Very Good Security
Transparency
Breakdown
| Subprocessor list | 30 / 30 | |
| Processing locations | 8 / 8 | |
| Purposes | 7 / 7 | |
| Data processing addendum | not found | 0 / 12 |
| Trust center | 8 / 8 | |
| Privacy policy | 6 / 6 | |
| security.txt | not found | 0 / 6 |
| Security page | not found | 0 / 5 |
| Status page | 5 / 5 | |
| Vulnerability disclosure | not found | 0 / 5 |
| Pages still reachable | 8 / 8 | |
| Total | 72 / 100 |
Only documents we can retrieve count: a page behind a login or a broken link scores nothing.
Badge
For Very Good Security's own site; it updates with the rating.
<a href="https://thirdpartyindex.com/vendors/very-good-security"><img src="https://thirdpartyindex.com/badge/very-good-security.svg" alt="Very Good Security transparency rating on Third Party Index" height="20"></a>[](https://thirdpartyindex.com/vendors/very-good-security)Compliance
- Certified
- Says it complies with
Certifications as Very Good Security's trust center lists them; reports are usually shared on request (evidence)
Documents
| Document | Verified | Changed | Evidence |
|---|---|---|---|
| Trust center safebase | snapshot | ||
| Subprocessor list safebase | snapshot | ||
| Privacy policy | snapshot | ||
| Terms | snapshot | ||
| Status page | snapshot |
Subprocessors
| Name | Purpose | Location | Listed since |
|---|---|---|---|
| CircleCI | Continuous Integration | US | |
| Elastic Search | SIEM | US | |
| FireHydrant | Incident Response | US | |
| GitHub | Software Source control | US | |
| Grafana | Observability metrics visualization | US | |
| Okta | IDP/SSO | US | |
| Orca Security | Vulnerability Scanning | US | |
| Rollbar | Log, log tracing | US | |
| SentinelOne | Endpoint protection | US | |
| Svix | Webhooks as a Service | US | |
| Teleport | Secure remote access | US |
Listed as a subprocessor by (2)
Purposes as each company states them.
Paddle paddle.com Card vaulting; Finance and payments
Sprout Social sproutsocial.com
Changes
None since tracking began.