HackerOne Subprocessors

Last Updated: February 6, 2023

To support the delivery of our Services, HackerOne Inc. ("HackerOne") (or one of its Affiliates listed below) uses service providers (each, a "Subprocessor") that may store and process Customer Data (which may contain personal data). This page provides important information about the identity, location, and role of each Subprocessor. Terms used on this page but not defined have the meaning set forth in the General Terms and Conditions located at https://www.hackerone.com/terms/general or superseding written agreement between Customer and HackerOne (the "Agreement").

HackerOne currently uses third party Subprocessors to provide infrastructure services, and to help us provide customer support and email notifications. Prior to engaging any third party Subprocessor, HackerOne performs diligence to evaluate their privacy, security and confidentiality practices, and executes an agreement implementing its applicable obligations.

HackerOne may use the following Subprocessors to host or store Customer Data or provide other infrastructure that helps with delivery of our Services:

Entity Name	Processing Activities	Entity Country
Amazon Web Services, Inc.	Cloud Service Provider	United States

HackerOne may use the following Subprocessors to perform other Service functions:

Entity Name	Processing Activities	Entity Country
APIHub, Inc. (Clearbit)	Data Enrichment	United States
Amplitude, Inc.	Product Analytics	United States
Atlassian, Inc.	Collaboration	United States, Germany, Ireland, Singapore, Australia
Box, Inc.	Content Management and File Sharing	United States
Cloudflare, Inc.	Content Delivery Network and DDoS Prevention	United States
Componentlab Inc. (Outreach)	Communication	United States
Datadog, Inc.	Infrastructure Monitoring	United States
Drift.com, Inc.	Customer Service and Communication	United States
Fivetran, Inc.	Data Pipeline	United States
Freshworks, Inc.	Customer Service	United States
Gainsight, Inc.	Customer Success	United States, Ireland, Germany
Gong.io Inc.	Communication	United States
Google LLC	Business Analytics	United States
Highspot, Inc.	Sales Enablement	Ireland, United States
Intercom R&D Unlimited Company	Customer Service	Ireland, United States
New Relic, Inc.	Infrastructure Monitoring	United States
Onna Technologies, Inc.	Information Management	United States, Sweden
Printfection, LLC	Swag Management Platform	United States
Reachdesk LTD	Automated Gifting Platform	United States, England, Luxembourg, Ireland
Salesforce.com, Inc.	Customer Service	United States
Slack Technologies, Inc.	Collaboration and Communication	United States
Snowflake Inc.	Data Warehouse	United States
Stripe, Inc.	Payment Processor	United States
Sumo Logic, Inc.	Logging and Anomaly Detection	United States
Tray.io, Inc.	Integration Automation	United States
Twilio, Inc.	SMS Notification	United States
Workato, Inc.	Workflow Automation	United States
Workday, Inc.	Enterprise Management	United States
Zapier, Inc.	Workflow Automation	United States
Zendesk, Inc.	Customer Support	United States
Zoom Video Communications, Inc.	Collaboration and Communication	United States, Germany, Netherlands, Ireland, Japan

Depending on the geographic location of a Customer or their authorized users, and the nature of the Services provided, HackerOne may also engage one or more of the following Affiliates as Subprocessors to deliver some or all of the Services to a Customer:

Entity Name	Entity Country
HackerOne B.V.	Netherlands

As our business grows and evolves, the Subprocessors we engage may also change, and if we do, we will post any changes on this page.

If you are an existing HackerOne Customer and need to be notified when additional Subprocessors are used to provide the HackerOne Services, you can subscribe to updates by submitting the following form: