Whimsical
Certifications and attestations: SOC 2 Type II
Says it complies with: GDPR, CCPA/CPRA
As listed on Whimsical's trust center (evidence) ; reports themselves are usually shared on request.
Transparency
Breakdown
| Subprocessor list | 30 / 30 | |
| Processing locations | 8 / 8 | |
| Purposes | 7 / 7 | |
| Data processing addendum | 12 / 12 | |
| Trust center | 8 / 8 | |
| Privacy policy | 6 / 6 | |
| security.txt | not found | 0 / 6 |
| Security page | 5 / 5 | |
| Status page | 5 / 5 | |
| Vulnerability disclosure | not found | 0 / 5 |
| Pages still reachable | 8 / 8 | |
| Total | 89 / 100 |
Only documents we can retrieve count: a page behind a login or a broken link scores nothing.
Badge
For Whimsical's own site; it updates with the rating.
<a href="https://thirdpartyindex.com/vendors/whimsical"><img src="https://thirdpartyindex.com/badge/whimsical.svg" alt="Whimsical transparency rating on Third Party Index" height="20"></a>[](https://thirdpartyindex.com/vendors/whimsical)Not listed by any tracked vendor.
Documents
| Document | Verified | Changed | Evidence |
|---|---|---|---|
| Trust center vanta | snapshot | ||
| Subprocessor list vanta | snapshot | ||
| Data processing addendum | snapshot | ||
| Privacy policy | snapshot | ||
| Terms | snapshot | ||
| Security page | snapshot | ||
| Status page | snapshot |
Subprocessors
| Name | Purpose | Location | Listed since |
|---|---|---|---|
| Amazon Web Services | Contains all our data and infrastructure.; Infrastructure host | USA | |
| Anthropic | AI-enabled functionality | USA | |
| Churn Buster | Customer billing notifications | USA | |
| Cloudflare | Security and performance systems | USA | |
| Customer.io | Email service provider | USA | |
| Datadog | Parsing logs and monitoring systems | USA | |
| Front | Cloud service that provides customer communication assignments; Customer success | USA | |
| Google Workspace | Cloud computing, productivity, and collaboration | USA | |
| Linear | Task and Project Tracking | USA | |
| OpenAI (API) | AI-enabled functionality | USA | |
| Plausible | Digital analytics | Estonia | |
| Sendgrid | Email service provider | USA | |
| Sentry | Error reporting and debugging | USA | |
| Slack | Communication platform for company-wide and private messaging | USA | |
| Stripe | Payment gateway | USA | |
| TurboPuffer | Database for searching user content and storing embeddings | Canada | |
| Typeform | Sending and analyzing customer surveys | Spain |
Changes
None since tracking began.