/

Technologies / Security and identity / Have I Been Pwned

Companies listing Have I Been Pwned as a subprocessor

Have I Been Pwned is a service that lets you check whether your email address has appeared in a data breach. It is used to see where your email was exposed and to get notified when it appears in future breaches.

Summarized from haveibeenpwned.com on 8 Nov 2026.

Seen in12 subprocessor lists10 privacy policies

Companies listing Have I Been Pwned as a subprocessor

Subprocessor listPrivacy policyWebsiteJob postings

CompanyNamed asEvidenceFirst seen
BxScribebxscribe.comHave I Been Pwned (Pwned Passwords)8 Nov 2026
CanIPhishcaniphish.comHave I Been Pwned3 Nov 2026
Claimoryclaimory.ioHave I Been Pwned (Pwned Passwords)8 Nov 2026
Deflowsdeflows.comHave I Been Pwned9 Nov 2026
Diditdidit.meHave I Been Pwned10 Nov 2026
eVR Classroomevrclassroom.com.auHave I Been Pwned10 Nov 2026
HexVaulthexvault.co.ukHave I Been Pwned (HIBP)11 Nov 2026
IronWiFiironwifi.comHaveIBeenPwned4 Nov 2026
Lean Sensoryleansensory.comHave I Been Pwned12 Nov 2026
Lend Systemlend.tjHave I Been Pwned (Pwned Passwords)12 Nov 2026
Upfortupfort.comHave I Been Pwned2 Nov 2026
Zscalerzscaler.comHave I Been Pwned3 Nov 2026

A company can count under more than one kind of evidence. Our coverage is partial, so this is not everyone using Have I Been Pwned.

Questions

How many companies list Have I Been Pwned as a subprocessor?

12 companies in StrataDB's data name Have I Been Pwned in their own subprocessor list. Our coverage is partial, so the real number is higher.

Which companies list Have I Been Pwned as a subprocessor?

BxScribe, CanIPhish, Claimory, Deflows and Didit, and 7 more companies. Each one links to the evidence behind it.

How does StrataDB know a company uses Have I Been Pwned?

From four kinds of public evidence: subprocessor lists, privacy policies, website code and job postings. Each is kept apart with its source and the date we saw it. A company missing here means we found no evidence, not that it does not use them.

Build your list of Have I Been Pwned customers

See every company we hold evidence for, with its source, and get an alert when a company adds or drops Have I Been Pwned.

  • Every company and vendor, with its public source
  • 100 API calls a month, plus MCP and the Chrome extension
  • Work email only. No card, no sales call