eucsoft

GitHub

developer-platform · github.com · last checked 2026-09-19

Identity

Legal entityGitHub, Inc.
HQUS
Ultimate ownershipUS
EU contracting entity—
LEI—
US CLOUD Act reachdirect
Sourcedocs.github.com · 2026-09-18

Data location

RegionEU data locationMinimum planSourceObserved
euEnterprise onlyGitHub Enterprise Cloud with data residencydocs.github.com2026-09-18

eu: CORRECTION of our 2026-09-18 reading of unstated from the subprocessor page. Page states GitHub stores GitHub.com data in the USA by default, and that choosing where code and data are stored requires GitHub Enterprise Cloud with data residency, hosted on a dedicated GHE.com subdomain.

Subprocessor chain

32 transcribed · 30 with a country outside the EEA

SubprocessorCountryPurposeObserved
Amazon Web Services Inc (AWS)USCloud hosted infrastructure, data hosting, AI inference2026-09-18
Anthropic PBCUSAI inference and AI services2026-09-18
Cerebras Systems Inc.USAI inference and AI services2026-09-18
CloudflareUSContent delivery service2026-09-18
DataDome Solutions, Inc.US, FRSecurity management2026-09-18
Elasticsearch, Inc.USCloud hosted infrastructure2026-09-18
FastlyUSContent delivery service2026-09-18
Fireworks AIUS, DE, ISAI inference and AI services2026-09-18
FullStory, Inc.USCustomer support ticketing analysis2026-09-18
GitHub Australia Pty LtdAUGitHub subsidiary2026-09-18
GitHub BVNLGitHub subsidiary2026-09-18
GitHub Canada ULCCAGitHub subsidiary2026-09-18
GitHub Germany GmbHDEGitHub subsidiary2026-09-18
GitHub India Pty LtdINGitHub subsidiary2026-09-18
Google Cloud Platform (GCP)US, BE, SGCloud hosted infrastructure, AI inference2026-09-18
Hewlett-Packard LimitedUSCloud hosted infrastructure2026-09-18
LambdaTestUSCloud hosted infrastructure2026-09-18
Microsoft (Azure)US, CA, CL, MXCloud hosted infrastructure, data hosting, AI inference2026-09-18
Microsoft (Azure) — Cognitive ServicesUSCognitive services and customer support ticketing analysis2026-09-18
Microsoft — Technical ServicesUS, AU, BR, CA, FR, JP, NO, ES, SE, CH, GBTechnical services2026-09-18
MoveworksUSCustomer support ticketing analysis2026-09-18
NexMo Inc (aka Vonage)USSMS notification provider for two-factor authentication2026-09-18
Obsidian SecurityUSSecurity management2026-09-18
OpenAIUSAI inference and AI services2026-09-18
Oracle America, Inc.USCloud hosted infrastructure2026-09-18
PusherUSReal-time infrastructure for web and mobile applications2026-09-18
Semmle IncUSGitHub subsidiary2026-09-18
Tines Automation Inc.USSecurity management2026-09-18
Twilio (SendGrid)USSMS notification provider for two-factor authentication2026-09-18
ZendeskUSCustomer support ticketing system2026-09-18
npm IncUSGitHub subsidiary2026-09-18
xAIUSAI inference and AI services2026-09-18

The count outside the EEA is arithmetic over the country column, not a judgement about lawfulness. A transfer outside the EEA can be perfectly lawful; whether this one is depends on your use, not on the vendor.

Assurance

No certification claims transcribed yet.

Support window

ProductSupport periodStateSBOMSourceObserved
GitHub Enterprise Server13 monthsDeclaredunknowndocs.github.com2026-09-18

Documents

What we read, how it was disclosed, and when.
DocumentDisclosureTranscriptionHTTPObserved
subprocessorsPublicfull2002026-09-18

History

DetectedWhat movedWhySource
2026-09-19
EU data location unstated → enterprise-only
Minimum plan set to GitHub Enterprise Cloud with data residency
Note rewritten
we read a better pagedocs.github.com