ZITADEL
Certifications and attestations: SOC 2 Type IIISO/IEC 27001
Says it complies with: GDPR, CCPA/CPRA, Data Privacy Framework
As listed on ZITADEL's trust center (evidence) ; reports themselves are usually shared on request.
Transparency
Breakdown
| Subprocessor list | 30 / 30 | |
| Processing locations | 8 / 8 | |
| Purposes | 7 / 7 | |
| Data processing addendum | 12 / 12 | |
| Trust center | 8 / 8 | |
| Privacy policy | 6 / 6 | |
| security.txt | 6 / 6 | |
| Security page | not found | 0 / 5 |
| Status page | 5 / 5 | |
| Vulnerability disclosure | 5 / 5 | |
| Pages still reachable | 8 / 8 | |
| Total | 95 / 100 |
Only documents we can retrieve count: a page behind a login or a broken link scores nothing.
Badge
For ZITADEL's own site; it updates with the rating.
<a href="https://thirdpartyindex.com/vendors/zitadel"><img src="https://thirdpartyindex.com/badge/zitadel.svg" alt="ZITADEL transparency rating on Third Party Index" height="20"></a>[](https://thirdpartyindex.com/vendors/zitadel)Not listed by any tracked vendor.
Documents
| Document | Verified | Changed | Evidence |
|---|---|---|---|
| Trust center vanta | snapshot | ||
| Subprocessor list vanta | snapshot | ||
| Data processing addendum | snapshot | ||
| Privacy policy | snapshot | ||
| Terms | snapshot | ||
| security.txt | snapshot | ||
| Status page incident.io | snapshot | ||
| Security advisories vanta | snapshot |
Subprocessors
| Name | Purpose | Location | Listed since |
|---|---|---|---|
| Google Cloud Platform | Google Cloud Platform is our cloud infrastructure provider for Zitadel Cloud. Data is stored in regions as designated by the customer.; [Zitadel Cloud] Cloud provider | Designated by customer | |
| Postmark (AC PM LLC) | We use Postmark to send transactional mails to clients. Your data might be processed by Postmark when using our services, especially when you have not configured your own SMTP service.; [Zitadel Cloud] Transactional emails (Optional) | USA | |
| Twillio Inc. | Twilio provides SMS messaging services for Zitadel Cloud. In case you have not configured your own message gateway in Zitadel Cloud, your data will be processed by Twilio when using features that rely on SMS communication.; [Zitadel Cloud] Communication (Optional) | USA |
Service status
2 incidents in the last 90 days (2 major or critical, 0 minor, 0 with no stated impact) · typically resolved in 7 h 10 min · longest major: 7 h 10 min
| Began | Incident | Impact | Lasted |
|---|---|---|---|
| Partial Outage in the US region | major | 1 h 3 min evidence | |
| Partial Outage in CH | major | 7 h 10 min evidence | |
| Investigating Potentially Degraded Performance | minor | 3 h 16 min evidence | |
| Elevated error rates on CH region | minor | — evidence |
As ZITADEL's status page reports its own incidents (scheduled maintenance left out), read every few hours since .
Changes
None since tracking began.