Privacy Policies Github Subprocessors (GitHub)
Updated 17 October 2025
This document outlines GitHub's authorized third-party subprocessors and internal subsidiaries that process customer and personal data for its Enterprise services. It details the types of processing performed and the locations involved. The list also explains GitHub's notification policy for new subprocessors and provides contact information for inquiries related to data processing under the GitHub Data Protection Agreement.
GitHub Subprocessors
GitHub defines customer data as all data provided by the customer to GitHub through their use of GitHub services. Some customer data is personal data as defined under GDPR.
The GitHub Subprocessor List identifies subprocessors authorized to subprocess customer or personal data on behalf of GitHub to provide services to our Enterprise customers. This list is applicable for all GitHub services governed by the GitHub Data Protection Agreement.
GitHub publishes the names of any new subprocessors for its online services at least 30 days in advance of the subprocessor’s authorization to perform services that may involve access to customer data or personal data.
To receive notifications of updates to this Subprocessor list, please follow the instructions provided in AUTOTITLE.
If you have questions about this list, please contact us at [email protected].
Third Party Subprocessors
Name of Subprocessor | Description of Processing | Location of Processing | Corporate Location |
Amazon Web Services Inc (AWS) | Cloud Hosted Infrastructure, Data Hosting, AI Inference and AI Services | United States | United States |
Anthropic PBC | AI Inference and AI Services | United States | United States |
Cloudflare | Content delivery service | United States | United States |
CoreWeave, Inc. | Cloud Hosted Infrastructure | United States | United States |
Fastly | Content delivery service | United States | United States |
Fireworks AI | AI Inference and AI Services | United States, Iceland, Germany | United States |
Google Cloud Platform (GCP) | Cloud Hosted Infrastructure, AI Inference and AI Services | United States, Belgium, Singapore | United States |
Hewlett-Packard Limited | Cloud Hosted Infrastructure | United States | United States |
LambdaTest | Cloud Hosted Infrastructure | United States | United States |
Microsoft (Azure) | Cloud Hosted Infrastructure, Data Hosting, AI Inference and AI Services | United States | United States |
Microsoft (Azure) | Cognitive Services and customer support ticketing analysis | United States | United States |
Microsoft | Technical Services | Australia, Brazil, Canada, France, Japan, Norway, Spain, Sweden, Switzerland, United Kingdom, United States | United States |
Moveworks | Customer support ticketing analysis | United States | United States |
NexMo Inc (aka Vonage) | SMS notification provider for 2 Factor Authentication | United States | United States |
Obsidian Security | Security management | United States | United States |
OpenAI | AI Inference and AI Services | United States | United States |
Oracle America, Inc. | Cloud Hosted Infrastructure | United States | United States |
Pusher | Building and managing real-time infrastructure for web and mobile applications | United States | United States |
Twilio (SendGrid) | SMS notification provider for 2 Factor Authentication | United States | United States |
xAI | AI Inference and AI Services | United States | United States |
Zendesk | Customer support ticketing system | United States | United States |
GitHub Subsidiaries
Name of Subprocessor | Description of Processing | Location of Processing | Corporate Location |
GitHub Australia Pty Ltd | GitHub Subsidiary | Australia | Australia |
GitHub BV | GitHub Subsidiary | Netherlands | Netherlands |
GitHub Canada ULC | GitHub Subsidiary | Canada | Canada |
GitHub Germany GmbH | GitHub Subsidiary | Germany | Germany |
GitHub India Pty Ltd | GitHub Subsidiary | India | India |
npm Inc | GitHub Subsidiary | United States | United States |
Semmle Inc | GitHub Subsidiary | United States | United States |
About this template
What is this template?
Privacy Policies Github Subprocessors (GitHub) is a free, ready-to-use Data Governance template you can open, customize, and download on GitLaw. It gives you a professionally structured starting point, so you never have to draft from a blank page. The wording is plain and modern, organized into clear sections that are easy to read, edit, and adapt to your own situation before you share or sign it.
When should you use it?
Reach for this Data Governance template whenever you need a reliable agreement quickly and want to be sure the essentials are covered. It suits individuals, freelancers, startups, and established businesses alike. Instead of paying for a document drafted from scratch, you can start here, tailor the details to your arrangement, and have a polished draft ready in minutes. This version is drafted with Iceland, Germany, Belgium, Singapore, Australia, Brazil, Canada, France, Japan, Norway, Spain, Sweden, Switzerland, England & Wales, Netherlands, India, and European Union in mind, though you should always review the final wording against the laws that apply to you.
What's typically included?
A well-drafted Data Governance usually sets out the parties involved, the scope of the agreement, and each side's rights and responsibilities. Expect sections covering key terms and definitions, how long the agreement lasts, how it can be ended, and what happens if something goes wrong. This template brings those building blocks together in a sensible order, so you can focus on the specifics rather than worrying about what to include. Open it to read the full document, then sign up to edit, negotiate, and e-sign it directly in GitLaw.