Companies / Polara Labs / Subprocessors
Polara Labs provides software that helps companies prepare for SOC 2 compliance by closing gaps, writing policies, and assembling a report package. It serves businesses seeking SOC 2 audit readiness, with the audit itself performed by an independent CPA firm.
Summarized from its homepage on 8 Nov 2026.
Subprocessors of Polara Labs
Polara Labs declares 9 subprocessors.
From the company's own list.Read the source
| Subprocessor | Purpose |
|---|---|
| S3 for evidence and generated documents, SES for transactional email, and Bedrock for AI drafting, all inside our own AWS account. | |
| No Google tag runs on the site. Once a day Google Ads fetches a file from us listing the ad click ID, whether the click led to a signup or a purchase, its time and, for a purchase, its amount. No name, email, company or answer. | |
| Serves the site typefaces from fonts.googleapis.com and fonts.gstatic.com, so Google receives your IP address and browser details with that request. | |
| Advertising measurement on public marketing pages, only after you allow it in the same prompt. Receives the page address, referrer, browser and device details, IP address and cookie identifiers. | |
| Hosting, CDN, and the serverless functions the app runs on. | |
| Product analytics. In your browser only after you allow it in the cookie prompt: pages visited, named button clicks and session recordings with everything typed hidden. From our servers: account events such as signup or payment, as IDs and event names, never answers or files. | |
| Application error monitoring. | |
| Payments. Card details go to Stripe directly and never touch our servers. | |
| Primary database, authentication, and file storage. |
Vendor's own statement, retrieved from the source URL on the date shown. StrataDB does not verify the underlying claim. Data sources.
See Polara Labs's full stack
Every vendor with its source and date, and an alert when Polara Labs adds or drops one. The same lookup works for any company.
- Every company and vendor, with its public source
- 100 API calls a month, plus MCP and the Chrome extension
- Work email only. No card, no sales call