Companies / Deck.co / Subprocessors
Deck provides browser agents that give authenticated access to websites without APIs and run workflows at scale. It serves fast-growing startups and global enterprises.
Summarized from its homepage on 6 Nov 2026.
180 Peel St, Suite 360, Montreal, QC, H3C 2G7, CA
Subprocessors of Deck.co
Deck.co declares 10 subprocessors.
| Subprocessor | Purpose |
|---|---|
| DevSecOps and application security platform. Scans code repositories for vulnerabilities, secrets, and compliance issues with automated remediation guidance. | |
| Basis Theory | Basis Theory routes, tokenizes, and optimizes your payments to drive conversion, resilience, and retention |
| Primary customer identity provider for Deck's data connectivity platform: sign-up/sign-in, SSO, user profile management and issuance of the JWTs used to authenticate sessions to the Deck Console and REST API. | |
| Content delivery network, DNS services, and web security. Provides DDoS protection, caching, and performance optimization. | |
| Cloud infrastructure and hosting platform. Provides compute resources, databases, storage, and managed cloud services. | |
| Source code repository and version control platform. Stores proprietary code, development workflows, and technical documentation. | |
| Email, document collaboration, and productivity suite. Provides business email, file storage, calendaring, and office applications. | |
| Logs processor + dashboards | |
| Incident Management | |
| B2B customer support platform with omnichannel ticketing. Manages support across Slack, Teams, email, and chat with AI-powered automation and account intelligence. |
Certifications
| Standard | What the source says | Checked |
|---|---|---|
| PCI DSSCompany's statement | “SOC 2 Type II and PCI DSS.”The company's own statement. We have not checked a card network registry. | 13 Nov 2026Source |
| SOC 2 Type IICompany's statement | “SOC 2 Type II and PCI DSS.”The company's own statement. SOC 2 has no public registry; the report itself is shared by the company, usually under NDA. | 13 Nov 2026Source |
We last read its homepage on 13 Nov 2026 and the FedRAMP Marketplace on 8 Nov 2026. A standard not shown here was not found in these sources. That does not mean Deck.co lacks it.
Vendor's own statement, retrieved from the source URL on the date shown. StrataDB does not verify the underlying claim. Data sources.
See Deck.co's full stack
Every vendor with its source and date, and an alert when Deck.co adds or drops one. The same lookup works for any company.
- Every company and vendor, with its public source
- 100 API calls a month, plus MCP and the Chrome extension
- Work email only. No card, no sales call