# Vasco

Vasco (vasco.app): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/vasco
- Documents last verified: 2026-10-05
- Transparency rating: 89/100 (how much it publishes, not how secure it is): Subprocessor list 30/30; Processing locations 8/8; Purposes 7/7; Data processing addendum 12/12; Trust center 8/8; Privacy policy 6/6; security.txt 0/6 (not found); Security page 5/5; Status page 5/5; Vulnerability disclosure 0/5 (not found); Pages still reachable 8/8
- Supply chain: relies on 16 tracked vendors directly, 119 within two hops, 348 within three; 0 tracked vendors rely on it directly, 0 within two hops, 0 within three
- Cite as: Vasco, Third Party Index, https://thirdpartyindex.com/vendors/vasco (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Trust center | https://trust.vasco.app/ | 2026-10-05 | 2026-10-05 |
| Subprocessor list | https://trust.vasco.app/?itemUid=e3fae2ca-94a9-416b-b577-5c90e382df57 | 2026-10-05 | 2026-10-05 |
| Data processing addendum | https://vasco.app/legal/dpa | 2026-10-05 | 2026-10-05 |
| Privacy policy | https://vasco.app/legal/privacy | 2026-10-05 | 2026-10-05 |
| Terms | https://vasco.app/legal/terms-of-service | 2026-10-05 | 2026-10-05 |
| Security page | https://vasco.app/legal/security | 2026-10-05 | 2026-10-05 |
| Status page | https://status.vasco.app/ | 2026-10-05 | 2026-10-05 |

## Subprocessors (17)

As its own list states them.

| Subprocessor | Purpose | Location | Listed since |
|---|---|---|---|
| [Ably](https://thirdpartyindex.com/vendors/ably.md) | Infrastructure | Global | 2026-10-05 |
| [Airbyte](https://thirdpartyindex.com/vendors/airbyte.md) | Data | US | 2026-10-05 |
| [Amplitude](https://thirdpartyindex.com/vendors/amplitude.md) | Analytics | US | 2026-10-05 |
| [Anthropic](https://thirdpartyindex.com/vendors/anthropic.md) (AI model provider: Anthropic) | AI | US (Accessed through Google Cloud Vertex AI within Vasco's existing GCP environment. Vasco does not use Anthropic's first-party Claude API for platform inference) | 2026-10-05 |
| [Clerk](https://thirdpartyindex.com/vendors/clerk.md) | Authentication | US | 2026-10-05 |
| [Cloudflare](https://thirdpartyindex.com/vendors/cloudflare.md) | Infrastructure | Global (Anycast edge, traffic routed to nearest PoP) | 2026-10-05 |
| [Datadog](https://thirdpartyindex.com/vendors/datadog.md) | Monitoring | US | 2026-10-05 |
| [DevCycle](https://thirdpartyindex.com/vendors/devcycle.md) | Feature Management | Global | 2026-10-05 |
| [Gleap](https://thirdpartyindex.com/vendors/gleap.md) | Support | EU | 2026-10-05 |
| [GoodData](https://thirdpartyindex.com/vendors/gooddata.md) | Analytics | US | 2026-10-05 |
| [Google Cloud](https://thirdpartyindex.com/vendors/google-cloud.md) | Infrastructure | US | 2026-10-05 |
| [Google Workspace](https://thirdpartyindex.com/vendors/google-cloud.md) | Internal Operations | US | 2026-10-05 |
| [HubSpot](https://thirdpartyindex.com/vendors/hubspot.md) | CRM & Support | US | 2026-10-05 |
| [incident.io](https://thirdpartyindex.com/vendors/incident-io.md) | Operations | EU | 2026-10-05 |
| [Resend](https://thirdpartyindex.com/vendors/resend.md) | Communication | US | 2026-10-05 |
| [Slack](https://thirdpartyindex.com/vendors/slack.md) | Communication | US | 2026-10-05 |
| [Stripe](https://thirdpartyindex.com/vendors/stripe.md) | Payment Processing | US | 2026-10-05 |

Read from ([evidence](https://thirdpartyindex.com/evidence/49533)). CSV: https://thirdpartyindex.com/vendors/vasco/subprocessors.csv

AI model providers (or a cloud provider's AI model service) among these entries: 1. All vendors that list one: https://thirdpartyindex.com/ai

## Compliance

As its trust center lists them.

- Audited: SOC 2 Type II ([evidence](https://thirdpartyindex.com/evidence/49528))
- Claimed: GDPR ([evidence](https://thirdpartyindex.com/evidence/49528))

## Subprocessor of (0)

No tracked vendor lists it.

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api