Companies / FOSSA
FOSSA provides software supply chain management tools that automate license compliance, security scanning, and SBOM management for third-party code. It serves engineering teams at companies that need to manage software compliance and security.
Summarized from its homepage on 4 Nov 2026.
595 Market Street, Floor 10, San Francisco, CA, 94105, US
Vendors of FOSSA and the evidence for each
FOSSA declares 10 subprocessors, including AI providers Anthropic.
Amazon Web ServicesCloud and infrastructureConfirmed
AnthropicAI and LLM providersConfirmed
DatadogObservabilityConfirmed
DelightedAnalyticsConfirmed
DevRevSupport and chatConfirmed
PagerDutyObservabilityConfirmed
PostHogAnalyticsConfirmed
Google AnalyticsAnalyticsConfirmed
BackEngineConfirmed
KoalaConfirmed
13 more vendors
See FOSSA's full stack and the source for every claim.
Create a free accountWork email, no card. Already have one? Log inQuestions about FOSSA
Certifications
| Standard | What the source says | Checked |
|---|---|---|
| SOC 2Company's statement | “Enterprise support SOC 2 compliant”The company's own statement. SOC 2 has no public registry; the report itself is shared by the company, usually under NDA. | 11 Nov 2026Source |
We last read its homepage on 11 Nov 2026 and the FedRAMP Marketplace on 8 Nov 2026. A standard not shown here was not found in these sources. That does not mean FOSSA lacks it.
Recent changes
| Date | Change |
|---|---|
| 11 Nov 2026 | no longer shows Google |
Vendor's own statement, retrieved from the source URL on the date shown. StrataDB does not verify the underlying claim. Data sources.
See FOSSA's full stack
Every vendor with its source and date, and an alert when FOSSA adds or drops one. The same lookup works for any company.
- Every company and vendor, with its public source
- 100 API calls a month, plus MCP and the Chrome extension
- Work email only. No card, no sales call