Vultr
Vultr declares 5 subprocessors in its subprocessor list, which we last checked on Nov 11, 2026 (evidence). They include ZoomInfo, MaxMind and Aiven. No published changes since we first read it on Sep 23, 2026. 19 tracked vendors name Vultr as a subprocessor, including DigitalOcean, Fireworks and Baseten.
Subprocessors CSV of Vultr's subprocessors · Atom feed of Vultr's subprocessors DORA draft CSV of Vultr's subprocessors as declared by Vultr what's this? ·
5 third parties.
| Name | Purpose | Location | Listed since |
|---|---|---|---|
| Aiven | Global (including EU/EEA/USA) | ||
| Backblaze | Global (including EU/EEA/USA) | ||
| Kount | Global (including EU/EEA/USA) | ||
| MaxMind | Global (including EU/EEA/USA) | ||
| ZoomInfo | Global (including EU/EEA/USA) |
Subprocessor of (19)CSV of the companies listing Vultr · Atom feed of the companies listing Vultr
Baseten baseten.co Cloud Compute
Couchdrop couchdrop.io
Daytona daytona.io Cloud Infrastructure
DigitalOcean digitalocean.com Infrastructure
Dispel dispel.com Cloud service provider; Data Controller
- Ducksify ducksify.com Infrastructure as a Service (IaaS)
Fireworks fireworks.ai Infrastructure Provider; [Vultr Compliance](
Fly.io fly.io Hosting provider
Loadster loadster.app Cloud Infrastructure
Mistral mistral.ai Cloud Infrastructure (Vultr); Product: Vibe Code Web
Modal modal.com Cloud hosting provider
MSP360 msp360.com Cloud infrastructure hosting
Neuralwatt Cloud neuralwatt.com Cloud infrastructure, compute, storage, and networking
nodedata.io nodedata.io
Oh Dear ohdear.app Running uptime checks from various global locations
Prisma prisma.io Cloud provider
SMTP2GO smtp2go.com Cloud Hosting
Together AI together.ai Hosting and cloud infrastructure
Tuist tuist.dev Cloud infrastructure & hosting; We use Vultr to host servers that run parts of the Tuist infrastructure.
Security recordCSV of Vultr's security record · Atom feed of Vultr's security record
What public security catalogs list for Vultr, in their words.
Data breaches
- Vultr 187,872 accounts Email addresses; Geographic locations; IP addresses; Names
In March 2023, the "AI-first global cloud platform" Vultr disclosed a security incident at a third-party vendor. Dating back to the previous year, the incident was attributed to the ActiveCampaign email marketing service provider and resulted in the exposure of 188k unique email addresses. A small number of records also included name, IP address and country of origin. No Vultr systems or additional customer data were impacted. Vultr subsequently self-submitted the impacted data to HIBP.
Have I Been Pwned
Breach data: Have I Been Pwned (CC BY 4.0), which calls every entry a breach, including data scraped from public pages (evidence)
Incidents reported by Vultr's subprocessorsCSV of incidents reported by vendors Vultr lists · Atom feed of incidents reported by vendors Vultr lists
8 reported incidents in the last 30 days, by 3 of the vendors Vultr lists as subprocessors.
A subprocessor list names a company, not the service an incident touched. This does not show that Vultr was involved.
| Date | Company | Incident | Impact | Lasted |
|---|---|---|---|---|
| | Chorus - Login and Call Recording | minor | 1 h 15 min | |
| | API requests failing/timing out | no impact stated | 16 h 40 min | |
| | Chorus - MS Teams Call Recording | no impact stated | 14 min | |
| | Neverbounce - Job Processing | minor | 3 h 43 min | |
| | Google Cloud VPN incident affecting services | minor | 12 h 46 min | |
| | Unable to spin up nodes in vultr-ewr | no impact stated | 17 h 12 min | |
| | Issues starting new service nodes | no impact stated | 4 h 50 min | |
| | Network degradation in us-east region | no impact stated | — |
ChangesCSV of Vultr's changes · Atom feed of Vultr's changes
See the list as we read it on any date: Time machine
None since tracking began.