# Yellow.ai

Yellow.ai (yellow.ai): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/yellow-ai
- Documents last verified: 2026-10-03
- Transparency rating: 87/100 (how much it publishes, not how secure it is): Subprocessor list 30/30; Processing locations 6/8 (partial); Purposes 7/7; Data processing addendum 12/12; Trust center 8/8; Privacy policy 6/6; security.txt 0/6 (not found); Security page 0/5 (not found); Status page 5/5; Vulnerability disclosure 5/5; Pages still reachable 8/8
- Supply chain: relies on 5 tracked vendors directly, 57 within two hops, 226 within three; 1 tracked vendors rely on it directly, 1 within two hops, 1 within three
- Cite as: Yellow.ai, Third Party Index, https://thirdpartyindex.com/vendors/yellow-ai (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Trust center | https://trust.yellow.ai/ | 2026-10-03 | 2026-10-03 |
| Subprocessor list | https://trust.yellow.ai/?itemUid=e3fae2ca-94a9-416b-b577-5c90e382df57 | 2026-10-03 | 2026-10-03 |
| Data processing addendum | https://yellow.ai/dpa/ | 2026-10-03 | 2026-10-03 |
| Privacy policy | https://yellow.ai/privacy-policy/ | 2026-10-03 | 2026-10-03 |
| Terms | https://yellow.ai/terms-of-service/ | 2026-10-03 | 2026-10-03 |
| Status page | https://status.yellow.ai/ | 2026-10-03 | 2026-10-03 |
| Security advisories | https://yellow.ai/vulnerability-disclosure-program/ | 2026-10-03 | 2026-10-03 |

## Subprocessors (5)

As its own list states them.

| Subprocessor | Purpose | Location | Listed since |
|---|---|---|---|
| [Amazon Web Services (AWS)](https://thirdpartyindex.com/vendors/amazon-web-services.md) | Cloud Service Provider | IN, US, EU, SEA & MEA | 2026-10-03 |
| [Cloudflare](https://thirdpartyindex.com/vendors/cloudflare.md) | WAF, DDoS, CDN | Global | 2026-10-03 |
| [ElevenLabs](https://thirdpartyindex.com/vendors/elevenlabs.md) (AI model provider: ElevenLabs) | Text to speech & Speech to text | US | 2026-10-03 |
| [Google Cloud](https://thirdpartyindex.com/vendors/google-cloud.md) | Cloud Service Provider | — | 2026-10-03 |
| [Microsoft Azure](https://thirdpartyindex.com/vendors/microsoft.md) (AI model provider: Azure OpenAI) | Azure Open AI; Text to speech & Speech to text | Global | 2026-10-03 |

Read from ([evidence](https://thirdpartyindex.com/evidence/39435)). CSV: https://thirdpartyindex.com/vendors/yellow-ai/subprocessors.csv

AI model providers (or a cloud provider's AI model service) among these entries: 2. All vendors that list one: https://thirdpartyindex.com/ai

## Compliance

As its trust center lists them.

- Audited: SOC 2 Type II, ISO/IEC 27001, ISO/IEC 27701, PCI DSS ([evidence](https://thirdpartyindex.com/evidence/39434))
- Claimed: HIPAA, CCPA/CPRA ([evidence](https://thirdpartyindex.com/evidence/39434))

## Subprocessor of (1)

Tracked vendors whose own subprocessor lists name it, and what they say they use it for.

- [Happay](https://thirdpartyindex.com/vendors/happay.md): Marketing

## Service status

Incidents it reported on its own status page.

- Last 90 days: 2 reported incidents (0 major or critical, 0 minor, 2 with no impact stated)
- Typical time to resolve: 42 min
- Status page last read: 2026-10-04
- 2026-09-15: USA Region — AI Agent Service Disruption (no impact stated)
- 2026-09-11: Elevated 503 Errors in EURO Region (no impact stated)
- 2026-06-12: Meta Services Outage – All Regions (no impact stated)
- 2026-05-17: NLP Service Degradation in JKT Region (no impact stated)
- 2026-04-23: Engagement Service Disruption Impacting Notification Delivery (no impact stated)
- 2026-04-14: Inbox and Analytics Outage - USA Region (no impact stated)
- 2026-04-03: Microsoft STT Outage (no impact stated)
- 2026-03-25: Intermittent Inbox Issues in Jakarta Region (no impact stated)

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api