GitHub defines customer data as all data provided by the customer to GitHub through their use of GitHub services. Some customer data is personal data as defined under GDPR.
The GitHub Subprocessor List identifies subprocessors authorized to subprocess customer or personal data on behalf of GitHub to provide services to our Enterprise customers. This list is applicable for all GitHub services governed by the GitHub Data Protection Agreement.
GitHub publishes the names of any new subprocessors for its online services at least 30 days in advance of the subprocessor’s authorization to perform services that may involve access to customer data or personal data.
To receive notifications of updates to this Subprocessor list, please follow the instructions provided in About notifications.
If you have questions about this list, please contact us at privacy@github.com.
Third Party Subprocessors
| Name of Subprocessor | Description of Processing | Location of Processing | Corporate Location |
|---|---|---|---|
| Amazon Web Services Inc (AWS) | Cloud Hosted Infrastructure, Data Hosting, AI Inference and AI Services | United States | United States |
| Anthropic PBC | AI Inference and AI Services | United States | United States |
| Cloudflare | Content delivery service | United States | United States |
| CoreWeave, Inc. | Cloud Hosted Infrastructure | United States | United States |
| Fastly | Content delivery service | United States | United States |
| Google Cloud Platform (GCP) | Cloud Hosted Infrastructure, AI Inference and AI Services | United States, Belgium, Singapore | United States |
| Microsoft (Azure) | Cloud Hosted Infrastructure, Data Hosting, AI Inference and AI Services | United States | United States |
| Microsoft (Azure) | Cognitive Services and customer support ticketing analysis | United States | United States |
| Microsoft | Technical Services | Australia, Brazil, Canada, France, Japan, Norway, Spain, Sweden, Switzerland, United Kingdom, United States | United States |
| Moveworks | Customer support ticketing analysis | United States | United States |
| NexMo Inc (aka Vonage) | SMS notification provider for 2 Factor Authentication | United States | United States |
| Obsidian Security | Security management | United States | United States |
| OpenAI | AI Inference and AI Services | United States | United States |
| Pusher | Building and managing real-time infrastructure for web and mobile applications | United States | United States |
| Twilio (SendGrid) | SMS notification provider for 2 Factor Authentication | United States | United States |
| Zendesk | Customer support ticketing system | United States | United States |
GitHub Subsidiaries
| Name of Subprocessor | Description of Processing | Location of Processing | Corporate Location |
|---|---|---|---|
| GitHub Australia Pty Ltd | GitHub Subsidiary | Australia | Australia |
| GitHub BV | GitHub Subsidiary | Netherlands | Netherlands |
| GitHub Canada ULC | GitHub Subsidiary | Canada | Canada |
| GitHub Germany GmbH | GitHub Subsidiary | Germany | Germany |
| GitHub India Pty Ltd | GitHub Subsidiary | India | India |
| npm Inc | GitHub Subsidiary | United States | United States |
| Semmle Inc | GitHub Subsidiary | United States | United States |