Companies / herdsecurity.io
herdsecurity.io subprocessors
herdsecurity.io declares 20 subprocessors, including AI providers Anthropic, ElevenLabs, OpenAI, xAI.
Declared subprocessors
Subprocessor list From the company's own list. Read the source.
| Subprocessor | Purpose |
|---|---|
| Amazon Web Services | Primary cloud infrastructure: compute, databases, object storage, queueing, authentication, and transactional email delivery. |
| Anthropic | Model inference for AI-generated training content, simulation templates, and the in-product assistant. |
| BambooHR | Directory synchronization from a human resources system, for Customers who connect one. |
| Cloudflare | Bot protection on the self-service signup form. |
| ElevenLabs | Voice synthesis for narrated training content and voice simulations. |
| GitHub | Pull request and commit metadata for engineering risk signals, for Customers who install the Herd GitHub App. |
| Google Cloud Platform | Model inference, image generation, and video generation for AI-generated content, with transient storage of rendered video that is deleted within 24 hours. |
| Google Workspace | Directory synchronization and security alert ingestion, for Customers who connect Google Workspace. |
| HeyGen | Avatar video generation for training content. |
| Meta Platforms | WhatsApp Business Platform message delivery for WhatsApp simulations. |
| Microsoft Azure | Directory synchronization and Microsoft Teams delivery, for Customers who connect Microsoft Entra ID or Teams. |
| Okta | Directory synchronization and single sign-on, for Customers who connect Okta. |
| OpenAI | Model inference, image generation, text embeddings, and speech synthesis for training content. |
| Rippling | Directory synchronization from a human resources system, for Customers who connect one. |
| Slack | Delivery of training, simulations, and policy attestations through the Herd Slack app, for Customers who connect Slack. |
| Stripe | Subscription billing and payment processing. |
| Telnyx | Outbound call placement and in-call speech transcription for voice phishing simulations. |
| TextLink | SMS delivery for smishing simulations and SMS training reminders. |
| Workday | Directory synchronization from a human resources system, for Customers who connect one. |
| xAI | Model inference for AI-generated content. |
Seen on its website or job board
Website This shows what the company runs, not what data it shares.
| Technology | Signal we saw |
|---|---|
| Cloudflare | header: cf-ray: a54798ec2ca4c982-LAX |
| Google Tag Manager | script: ;j.src='https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f |
| Google Workspace | mx: aspmx.l.google.com. |
| LinkedIn Insight Tag | script: e;b.src=\\\"https://snap.licdn.com/li.lms-analytics/insight.min.js\\\";s.parentNode.insertB |
| Next.js | script: /_next/static/chunks/3nc6x0_y5iwnk.js?dpl=dpl_5LsbjZFN |
| Vercel | header: x-vercel-id: sfo1::iad1::rdd4m-1793669255316-3e12cdac |
Certifications
| Standard | Status | What this means |
|---|---|---|
| SOC 2 | Company's own statement | SOC 2 has no public registry, so this cannot be verified from public data. |
Vendor's own statement, retrieved from the source URL on the date shown. StrataDB does not verify the underlying claim. How we collect data.