Companies / herdsecurity.io
herdsecurity.io tech stack
herdsecurity.io declares 20 subprocessors, including AI providers Anthropic, ElevenLabs, OpenAI, xAI.
Declared subprocessors
Subprocessor list From the company's own list. Read the source.
| Subprocessor | Purpose |
|---|---|
| Primary cloud infrastructure: compute, databases, object storage, queueing, authentication, and transactional email delivery. | |
| Model inference for AI-generated training content, simulation templates, and the in-product assistant. | |
| Directory synchronization from a human resources system, for Customers who connect one. | |
| Bot protection on the self-service signup form. | |
| Voice synthesis for narrated training content and voice simulations. | |
| Pull request and commit metadata for engineering risk signals, for Customers who install the Herd GitHub App. | |
| Model inference, image generation, and video generation for AI-generated content, with transient storage of rendered video that is deleted within 24 hours. | |
| Directory synchronization and security alert ingestion, for Customers who connect Google Workspace. | |
| Avatar video generation for training content. | |
| WhatsApp Business Platform message delivery for WhatsApp simulations. | |
| Directory synchronization and Microsoft Teams delivery, for Customers who connect Microsoft Entra ID or Teams. | |
| Directory synchronization and single sign-on, for Customers who connect Okta. | |
| Model inference, image generation, text embeddings, and speech synthesis for training content. | |
| Directory synchronization from a human resources system, for Customers who connect one. | |
| Delivery of training, simulations, and policy attestations through the Herd Slack app, for Customers who connect Slack. | |
| Subscription billing and payment processing. | |
| Outbound call placement and in-call speech transcription for voice phishing simulations. | |
| TextLink | SMS delivery for smishing simulations and SMS training reminders. |
| Directory synchronization from a human resources system, for Customers who connect one. | |
| Model inference for AI-generated content. |
Seen on its website or job board
Website This shows what the company runs, not what data it shares.
| Technology | Signal we saw |
|---|---|
header: cf-ray: a54798ec2ca4c982-LAX | |
script: ;j.src='https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f | |
mx: aspmx.l.google.com. | |
script: e;b.src=\\\"https://snap.licdn.com/li.lms-analytics/insight.min.js\\\";s.parentNode.insertB | |
script: /_next/static/chunks/3nc6x0_y5iwnk.js?dpl=dpl_5LsbjZFN | |
header: x-vercel-id: sfo1::iad1::rdd4m-1793669255316-3e12cdac |
Certifications
| Standard | Status | What this means |
|---|---|---|
| SOC 2 | Company's own statement | SOC 2 has no public registry, so this cannot be verified from public data. |
Vendor's own statement, retrieved from the source URL on the date shown. StrataDB does not verify the underlying claim. How we collect data.