# Vultr

Vultr declares [5 subprocessors](https://thirdpartyindex.com/vendors/vultr#subprocessors) in [its subprocessor list](https://www.vultr.com/legal/subprocessors/), which we last checked on 2026-11-11 ([evidence](https://thirdpartyindex.com/evidence/103303)). They include [ZoomInfo](https://thirdpartyindex.com/vendors/zoominfo), [MaxMind](https://thirdpartyindex.com/vendors/maxmind) and [Aiven](https://thirdpartyindex.com/vendors/aiven). No published changes since we first read it on 2026-09-23. [19 tracked vendors](https://thirdpartyindex.com/vendors/vultr#used-by) name Vultr as a subprocessor, including [DigitalOcean](https://thirdpartyindex.com/vendors/digitalocean), [Fireworks](https://thirdpartyindex.com/vendors/fireworks) and [Baseten](https://thirdpartyindex.com/vendors/baseten).

Vultr (vultr.com): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/vultr
- Documents last verified: 2026-11-11
- Transparency rating: 65/100 (how much it publishes, not how secure it is): Subprocessor list 30/30; Processing locations 8/8; Purposes 0/7 (partial); Data processing addendum 0/12 (not found); Trust center 8/8; Privacy policy 6/6; security.txt 0/6 (not found); Security page 0/5 (not found); Status page 5/5; Vulnerability disclosure 0/5 (not found); Pages still reachable 8/8
- Supply chain: relies on 5 tracked vendors directly, 58 within two hops, 287 within three; 19 tracked vendors rely on it directly, 321 within two hops, 2395 within three
- Cite as: Vultr, Third Party Index, https://thirdpartyindex.com/vendors/vultr (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Trust center | https://www.vultr.com/trust-center/ | 2026-11-11 | 2026-10-09 |
| Subprocessor list | https://www.vultr.com/legal/subprocessors/ | 2026-11-11 | 2026-10-15 |
| Privacy policy | https://www.vultr.com/legal/privacy/ | 2026-11-11 | 2026-10-15 |
| Terms | https://www.vultr.com/legal/tos/ | 2026-11-11 | 2026-09-24 |
| Status page | https://status.vultr.com/ | 2026-11-11 | 2026-11-11 |

## Subprocessors (5)

As its own list states them.

| Subprocessor | Purpose | Location | Listed since |
|---|---|---|---|
| [Aiven](https://thirdpartyindex.com/vendors/aiven.md) | — | Global (including EU/EEA/USA) | 2026-09-23 |
| [Backblaze](https://thirdpartyindex.com/vendors/backblaze.md) | — | Global (including EU/EEA/USA) | 2026-09-23 |
| [Kount](https://thirdpartyindex.com/vendors/kount.md) | — | Global (including EU/EEA/USA) | 2026-09-23 |
| [MaxMind](https://thirdpartyindex.com/vendors/maxmind.md) | — | Global (including EU/EEA/USA) | 2026-09-23 |
| [ZoomInfo](https://thirdpartyindex.com/vendors/zoominfo.md) | — | Global (including EU/EEA/USA) | 2026-09-23 |

Read from ([evidence](https://thirdpartyindex.com/evidence/7066)). CSV: https://thirdpartyindex.com/vendors/vultr/subprocessors.csv

## Subprocessor of (19)

Tracked vendors whose own subprocessor lists name it, and what they say they use it for.

- [Baseten](https://thirdpartyindex.com/vendors/baseten.md): Cloud Compute
- [Couchdrop](https://thirdpartyindex.com/vendors/couchdrop.md)
- [Daytona](https://thirdpartyindex.com/vendors/daytona.md): Cloud Infrastructure
- [DigitalOcean](https://thirdpartyindex.com/vendors/digitalocean.md): Infrastructure
- [Dispel](https://thirdpartyindex.com/vendors/dispel.md): Cloud service provider; Data Controller
- [Ducksify](https://thirdpartyindex.com/vendors/ducksify.md): Infrastructure as a Service (IaaS)
- [Fireworks](https://thirdpartyindex.com/vendors/fireworks.md): Infrastructure Provider; \[Vultr Compliance\](
- [Fly.io](https://thirdpartyindex.com/vendors/fly-io.md): Hosting provider
- [Loadster](https://thirdpartyindex.com/vendors/loadster.md): Cloud Infrastructure
- [Mistral](https://thirdpartyindex.com/vendors/mistral.md): Cloud Infrastructure (Vultr); Product: Vibe Code Web
- [Modal](https://thirdpartyindex.com/vendors/modal.md): Cloud hosting provider
- [MSP360](https://thirdpartyindex.com/vendors/msp360.md): Cloud infrastructure hosting
- [Neuralwatt Cloud](https://thirdpartyindex.com/vendors/neuralwatt-cloud.md): Cloud infrastructure, compute, storage, and networking
- [nodedata.io](https://thirdpartyindex.com/vendors/nodedata-io.md)
- [Oh Dear](https://thirdpartyindex.com/vendors/oh-dear.md): Running uptime checks from various global locations
- [Prisma](https://thirdpartyindex.com/vendors/prisma.md): Cloud provider
- [SMTP2GO](https://thirdpartyindex.com/vendors/smtp2go.md): Cloud Hosting
- [Together AI](https://thirdpartyindex.com/vendors/together-ai.md): Hosting and cloud infrastructure
- [Tuist](https://thirdpartyindex.com/vendors/tuist.md): Cloud infrastructure & hosting; We use Vultr to host servers that run parts of the Tuist infrastructure.

## Security record

Breaches listed by Have I Been Pwned (CC BY 4.0, haveibeenpwned.com):

- Vultr, 2022-07-08: 187872 accounts; data: Email addresses, Geographic locations, IP addresses, Names

## Incidents reported by Vultr's subprocessors

Incidents reported in the last 30 days on their own status pages by 3 vendors Vultr lists as subprocessors. A subprocessor list names a company, not the service an incident touched.

- 2026-11-06: [ZoomInfo](https://thirdpartyindex.com/vendors/zoominfo#status), which Vultr lists as a subprocessor, reported Chorus - Login and Call Recording (minor)
- 2026-11-05: [Aiven](https://thirdpartyindex.com/vendors/aiven#status), which Vultr lists as a subprocessor, reported API requests failing/timing out (no impact stated)
- 2026-11-02: [ZoomInfo](https://thirdpartyindex.com/vendors/zoominfo#status), which Vultr lists as a subprocessor, reported Chorus - MS Teams Call Recording (no impact stated)
- 2026-10-28: [ZoomInfo](https://thirdpartyindex.com/vendors/zoominfo#status), which Vultr lists as a subprocessor, reported Neverbounce - Job Processing (minor)
- 2026-10-20: [Aiven](https://thirdpartyindex.com/vendors/aiven#status), which Vultr lists as a subprocessor, reported Google Cloud VPN incident affecting services (minor)
- 2026-10-18: [Aiven](https://thirdpartyindex.com/vendors/aiven#status), which Vultr lists as a subprocessor, reported Unable to spin up nodes in vultr-ewr (no impact stated)
- 2026-10-16: [Aiven](https://thirdpartyindex.com/vendors/aiven#status), which Vultr lists as a subprocessor, reported Issues starting new service nodes (no impact stated)
- 2026-10-13: [MaxMind](https://thirdpartyindex.com/vendors/maxmind#status), which Vultr lists as a subprocessor, reported Network degradation in us-east region (no impact stated)

The subprocessor list as we read it on any date: https://thirdpartyindex.com/labs/time-machine/vultr

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api