/

Companies / HackerOne / Subprocessors

HackerOne subprocessors

hackerone.com

HackerOne provides a platform for finding, validating, and remediating security vulnerabilities, combining AI agents with human security researchers. It serves organizations seeking continuous security testing, vulnerability disclosure, and remediation across their applications, cloud, and AI systems.

Summarized from its homepage on 4 Nov 2026.

Classified asCybersecurity

The HackerOne homepage

Subprocessors of HackerOne

HackerOne declares 30 subprocessors, including AI providers Anthropic, OpenAI.

From the company's own list.Read the source
SubprocessorPurposeLocationFirst seen
Adobe/MarketoMarketing AutomationUnited States4 Nov 2026
Amazon Web Services, Inc.Cloud Service ProviderUnited States4 Nov 2026
Amplitude, Inc.ISO 27001 statementSOC 2 statementProduct Analytics; CommunicationUnited States4 Nov 2026
AnthropicAI ProcessingUnited States4 Nov 2026
Atlassian, Inc.FedRAMP registryCollaborationUnited States, Germany, Ireland, Singapore, Australia4 Nov 2026
Box, Inc.FedRAMP registryContent Management and File SharingUnited States4 Nov 2026
Cloudflare, Inc.FedRAMP registryContent Delivery Network and DDoS PreventionUnited States4 Nov 2026
Datadog, Inc.FedRAMP registryInfrastructure MonitoringUnited States4 Nov 2026
Fivetran, Inc.HIPAA statementISO 27001 statementPCI DSS statementSOC 2 statementData PipelineUnited States4 Nov 2026
Freshworks, Inc.Customer ServiceUnited States4 Nov 2026

20 more subprocessors

See the full list with purpose, location and first seen date.

Create a free accountWork email, no card. Already have one? Log in

Questions about HackerOne

Certifications

StandardWhat the source saysChecked
FedRAMPListed in registryHackerOne Continuous Security Testing Platform, LI-SaaSListed as FedRAMP Authorized in the official FedRAMP Marketplace data.8 Nov 2026Source

We last read its homepage on 11 Nov 2026 and the FedRAMP Marketplace on 8 Nov 2026. A standard not shown here was not found in these sources. That does not mean HackerOne lacks it.

Vendor's own statement, retrieved from the source URL on the date shown. StrataDB does not verify the underlying claim. Data sources.

See HackerOne's full stack

Every vendor with its source and date, and an alert when HackerOne adds or drops one. The same lookup works for any company.

  • Every company and vendor, with its public source
  • 100 API calls a month, plus MCP and the Chrome extension
  • Work email only. No card, no sales call