Companies / pendo.io

pendo.io tech stack

pendo.io declares 8 subprocessors, including AI providers LangChain, OpenAI.

Declared subprocessors

Subprocessor list From the company's own list. Read the source.

SubprocessorPurposeLocationFirst seen
Amazon Web ServicesEmail routing, legacy CDNUS, EU, JPN, AUS (according to customer's hosting location)3 Nov 2026
Anthropic Claude(Optional) AI functionality in productUS3 Nov 2026
Elastic.coLogging and query solutionUS, EU, JPN, AUS (according to customer's hosting location)3 Nov 2026
Google Cloud PlatformHosting infrastructure services, (optional) AI servicesUS, EU, JPN, AUS (at customer's designation)3 Nov 2026
LangChain(Recommended Optional) AI agent development infrastructureUS or EU (according to customer's hosting location)3 Nov 2026
Microsoft Azure(Optional) AI functionality in productUS, EU, or JPN (according to customer's hosting location)3 Nov 2026
OpenAI(Optional) AI functionality in productUS or EU (according to customer's hosting location)3 Nov 2026
Tray.aiWorkflow automation and systems integrationUS, EU, JPN, AUS (according to customer's hosting location)3 Nov 2026

Seen on the website

Website This shows what the site runs, not what data it shares.

TechnologySignal we sawLast checked
Cloudflareheader: cf-ray: a5472fbd9d42c06e-DFW3 Nov 2026
Google Analyticsscript: https://www.googletagmanager.com/gtag/js?id=G-G89E8N36373 Nov 2026
Google Tag Managerscript: j.src='https://www.googletagmanager.com/gtm.js?id='+i+dl;\\n f.parent3 Nov 2026
Google Workspacemx: aspmx.l.google.com.3 Nov 2026
Next.jsscript: /_next/static/chunks/4bd1b696-bad92808725a934a.js?dpl=3 Nov 2026
OneTrustscript: https://cdn.cookielaw.org/scripttemplates/otSDKStub.js3 Nov 2026
Vercelheader: x-vercel-id: cle1::iad1::bb9kj-1793664947011-da27f5003 Nov 2026

Certifications

StandardStatusWhat this means
HIPAACompany's own statementThere is no official HIPAA certification or registry. This is the company's own statement of compliance.
PCI DSSCompany's own statementStated by the company. We have not checked a card network registry.
SOC 2Company's own statementSOC 2 has no public registry, so this cannot be verified from public data.

Vendor's own statement, retrieved from the source URL on the date shown. StrataDB does not verify the underlying claim. How we collect data.