Technologies / Security and identity / Have I Been Pwned
Companies using Have I Been Pwned
Have I Been Pwned is a service that lets you check whether your email address has appeared in a data breach. It is used to see where your email was exposed and to get notified when it appears in future breaches.
Summarized from haveibeenpwned.com on 8 Nov 2026.
Seen in12 subprocessor lists10 privacy policies
Companies using Have I Been Pwned
Subprocessor listPrivacy policyWebsiteJob postings
A company can count under more than one kind of evidence. Our coverage is partial, so this is not everyone using Have I Been Pwned.
Vendor certifications
Held by Have I Been Pwned (haveibeenpwned.com), the company. A company's certification may not cover every product it sells. See Have I Been Pwned.
We found no certification statement on the pages we read. This does not mean Have I Been Pwned lacks one.
We last read its homepage on 10 Nov 2026 and the FedRAMP Marketplace on 8 Nov 2026. A standard not shown here was not found in these sources. That does not mean Have I Been Pwned lacks it.
A company's statement is shown as it wrote it, and is not verification. A registry listing is shown as the registry lists it. Neither is our assessment of Have I Been Pwned's compliance. How we read certifications.
Questions
How many companies use Have I Been Pwned?
20 companies in StrataDB's data have public evidence for Have I Been Pwned, and 12 of them name it in their own subprocessor list. Our coverage is partial, so the real number is higher.
Which companies use Have I Been Pwned?
BxScribe, CanIPhish, Claimory, Deflows and Didit, and 15 more companies. Each one links to the evidence behind it.
How does StrataDB know a company uses Have I Been Pwned?
From four kinds of public evidence: subprocessor lists, privacy policies, website code and job postings. Each is kept apart with its source and the date we saw it. A company missing here means we found no evidence, not that it does not use them.
Build your list of Have I Been Pwned customers
See every company we hold evidence for, with its source, and get an alert when a company adds or drops Have I Been Pwned.
- Every company and vendor, with its public source
- 100 API calls a month, plus MCP and the Chrome extension
- Work email only. No card, no sales call