Skip to main content

GitHub Subprocessors

GitHub defines customer data as all data provided by the customer to GitHub through their use of GitHub services. Some customer data is personal data as defined under GDPR.

The GitHub Subprocessor List identifies subprocessors authorized to subprocess customer or personal data on behalf of GitHub to provide services to our Enterprise customers. This list is applicable for all GitHub services governed by the GitHub Data Protection Agreement.

GitHub publishes the names of any new subprocessors for its online services at least 30 days in advance of the subprocessor’s authorization to perform services that may involve access to customer data or personal data.

To receive notifications of updates to this Subprocessor list, please follow the instructions provided in About notifications.

If you have questions about this list, please contact us at privacy@github.com.

Name of SubprocessorDescription of ProcessingLocation of ProcessingCorporate Location
Amazon Web Services (AWS)Cloud Hosted Infrastructure and Data HostingUnited StatesUnited States
Azure (Microsoft)Cloud Hosted Infrastructure and Data HostingUnited States, France,
Switzerland, and Japan
United States
Azure Cognitive ServicesCustomer support ticketing analysisUnited StatesUnited States
CloudflareContent delivery serviceUnited StatesUnited States
FastlyContent delivery serviceUnited StatesUnited States
GitHub Australia Pty LtdGitHub SubsidiaryAustraliaAustralia
GitHub BVGitHub SubsidiaryNetherlandsNetherlands
GitHub Canada ULCGitHub SubsidiaryCanadaCanada
GitHub Germany GmbHGitHub SubsidiaryGermanyGermany
GitHub India Pty LtdGitHub SubsidiaryIndiaIndia
Google Cloud Platform (GCP)Cloud Hosted InfrastructureUnited StatesUnited States
MicrosoftTechnical ServicesUnited StatesUnited States
MoveworksCustomer support ticketing analysisUnited StatesUnited States
NexMo (aka Vonage)SMS notification provider for 2 Factor AuthenticationUnited StatesUnited States
Npm, Inc.GitHub SubsidiaryUnited StatesUnited States
Obsidian SecuritySecurity managementUnited StatesUnited States
PusherBuilding and managing real-time infrastructure for web and mobile applicationsUnited StatesUnited States
Semmle Inc.GitHub SubsidiaryUnited StatesUnited States
SendGridSMS notification provider for 2 Factor AuthenticationUnited StatesUnited States
SplunkLogging pipeline for security log, storage, and searchUnited StatesUnited States
TwilioSMS notification provider for 2 Factor AuthenticationUnited StatesUnited States
VividCortexMonitor database performance, efficiency, and uptimeUnited StatesUnited States
ZapierApp infrastructure and supportUnited StatesUnited States
ZendeskCustomer support ticketing systemUnited StatesUnited States