed: GDPR ([evidence](https://thirdpartyindex.com/evidence/220845))

## Web Technologies

Urlbox's homepage made 87 requests to 3 domains, and 2 services controlled by another company. Loaded on 2026-11-06 by a browser that accepted nothing; other visits may load more or less. What a page loads is not a list of who receives customer data.

2 third parties by category: Analytics 1 (Fathom Analytics); Live chat 1 (Crisp). Each company that appears controlled by another organization is counted once, under the main category of the technologies detected from it on this homepage or, when none was, the category recorded from the company's own page (marked reviewed) or else the one it is usually detected as on other published homepages (marked as such); unclassified: none of these.

### Third parties (2)

- Crisp: 6 requests to crisp.chat; Crisp Live Chat (its subprocessor list names it too)
- Fathom Analytics: 2 requests to usefathom.com; Fathom (its subprocessor list names it too)

### First party (1)

- Urlbox: 79 requests to urlbox.com; Cloudflare, Framer Motion, Goober, HSTS, Lucide, Next.js 16.3.6, Open Graph, Radix UI, React, Turbopack, Vercel, Webpack

## Subprocessor of (4)

Tracked vendors whose own subprocessor lists name it, and what they say they use it for.

- [Ceros](https://thirdpartyindex.com/vendors/ceros.md): Relevant Customer Data: The URLs submitted, any parameters or metadata included in a request, and the page content temporarily needed to render screenshots (HTM…
- [Paved](https://thirdpartyindex.com/vendors/paved.md): Screenshots
- [Sherpa](https://thirdpartyindex.com/vendors/sherpa.md)
- [Zero](https://thirdpartyindex.com/vendors/zero.md): Website screenshot previews

## Service status

Incidents it reported on its own status page.

- Last 90 days: 2 reported incidents (1 major or critical, 0 minor, 1 with no impact stated)
- Typical time to resolve: 38 min
- Status page last read: 2026-11-12
- Under way: Major outage due to infrastructure failure (no impact stated), since 2026-11-01 14:10 UTC
- 2026-11-01: Major outage due to infrastructure failure (no impact stated)
- 2026-10-01: Major outage: render requests failing (major)
- 2026-06-02: Investigating reports of API errors and timeouts (minor)
- 2026-06-01: Investigating a major outage of our API (minor)
- 2026-04-30: Some GPU requests failing (minor)
- 2026-03-05: Slow Requests (minor)
- 2026-02-26: Investigating failures when using S3 compatible storage (no impact stated)
- 2026-01-07: force=true requests temporarily cached (no impact stated)

## Incidents reported by Urlbox's subprocessors

Incidents reported in the last 30 days on their own status pages by 8 vendors Urlbox lists as subprocessors. A subprocessor list names a company, not the service an incident touched.

- 2026-11-11: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Urlbox lists as a subprocessor, reported Unable to start new Workspace Agent runs (critical)
- 2026-11-11: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Urlbox lists as a subprocessor, reported Elevated errors affecting logins, sign-ups, and ChatGPT features (minor)
- 2026-11-10: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Urlbox lists as a subprocessor, reported Elevated errors on Fable 52 and Mythos 52 (no impact stated)
- 2026-11-10: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Urlbox lists as a subprocessor, reported Incorrect cost data in Costs API exports (no impact stated)
- 2026-11-09: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Urlbox lists as a subprocessor, reported Elevated Errors On API (minor)
- 2026-11-09: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Urlbox lists as a subprocessor, reported Elevated ChatGPT Conversation Errors (minor)
- 2026-11-08: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Urlbox lists as a subprocessor, reported Elevated errors with image generation (minor)
- 2026-11-08: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Urlbox lists as a subprocessor, reported Degraded performance for Claude Fable 5.1 (minor)
- 2026-11-06: [Customer.io](https://thirdpartyindex.com/vendors/customer-io#status), which Urlbox lists as a subprocessor, reported Customers are Unable to add new Email Sending Domains (major)
- 2026-11-06: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Urlbox lists as a subprocessor, reported Elevated error rates with some U.S. business Mastercards (no impact stated)
- 2026-11-05: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Urlbox lists as a subprocessor, reported ChatGPT Work and Dots Errors (minor)
- 2026-11-05: [Postmark](https://thirdpartyindex.com/vendors/postmark#status), which Urlbox lists as a subprocessor, reported Delays in activity data (no impact stated)
- 2026-11-04: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Urlbox lists as a subprocessor, reported Elevated error rates across paid ChatGPT plans (minor)
- 2026-11-04: [Zapier](https://thirdpartyindex.com/vendors/zapier#status), which Urlbox lists as a subprocessor, reported Chat with Sales temporarily unavailable (no impact stated)
- 2026-11-04: [Postmark](https://thirdpartyindex.com/vendors/postmark#status), which Urlbox lists as a subprocessor, reported Delays processing Inbound messages (no impact stated)
- 2026-11-03: [Zapier](https://thirdpartyindex.com/vendors/zapier#status), which Urlbox lists as a subprocessor, reported Delayed or failed template recommendations and template setup (no impact stated)
- 2026-11-03: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Urlbox lists as a subprocessor, reported File upload errors in ChatGPT (minor)
- 2026-11-02: [Zapier](https://thirdpartyindex.com/vendors/zapier#status), which Urlbox lists as a subprocessor, reported "Chat with Sales" page not loading (no impact stated)
- 2026-11-01: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Urlbox lists as a subprocessor, reported Elevated Instant Payouts failures (no impact stated)
- 2026-10-30: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Urlbox lists as a subprocessor, reported Elevated errors with search in Dots, ChatGPT Work, and certain ChatGPT thinking experiences (minor)
- 2026-10-30: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Urlbox lists as a subprocessor, reported Elevated errors for GPT Image 2 API image edits (minor)
- 2026-10-29: [Zapier](https://thirdpartyindex.com/vendors/zapier#status), which Urlbox lists as a subprocessor, reported Discord integration issues (no impact stated)
- 2026-10-28: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Urlbox lists as a subprocessor, reported Elevated Issuing errors from 17:13 - 20:41 UTC (minor)
- 2026-10-28: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Urlbox lists as a subprocessor, reported Elevated errors affecting the Google Calendar connector (minor)
- 2026-10-28: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Urlbox lists as a subprocessor, reported Elevated errors affecting the Gmail connector (minor)
- 2026-10-27: [Customer.io](https://thirdpartyindex.com/vendors/customer-io#status), which Urlbox lists as a subprocessor, reported Customer.io UI is currently unavailable for some customers (minor)
- 2026-10-27: [Postmark](https://thirdpartyindex.com/vendors/postmark#status), which Urlbox lists as a subprocessor, reported SMS codes for two-factor authentication may not arrive (no impact stated)
- 2026-10-27: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Urlbox lists as a subprocessor, reported Elevated errors for Claude Sonnet 5.5 (major)
- 2026-10-27: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Urlbox lists as a subprocessor, reported 6.1 Sol Degraded Model Performance (minor)
- 2026-10-27: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Urlbox lists as a subprocessor, reported Elevated errors for Claude Sonnet 5.5 (major)
- 2026-10-27: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Urlbox lists as a subprocessor, reported Elevated error rates for most hosted Code Reviews and Security Reviews on private GitHub repositories (no impact stated)
- 2026-10-26: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Urlbox lists as a subprocessor, reported Elevated error rates for Ads POST requests (minor)
- 2026-10-25: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Urlbox lists as a subprocessor, reported Elevated errors for Claude Fable 5.1 (major)
- 2026-10-25: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Urlbox lists as a subprocessor, reported Elevated errors for Claude Sonnet 5.5 and other models (major)
- 2026-10-24: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Urlbox lists as a subprocessor, reported Elevated Blik errors (no impact stated)
- 2026-10-24: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Urlbox lists as a subprocessor, reported Elevated errors for Claude Fable 5 and Claude Fable 5.1 (major)
- 2026-10-24: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Urlbox lists as a subprocessor, reported Elevated errors for Claude Opus 5.5 (major)
- 2026-10-23: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Urlbox lists as a subprocessor, reported Elevated errors for Claude Fable 5.1, Sonnet 5.5, and Haiku 5.5 (critical)
- 2026-10-23: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Urlbox lists as a subprocessor, reported Degraded experience with ChatGPT app connections using CIMD (minor)
- 2026-10-23: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Urlbox lists as a subprocessor, reported Help Center Chat Support Degraded (no impact stated)
- 2026-10-23: [Zapier](https://thirdpartyindex.com/vendors/zapier#status), which Urlbox lists as a subprocessor, reported Connection errors affecting Salesforce Pardot Zaps (major)
- 2026-10-23: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Urlbox lists as a subprocessor, reported Delays in customer support responses (no impact stated)
- 2026-10-22: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Urlbox lists as a subprocessor, reported Elevated Bancontact errors (no impact stated)
- 2026-10-22: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Urlbox lists as a subprocessor, reported New Ad Accounts failing to provision admins (minor)
- 2026-10-22: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Urlbox lists as a subprocessor, reported Degraded Performance of Dots on Enterprise (minor)
- 2026-10-22: [Zapier](https://thirdpartyindex.com/vendors/zapier#status), which Urlbox lists as a subprocessor, reported Security updates in progress for third-party software components (no impact stated)
- 2026-10-22: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Urlbox lists as a subprocessor, reported Elevated Bancontact errors (no impact stated)
- 2026-10-22: [Zapier](https://thirdpartyindex.com/vendors/zapier#status), which Urlbox lists as a subprocessor, reported Assessment of recently reported PHP vulnerabilities (no impact stated)
- 2026-10-22: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Urlbox lists as a subprocessor, reported Elevated errors affecting Connectors (minor)
- 2026-10-22: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Urlbox lists as a subprocessor, reported Elevated ChatGPT conversation and Responses API errors (minor)
- 2026-10-21: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Urlbox lists as a subprocessor, reported Authentication errors for some users (major)
- 2026-10-21: [Paddle](https://thirdpartyindex.com/vendors/paddle#status), which Urlbox lists as a subprocessor, reported Issue affecting metrics and reporting in the seller dashboard (minor)
- 2026-10-21: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Urlbox lists as a subprocessor, reported Degraded performance for Claude Fable 5 (minor)
- 2026-10-21: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Urlbox lists as a subprocessor, reported Elevated error rates for gpt-5.6-luna API requests (minor)
- 2026-10-21: [Zapier](https://thirdpartyindex.com/vendors/zapier#status), which Urlbox lists as a subprocessor, reported Delayed real-time updates in Zapier Tables (no impact stated)
- 2026-10-21: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Urlbox lists as a subprocessor, reported Elevated FedRAMP API error rates for Astra and Sol (minor)
- 2026-10-21: [Zapier](https://thirdpartyindex.com/vendors/zapier#status), which Urlbox lists as a subprocessor, reported Upstream errors with the BambooHR integration (no impact stated)
- 2026-10-21: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Urlbox lists as a subprocessor, reported Degraded performance in ChatGPT, Codex, and APIs (minor)
- 2026-10-20: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Urlbox lists as a subprocessor, reported Spike in cancellations and expired errors with PayByBank payments (no impact stated)
- 2026-10-20: [MongoDB](https://thirdpartyindex.com/vendors/mongodb#status), which Urlbox lists as a subprocessor, reported GCP Availability Zone europe-west2-b connectivity issues (minor)
- 2026-10-20: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Urlbox lists as a subprocessor, reported Elevated Revolut Pay errors (no impact stated)
- 2026-10-19: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Urlbox lists as a subprocessor, reported File Download errors (minor)
- 2026-10-16: [Zapier](https://thirdpartyindex.com/vendors/zapier#status), which Urlbox lists as a subprocessor, reported Errors publishing Zaps from Guided Templates with app approvals enabled (major)
- 2026-10-15: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Urlbox lists as a subprocessor, reported Elevated declines on Mastercard (no impact stated)
- 2026-10-15: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Urlbox lists as a subprocessor, reported Elevated declines on Visa (no impact stated)
- 2026-10-15: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Urlbox lists as a subprocessor, reported Widespread feature degradation (major)
- 2026-10-15: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Urlbox lists as a subprocessor, reported Elevated Amazon Pay errors (no impact stated)
- 2026-10-14: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Urlbox lists as a subprocessor, reported Delayed Costs data in the Compliance API (minor)
- 2026-10-14: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Urlbox lists as a subprocessor, reported Limited availability on gpt-image-2.5-flare and gpt-image-2.5-sunburst (minor)
- 2026-10-14: [Zapier](https://thirdpartyindex.com/vendors/zapier#status), which Urlbox lists as a subprocessor, reported Permission errors affecting shared Forms, Canvas, and Tables (no impact stated)
- 2026-10-14: [Zapier](https://thirdpartyindex.com/vendors/zapier#status), which Urlbox lists as a subprocessor, reported Zoom Team Chat App connection failure (no impact stated)
- 2026-10-14: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Urlbox lists as a subprocessor, reported Degraded performance in Codex and ChatGPT Work (minor)
- 2026-10-13: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Urlbox lists as a subprocessor, reported Degraded performance in GPT-6.1 Sol Codex and Work mode (minor)

The subprocessor list as we read it on any date: https://thirdpartyindex.com/labs/time-machine/urlbox

## Security contact

From its security.txt (https://urlbox.com/.well-known/security.txt) ([evidence](https://thirdpartyindex.com/evidence/220831)):

- Contact: mailto:security@urlbox.com
- Disclosure policy: https://docs.google.com/document/d/1UPixSShO3QRbtnkCmLM28Sl5XMmCrW8vxvePdSJxqsY
- Languages: en
- No expiry date

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api
