Development · 🇺🇸 United States

GitHub

Where GitHub sends data, which documents it publishes and who relies on it, as recorded by the companies who evaluated it.

Where the data goes

20 companies GitHub passes data to, with the purpose and the country where we know them. Each one has a profile of its own.

What GitHub publishes, as recorded. A gap here is information too: it means nobody who evaluated them found it.

5 companies list GitHub as a sub-processor. A dependency on them is a dependency on these.

Looking for GitHub's trust center? Their own is linked above when they publish one. This profile is the register NIS2 Article 21, DORA Article 28 and ISO 27001 A.5.19 ask you to keep about them, filled by the companies who had to. Part of the Sudory vendor database.