GitHub defines customer data as all data provided by the customer to GitHub through their use of GitHub services. Some customer data is personal data as defined under GDPR.
The GitHub Subprocessor List identifies subprocessors authorized to subprocess customer or personal data on behalf of GitHub to provide services to our Enterprise customers. This list is applicable for all GitHub services governed by the GitHub Data Protection Agreement .
GitHub publishes the names of any new subprocessors for its online services at least 30 days in advance of the subprocessor’s authorization to perform services that may involve access to customer data or personal data.
To receive notifications of updates to this Subprocessor list, please follow the instructions provided in About notifications .
If you have questions about this list, please contact us at privacy@github.com .
| Name of Subprocessor | Description of Processing | Location of Processing | Corporate Location |
|---|
| Amazon Web Services (AWS) | Cloud Hosted Infrastructure and Data Hosting | United States | United States |
| Azure (Microsoft) | Cloud Hosted Infrastructure and Data Hosting | United States, France,
Switzerland, and Japan | United States |
| Azure Cognitive Services | Customer support ticketing analysis | United States | United States |
| Cloudflare | Content delivery service | United States | United States |
| Fastly | Content delivery service | United States | United States |
| GitHub Australia Pty Ltd | GitHub Subsidiary | Australia | Australia |
| GitHub BV | GitHub Subsidiary | Netherlands | Netherlands |
| GitHub Canada ULC | GitHub Subsidiary | Canada | Canada |
| GitHub Germany GmbH | GitHub Subsidiary | Germany | Germany |
| GitHub India Pty Ltd | GitHub Subsidiary | India | India |
| Google Cloud Platform (GCP) | Cloud Hosted Infrastructure | United States | United States |
| Microsoft | Technical Services | United States | United States |
| Moveworks | Customer support ticketing analysis | United States | United States |
| NexMo (aka Vonage) | SMS notification provider for 2 Factor Authentication | United States | United States |
| Npm, Inc. | GitHub Subsidiary | United States | United States |
| Obsidian Security | Security management | United States | United States |
| Pusher | Building and managing real-time infrastructure for web and mobile applications | United States | United States |
| Semmle Inc. | GitHub Subsidiary | United States | United States |
| SendGrid | SMS notification provider for 2 Factor Authentication | United States | United States |
| Splunk | Logging pipeline for security log, storage, and search | United States | United States |
| Twilio | SMS notification provider for 2 Factor Authentication | United States | United States |
| VividCortex | Monitor database performance, efficiency, and uptime | United States | United States |
| Zapier | App infrastructure and support | United States | United States |
| Zendesk | Customer support ticketing system | United States | United States |