Privacy Policies Github Subprocessors (GitHub)

GitHubUpdated 17 Oct 2025

This document outlines GitHub's authorized third-party subprocessors and internal subsidiaries that process customer and personal data for its Enterprise services. It details the types of processing performed and the locations involved. The list also explains GitHub's notification policy for new subprocessors and provides contact information for inquiries related to data processing under the GitHub Data Protection Agreement.

GitHub Subprocessors

GitHub defines customer data as all data provided by the customer to GitHub through their use of GitHub services. Some customer data is personal data as defined under GDPR.

The GitHub Subprocessor List identifies subprocessors authorized to subprocess customer or personal data on behalf of GitHub to provide services to our Enterprise customers. This list is applicable for all GitHub services governed by the GitHub Data Protection Agreement.

GitHub publishes the names of any new subprocessors for its online services at least 30 days in advance of the subprocessor’s authorization to perform services that may involve access to customer data or personal data.

To receive notifications of updates to this Subprocessor list, please follow the instructions provided in AUTOTITLE.

If you have questions about this list, please contact us at [email protected].

Third Party Subprocessors

Name of Subprocessor

Description of Processing

Location of Processing

Corporate Location

Amazon Web Services Inc (AWS)

Cloud Hosted Infrastructure, Data Hosting, AI Inference and AI Services

United States

United States

Anthropic PBC

AI Inference and AI Services

United States

United States

Cloudflare

Content delivery service

United States

United States

CoreWeave, Inc.

Cloud Hosted Infrastructure

United States

United States

Fastly

Content delivery service

United States

United States

Fireworks AI

AI Inference and AI Services

United States, Iceland, Germany

United States

Google Cloud Platform (GCP)

Cloud Hosted Infrastructure, AI Inference and AI Services

United States, Belgium, Singapore

United States

Hewlett-Packard Limited

Cloud Hosted Infrastructure

United States

United States

LambdaTest

Cloud Hosted Infrastructure

United States

United States

Microsoft (Azure)

Cloud Hosted Infrastructure, Data Hosting, AI Inference and AI Services

United States

United States

Microsoft (Azure)

Cognitive Services and customer support ticketing analysis

United States

United States

Microsoft

Technical Services

Australia, Brazil, Canada, France, Japan, Norway, Spain, Sweden, Switzerland, United Kingdom, United States

United States

Moveworks

Customer support ticketing analysis

United States

United States

NexMo Inc (aka Vonage)

SMS notification provider for 2 Factor Authentication

United States

United States

Obsidian Security

Security management

United States

United States

OpenAI

AI Inference and AI Services

United States

United States

Oracle America, Inc.

Cloud Hosted Infrastructure

United States

United States

Pusher

Building and managing real-time infrastructure for web and mobile applications

United States

United States

Twilio (SendGrid)

SMS notification provider for 2 Factor Authentication

United States

United States

xAI

AI Inference and AI Services

United States

United States

Zendesk

Customer support ticketing system

United States

United States

GitHub Subsidiaries

Name of Subprocessor

Description of Processing

Location of Processing

Corporate Location

GitHub Australia Pty Ltd

GitHub Subsidiary

Australia

Australia

GitHub BV

GitHub Subsidiary

Netherlands

Netherlands

GitHub Canada ULC

GitHub Subsidiary

Canada

Canada

GitHub Germany GmbH

GitHub Subsidiary

Germany

Germany

GitHub India Pty Ltd

GitHub Subsidiary

India

India

npm Inc

GitHub Subsidiary

United States

United States

Semmle Inc

GitHub Subsidiary

United States

United States

5.0 out of 5 on Google

Read reviews

As seen in

Law360
Artificial Lawyer
Insider
Axios Pro
San Francisco Business Times
Built In
Startups Magazine
Business Reporter
Tech.eu

Australia note

This version is drafted for Australia. Some terms are set federally and others by state or territory. Tell GitLaw where the parties are and it adjusts the draft.

Jurisdiction
Iceland
Germany
Belgium
Document info
HTML document. Document created on Fri Sep 12th, 2025. Last updated on Fri Oct 17th, 2025.
This document is public
Licensed under CC BY 4.0 (Attribution).
Come to agreements faster
Write, review, negotiate, and manage legal contracts
Related documents
European Union
Content Moderation Practices by Mozilla
This document outlines how an organization manages content moderation for user-generated text, images, and software applications. It specifies the human-led review process for reports of illegal or policy-violating content and the subsequent appeals procedure for both reporters and account holders.
Updated 13 Aug 2026
England & Wales
Firefox Focus and Firefox Klar Privacy Notice by Mozilla
This privacy notice explains how a browser developer processes technical, interaction, and browsing data. It details user rights under data protection laws and provides options for managing data collection and search preferences.
Updated 13 Aug 2026
US
Firefox OS Privacy Notice by Mozilla
This privacy notice explains how an operating system handles user data related to updates, location services, and device activation. It outlines user options for disabling data sharing for app usage and search engine analytics directly within device settings.
Updated 13 Aug 2026
Denmark
Privacy Policy (Denmark) by Seedsummit
This internal data protection policy establishes how a company manages personal information in compliance with the EU General Data Protection Regulation. It defines processing principles such as data minimization and storage limitation, and outlines the responsibilities of a designated IT systems administrator in Denmark.
Updated 13 Aug 2026
US
Privacy Policies Github Candidate Privacy Policy (GitHub)
This privacy policy outlines how an organization handles the personal data of job applicants during the recruitment process. It specifies the types of data collected, including contact details and background check information, and explains the legal basis for sharing and retaining that data.
Updated 13 Aug 2026
FeaturedEngland & Wales
Reasonable Adjustments Review (UK) (Acas)
This document helps UK employers and employees monitor and update workplace changes made for a disability. It records current adjustments, requests for changes, and any new agreements reached during a review meeting.
Updated 13 Aug 2026

Frequently asked questions

A template isn't binding on its own - like any contract, it becomes binding once it's properly completed and signed. Templates in our curated library are professionally drafted for US or UK law; review any template before you sign it.

Yes. Chat with GitLaw to edit any section, or make changes directly in the editor.

Yes, read about team plans here.

Describe what you need in the chat and GitLaw will draft it for you.

Templates in our curated library are professionally drafted for US or UK law. The wider library comes from the GitLaw community and public sources - a solid starting point, but check any template fits your situation before you rely on it.

Mostly US and UK law. Some templates use general commercial terms that work across jurisdictions, and many note which law they're written for.

It depends on the situation. Templates work well for routine business agreements. For anything involving significant money, complex IP, employment, or areas you're unsure about, it's worth getting professional advice before you sign. GitLaw provides templates and tools, not legal advice.

Open any template in GitLaw and describe the change you want in the chat — 'make clause 4 mutual' or 'add a 30-day notice period', for example. GitLaw drafts the revised language and shows it as a suggested edit. You accept, reject, or keep editing from there.

Yes. Upload a Word, PDF, or Markdown file and GitLaw will open it in the editor. You can review, edit, or chat with GitLaw about it the same way you would with any template from the library.

Trusted by 5,000+ businesses

Nexus logoMlabs logoTechstars logo

From template to signed, in one place

Every template opens in an editor with an AI agent alongside it.

1

Open

Pick a template and open it. Nothing to download, and no credit card to start.

Free to open

2

Edit with AI

Describe your situation in chat and the agent adapts the wording, clause by clause.

Tracked changes you can review

3

Send and sign

Share it for negotiation, then collect signatures without leaving GitLaw.

eSign included

Built for your legal work,
with practicing lawyers

Trained on 5,500+ clauses and specialist areas of law. Built with a standards committee of independent lawyers.

As seen in

Law360
Artificial Lawyer
Insider
Axios Pro
San Francisco Business Times
Built In
Startups Magazine
Business Reporter
Tech.eu

Ready to get started?

No sales calls, no credit card. Just chat with GitLaw.

GitLaw provides templates and tools, not legal advice. Templates are a starting point, not a substitute for advice on your situation - for anything significant, speak to a qualified lawyer.