/

Companies / LegitScript / Subprocessors

LegitScript subprocessors

legitscript.com

LegitScript provides certification and merchant risk monitoring for businesses in regulated high-risk markets. It serves payment facilitators, banks, search engines, social platforms, and e-commerce marketplaces.

Summarized from its homepage on 4 Nov 2026.

Classified asCompliance and risk

The LegitScript homepage

Subprocessors of LegitScript

LegitScript declares 12 subprocessors, including AI providers OpenAI.

From the company's own list.Read the source
SubprocessorPurposeLocationFirst seen
1PasswordCorporate Password ManagementCanada, United States, EU4 Nov 2026
AWSCloud Hosting and StorageUnited States4 Nov 2026
Auth0Product Auth0 customer credential managementUnited States4 Nov 2026
DatabricksFedRAMP registryData intelligence platformUnited States4 Nov 2026
EquifaxProduct applicant data matchUnited States4 Nov 2026
Google WorkspaceInternal business operationsUnited States4 Nov 2026
IntercomFluxguard product chatbot, CRM, tour toolUnited States4 Nov 2026
IroncladProduct clickwrapUnited States, EU4 Nov 2026
MarketoCustomer email notificationsUnited States, United Kingdom, Netherlands, Australia4 Nov 2026
OpenAIFedRAMP registryProduct search automationUnited States, Canada4 Nov 2026

2 more subprocessors

See the full list with purpose, location and first seen date.

Create a free accountWork email, no card. Already have one? Log in

Questions about LegitScript

Certifications

StandardWhat the source saysChecked
ISO 27001Company's statement“ISO 27001 : 2022 — international ISMS standard”The company's own statement. We have not checked an accreditation registry.11 Nov 2026Source
SOC 2 Type IICompany's statement“SOC 2 Type 2 — annual third-party audit”The company's own statement. SOC 2 has no public registry; the report itself is shared by the company, usually under NDA.11 Nov 2026Source

We last read its homepage on 11 Nov 2026 and the FedRAMP Marketplace on 8 Nov 2026. A standard not shown here was not found in these sources. That does not mean LegitScript lacks it.

Vendor's own statement, retrieved from the source URL on the date shown. StrataDB does not verify the underlying claim. Data sources.

See LegitScript's full stack

Every vendor with its source and date, and an alert when LegitScript adds or drops one. The same lookup works for any company.

  • Every company and vendor, with its public source
  • 100 API calls a month, plus MCP and the Chrome extension
  • Work email only. No card, no sales call