# Vespa.ai

Vespa.ai declares [6 subprocessors](https://thirdpartyindex.com/vendors/vespa-ai#subprocessors) in [its subprocessor list](https://trust.vespa.ai/subprocessors), which we last checked on 2026-11-11 ([evidence](https://thirdpartyindex.com/evidence/56328)). They include [Amazon Web Services](https://thirdpartyindex.com/vendors/amazon-web-services), [Google Cloud](https://thirdpartyindex.com/vendors/google-cloud) and [Okta](https://thirdpartyindex.com/vendors/okta). No published changes since we first read it on 2026-09-23. [1 tracked vendor](https://thirdpartyindex.com/vendors/vespa-ai#used-by), [Productboard](https://thirdpartyindex.com/vendors/productboard), names Vespa.ai as a subprocessor.

Vespa.ai (vespa.ai): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/vespa-ai
- Documents last verified: 2026-11-11
- Transparency rating: 83/100 (how much it publishes, not how secure it is): Subprocessor list 30/30; Processing locations 8/8; Purposes 0/7 (partial); Data processing addendum 12/12; Trust center 8/8; Privacy policy 6/6; security.txt 6/6; Security page 0/5 (not found); Status page 5/5; Vulnerability disclosure 0/5 (not found); Pages still reachable 8/8
- Supply chain: relies on 5 tracked vendors directly, 55 within two hops, 191 within three; 1 tracked vendors rely on it directly, 28 within two hops, 269 within three
- Cite as: Vespa.ai, Third Party Index, https://thirdpartyindex.com/vendors/vespa-ai (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Trust center | https://trust.vespa.ai/ | 2026-11-11 | 2026-11-10 |
| Subprocessor list | https://trust.vespa.ai/subprocessors | 2026-11-11 | 2026-10-06 |
| Data processing addendum | https://vespa.ai/data-processing-agreement/ | 2026-11-11 | 2026-09-23 |
| Privacy policy | https://vespa.ai/privacy-policy/ | 2026-11-11 | 2026-09-23 |
| Terms | https://vespa.ai/product-terms/ | 2026-11-11 | 2026-09-23 |
| security.txt | https://vespa.ai/.well-known/security.txt | 2026-11-11 | 2026-09-23 |
| Status page | https://status.vespa.ai/ | 2026-11-11 | 2026-11-09 |

## Subprocessors (6)

As its own list states them.

| Subprocessor | Purpose | Location | Listed since |
|---|---|---|---|
| [Amazon Web Services](https://thirdpartyindex.com/vendors/amazon-web-services.md) | — | Cloud provider | 2026-09-28 |
| [Auth0](https://thirdpartyindex.com/vendors/okta.md) | — | External user identity management | 2026-09-28 |
| [GitHub](https://thirdpartyindex.com/vendors/github.md) | — | Version control | 2026-09-28 |
| [Google Cloud Platform](https://thirdpartyindex.com/vendors/google-cloud.md) | — | Cloud provider | 2026-09-28 |
| [Google Workspace](https://thirdpartyindex.com/vendors/google-cloud.md) | — | Collaboration suite | 2026-09-28 |
| [JumpCloud](https://thirdpartyindex.com/vendors/jumpcloud.md) | — | Identity and IT asset management | 2026-09-28 |

Read from ([evidence](https://thirdpartyindex.com/evidence/14478)). CSV: https://thirdpartyindex.com/vendors/vespa-ai/subprocessors.csv

## Compliance

As its trust center lists them.

- Audited: SOC 2 ([evidence](https://thirdpartyindex.com/evidence/10752))
- Claimed: GDPR, CCPA/CPRA ([evidence](https://thirdpartyindex.com/evidence/10752))

## Subprocessor of (1)

Tracked vendors whose own subprocessor lists name it, and what they say they use it for.

- [Productboard](https://thirdpartyindex.com/vendors/productboard.md): Search and indexing infrastructure

## Service status

Incidents it reported on its own status page.

- Last 90 days: 4 reported incidents (0 major or critical, 0 minor, 4 with no impact stated)
- Typical time to resolve: 27 h 23 min
- Status page last read: 2026-11-12
- 2026-11-02: Vespa zone impaired: dev.aws-euw1-az1 (no impact stated)
- 2026-10-14: Query timeouts for some applications (no impact stated)
- 2026-10-01: Intermittent “Node Allocation Failure” in GCP test and staging environments (no impact stated)
- 2026-08-19: Failing staging tests in AWS us-east-1c (no impact stated)
- 2026-07-03: Feed blocked messages displayed in Vespa Cloud console is fake news. (no impact stated)
- 2026-07-02: Unable to provision new endpoint certificates - affects new deployments with legacy endpoints (no impact stated)
- 2026-06-26: Authentication issues on Vespa Cloud console (no impact stated)
- 2026-04-09: Vespa Cloud metrics view is unaccessible (no impact stated)

## Incidents reported by Vespa.ai's subprocessors

Incidents reported in the last 30 days on their own status pages by 2 vendors Vespa.ai lists as subprocessors. A subprocessor list names a company, not the service an incident touched.

- 2026-11-11: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Vespa.ai lists as a subprocessor, reported Impact across multiple GitHub products including Actions, Pages, and Copilot products. (critical)
- 2026-11-11: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Vespa.ai lists as a subprocessor, reported Incident with Webhooks (minor)
- 2026-11-10: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Vespa.ai lists as a subprocessor, reported Incident with Git Operations and Pull Requests (critical)
- 2026-11-09: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Vespa.ai lists as a subprocessor, reported Degraded availability for GPT-5.3 Codex and GPT-5.6 models in Copilot (major)
- 2026-11-09: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Vespa.ai lists as a subprocessor, reported Incident with Actions and Checks API (critical)
- 2026-11-09: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Vespa.ai lists as a subprocessor, reported Incident with Webhooks and Actions (major)
- 2026-11-09: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Vespa.ai lists as a subprocessor, reported Increased timeouts due to surge in anonymous users (minor)
- 2026-11-08: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Vespa.ai lists as a subprocessor, reported Increase in timeouts for some unauthenticated users (minor)
- 2026-11-05: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Vespa.ai lists as a subprocessor, reported Degraded performance for multiple GitHub services (minor)
- 2026-11-05: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Vespa.ai lists as a subprocessor, reported Incident with Actions (minor)
- 2026-11-04: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Vespa.ai lists as a subprocessor, reported Incident with Actions (major)
- 2026-11-04: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Vespa.ai lists as a subprocessor, reported Incident with Actions and Pages (major)
- 2026-11-04: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Vespa.ai lists as a subprocessor, reported Incident with Pull Requests, Git Operations and Issues (major)
- 2026-11-04: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Vespa.ai lists as a subprocessor, reported Increased task-related errors for Copilot Mission Control (minor)
- 2026-11-03: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Vespa.ai lists as a subprocessor, reported Incident with Git Operations (minor)
- 2026-11-03: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Vespa.ai lists as a subprocessor, reported Incident with API, Git, and Copilot requests (minor)
- 2026-11-02: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Vespa.ai lists as a subprocessor, reported Elevated errors on GPT-5.4 Nano (minor)
- 2026-10-30: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Vespa.ai lists as a subprocessor, reported Incident with Dependabot (minor)
- 2026-10-30: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Vespa.ai lists as a subprocessor, reported Incident with Actions, Pages, and Webhooks (major)
- 2026-10-30: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Vespa.ai lists as a subprocessor, reported Disruption with GitHub services (critical)
- 2026-10-30: [JumpCloud](https://thirdpartyindex.com/vendors/jumpcloud#status), which Vespa.ai lists as a subprocessor, reported Degraded User and Admin portal (minor)
- 2026-10-29: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Vespa.ai lists as a subprocessor, reported Disruption with Copilot Cloud services (minor)
- 2026-10-28: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Vespa.ai lists as a subprocessor, reported Disruption with some Copilot services (critical)
- 2026-10-27: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Vespa.ai lists as a subprocessor, reported Elevated 404s for GitHub App s2s tokens in git/API (no impact stated)
- 2026-10-26: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Vespa.ai lists as a subprocessor, reported Incident with Actions, Issues, API Requests and Pull Requests (minor)
- 2026-10-23: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Vespa.ai lists as a subprocessor, reported Grok 4.6 and Grok 4.7 Service Issues (minor)
- 2026-10-23: [JumpCloud](https://thirdpartyindex.com/vendors/jumpcloud#status), which Vespa.ai lists as a subprocessor, reported Increased error rates loading User and Admin portal (major)
- 2026-10-23: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Vespa.ai lists as a subprocessor, reported Disruption with Dependabot Alerts (minor)
- 2026-10-23: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Vespa.ai lists as a subprocessor, reported Delayed Actions status check results (minor)
- 2026-10-22: [JumpCloud](https://thirdpartyindex.com/vendors/jumpcloud#status), which Vespa.ai lists as a subprocessor, reported US Region - Increased error rates with device certificate issuance and renewal (minor)
- 2026-10-22: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Vespa.ai lists as a subprocessor, reported Project updates delayed (minor)
- 2026-10-22: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Vespa.ai lists as a subprocessor, reported Incident with Actions (minor)
- 2026-10-21: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Vespa.ai lists as a subprocessor, reported Delays for Pull Requests and Webhook deliveries (critical)
- 2026-10-19: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Vespa.ai lists as a subprocessor, reported Degraded availability for GitHub Actions, GitHub Pages and Webhooks (critical)
- 2026-10-15: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Vespa.ai lists as a subprocessor, reported CCA Automations are delayed when starting an Automation (minor)
- 2026-10-13: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Vespa.ai lists as a subprocessor, reported \[Retroactive\] Actions workflow run logs delayed (minor)

The subprocessor list as we read it on any date: https://thirdpartyindex.com/labs/time-machine/vespa-ai

## Security contact

From its security.txt (https://vespa.ai/.well-known/security.txt) ([evidence](https://thirdpartyindex.com/evidence/7223)):

- Contact: mailto:security@vespa.ai
- Contact: https://app.intigriti.com/researcher/programs/vespaai/vespaaivdpprogram
- Disclosure policy: https://vespa.ai/responsible-disclosure/
- Security jobs: https://vespa.ai/careers/
- Languages: en
- Valid until 2026-12-31

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api