Companies / Tracecat / Subprocessors
Tracecat provides an open source security automation platform for building agents and automating cyber defense. It serves AI-native security teams.
Summarized from its homepage on 4 Nov 2026.
Subprocessors of Tracecat
Tracecat declares 8 subprocessors.
| Subprocessor | Purpose |
|---|---|
| Customer application data; Operational telemetry | |
| Email; User profile | |
| Source code and IaC configurations | |
| Email; User profile | |
| Infrastructure and application metrics; Application logs, traces, and error events | |
| Pangolin | Encrypted data in transit over secure Wireguard tunnel. |
| Application errors and traces | |
| Encrypted workflow execution data |
Certifications
| Standard | What the source says | Checked |
|---|---|---|
| SOC 2 Type IICompany's statement | “Enterprise-grade security SOC 2 Type II & air-gappable”The company's own statement. SOC 2 has no public registry; the report itself is shared by the company, usually under NDA. | 11 Nov 2026Source |
We last read its homepage on 11 Nov 2026 and the FedRAMP Marketplace on 8 Nov 2026. A standard not shown here was not found in these sources. That does not mean Tracecat lacks it.
Recent changes
| Date | Change |
|---|---|
| 11 Nov 2026 | changed Pangolin |
Vendor's own statement, retrieved from the source URL on the date shown. StrataDB does not verify the underlying claim. Data sources.
See Tracecat's full stack
Every vendor with its source and date, and an alert when Tracecat adds or drops one. The same lookup works for any company.
- Every company and vendor, with its public source
- 100 API calls a month, plus MCP and the Chrome extension
- Work email only. No card, no sales call