SaaS Ranking

Subprocessor list in Developer collaboration and CI

Naming the actual subprocessors is what turns a privacy promise into something you can check.

8 of 55 companies we measured here publish it, that is 15%. Last checked 2026-10-17.

15% here against 7% across every category we measure. Developer collaboration and CI sits above the overall share for this criterion.

This page counts companies, not product entries: a company with two products in this category is one company here and two rows below.

Back to Subprocessor list across all categories, or to Developer collaboration and CI.

The evidence at a glance
  • Found8
  • Not found at checked addresses47
  • Not measured4

59 companies in total. Unmeasured companies are excluded from the published share.

Published

The actual list is published, not just a promise to keep one.

VendorWhat we found
Aviator https://trust.aviator.co/Checked
CircleCI https://trust.circleci.com/?itemUid=e3fae2ca-94a9-416b-b577-5c90e382df57Checked
Depot https://depot.dev/legal/subprocessorsChecked
GitHub https://docs.github.com/en/site-policy/privacy-policies/github-subprocessorsChecked
Ona https://ona.com/legal/sub-processorsChecked
Replit https://replit.com/subprocessorsChecked
Terramate https://terramate.io/legal/subprocessors/Checked
Warp https://www.warp.dev/legal/subprocessorsChecked
No subprocessor list found.

We reached at least one address for each of these vendors and none of them carried it. That is what we found at the addresses we checked, on the date we checked them, and not a statement about what the vendor has.

VendorWhat we found
Beeceptor 7 addresses checkedChecked
Bitbucket Cloud 7 addresses checkedChecked
Blacksmith 7 addresses checkedChecked
Buddy 7 addresses checkedChecked
BuildBuddy 7 addresses checkedChecked
Codacy 7 addresses checkedChecked
Codeberg 7 addresses checkedChecked
Codeclimate 7 addresses checkedChecked
Coder 7 addresses checkedChecked
CodeRabbit 7 addresses checkedChecked
CodeScene 7 addresses checkedChecked
Coolify Cloud 7 addresses checkedChecked
Dagger 7 addresses checkedChecked
Daytona 7 addresses checkedChecked
DeepSource 7 addresses checkedChecked
DevPod 7 addresses checkedChecked
Digger 7 addresses checkedChecked
Drone 7 addresses checkedChecked
E2B 7 addresses checkedChecked
Earthly 7 addresses checkedChecked
env zero 7 addresses checkedChecked
Garden 7 addresses checkedChecked
Gerrit 7 addresses checkedChecked
Gitea 7 addresses checkedChecked
GitLab 7 addresses checkedChecked
Graphite 7 addresses checkedChecked
Greptile 7 addresses checkedChecked
JetBrains 7 addresses checkedChecked
Mergify 7 addresses checkedChecked
Namespace 7 addresses checkedChecked
Nx Cloud 7 addresses checkedChecked
Okteto 7 addresses checkedChecked
Omnistrate 7 addresses checkedChecked
Porter 7 addresses checkedChecked
Probo.CI 7 addresses checkedChecked
Pulumi 7 addresses checkedChecked
ReqRes 7 addresses checkedChecked
Retrium 7 addresses checkedChecked
Runme 7 addresses checkedChecked
Scalr 7 addresses checkedChecked
Semaphore 7 addresses checkedChecked
Sourcegraph 7 addresses checkedChecked
SourceHut 7 addresses checkedChecked
Spacelift 7 addresses checkedChecked
StackBlitz 7 addresses checkedChecked
Swimm 7 addresses checkedChecked
WireMock Cloud 7 addresses checkedChecked
Not measured

We could not look at these, or their robots.txt asks us not to. That says something about our measurement, not about them, and they are left out of the percentage above.

VendorWhat we found
Buildkite The vendor’s server blocked or rate-limited our crawler, so this was not measured.Checked
CodePen The vendor’s server blocked or rate-limited our crawler, so this was not measured.Checked
CodeSandbox The vendor’s server blocked or rate-limited our crawler, so this was not measured.Checked
Mockoon Cloud The vendor’s robots.txt excludes us from at least one of these addresses, so this was not measured.Checked

Other criteria in Developer collaboration and CI

Subprocessor list in related categories

Found something we missed? Tell us. A correction moves that vendor into our next nightly run. That run reads the same fixed addresses we check for every vendor, not the address you send.