Openwake · evidence pack

Snyk

https://snyk.io · record 185 · read 2026-09-05 · rules/v1 · generated 2026-09-06 04:03 UTC

Facts

Trains on customer data
unclear
No supporting text found in the documents read.
privacy policy · https://snyk.io/policies/privacy/ · confidence 0.20
Opt-out mechanism
To opt out of sales or targeted advertising, update your settings in our cookie manager, use a universal opt-out signal, or email us at privacy@snyk.io.
“To opt out of sales or targeted advertising, update your settings in our cookie manager, use a universal opt-out signal, or email us at privacy@snyk.io.”
privacy policy · https://snyk.io/policies/privacy/ · confidence 0.50
AI features
none stated
No supporting text found in the documents read.
privacy policy · https://snyk.io/policies/privacy/ · confidence 0.20
Model providers named
OpenAI
“OpenAI, LLC Hosted in the U.S. May be accessed globally by Snyk employees.”
subprocessors · https://snyk.io/policies/subprocessors · confidence 0.60
Retention
not stated
No supporting text found in the documents read.
privacy policy · https://snyk.io/policies/privacy/ · confidence 0.20
Hosting regions
EU
“Hosted in the US or EU (Frankfurt, Germany).”
subprocessors · https://snyk.io/policies/subprocessors · confidence 0.50
Subprocessor notice
30 days
“3.2 Snyk will provide Customer with thirty (30) day notice (the “Notice Period”) prior to adding or replacing any Sub-processor by posting details at https://snyk.io/policies/subprocessors/.”
dpa · https://snyk.io/dpa · confidence 0.55

Subprocessors (24)

NameCategoryLocationQuoted from
AmplitudeotherU.S.
“Amplitude, Inc. Hosted in the U.S. May be accessed globally by Snyk employees.”
Akamaiotherunstated
“Akamai Technologies Limited and its affiliates The nature of the Akamai solution, for optimizing traffic management, means that Akamai processes Snyk’s customer data from the region closest to where t”
Amazon Web ServiceshyperscalerU.S.
“Amazon Web Services, Inc. and Amazon Web Services EMEA SARL Data can be hosted in the U.S., EU or Australia at Customer’s election. May be accessed globally by Snyk employees.”
OktaotherEU
“Okta, Inc. (Auth0) Hosted in the U.S, EU or Australia at Customer’s election. May be accessed globally by Snyk employees.”
Auth0otherEU
“Okta, Inc. (Auth0) Hosted in the U.S, EU or Australia at Customer’s election. May be accessed globally by Snyk employees.”
CrowdStrikeotherUS
“CrowdStrike, Inc. Hosted in the US or EU (Frankfurt, Germany). May be accessed globally by Snyk employees.”
DatadogotherU.S.
“Datadog, Inc. Hosted in the U.S. May be accessed globally by Snyk employees.”
dbt LabsotherU.S.
“DBT Labs, Inc. Hosted in the U.S. May be accessed globally by Snyk employees.”
Snowflakeotherunstated
“DBT is a transformation tool used to configure data, which may include developer personal data, stored in Snowflake. DBT serves as a tool to provide meaningful insights on our products and services.”
SentryotherU.S.
“Functional Software, Inc. (Sentry) Hosted in the U.S. May be accessed globally by Snyk employees.”
Google CloudhyperscalerU.S.
“Google Cloud Platform Hosted in the U.S. May be accessed globally by Snyk employees.”
LookerotherEU
“Looker Hosted in the EU. May be accessed globally by Snyk employees.”
MongoDBotherU.S.
“MongoDB Ltd. Data can be hosted in the U.S., EU or Australia depending on Customer’s selection with respect to Customer’s hosting location.”
Slackotherunstated
“Nightfall is a data security and compliance platform that helps detect and protect sensitive data (including Personal Data). It is integrated with various internal tools used by Snyk, for example, Sla”
OpenAImodel providerU.S.
“OpenAI, LLC Hosted in the U.S. May be accessed globally by Snyk employees.”
SalesforceotherU.S.
“Salesforce.com, Inc. Hosted in the U.S. May be accessed globally by Snyk employees.”
TwiliootherU.S.
“Twilio Ireland Limited (Segment.io) Hosted in the U.S. May be accessed globally by Snyk employees.”
SegmentotherU.S.
“Twilio Ireland Limited (Segment.io) Hosted in the U.S. May be accessed globally by Snyk employees.”
ChargebeeotherUS
“Chargebee, Inc. EU, US Snyk uses Chargebee for subscription management, billing, and invoicing”
IntercomotherUS
“Intercom, Inc. US Snyk uses Intercom for customer support, marketing, and CRM”
HubSpototherUS
“Hubspot US Snyk uses Hubspot for marketing and CRM”
StripeotherUS
“Stripe, Inc. US Snyk uses Stripe for processing payments”
Cloudflareotherunstated
“Cloudflare, Inc. Cloudflare processes Snyk’s customer data from the region closest to where the user is located”
NetSuiteotherUSA
“Oracle Netsuite EU, USA Snyk uses Oracle Netsuite for Enterprise Resource Planning”

Sources read

DocumentURLReadContent hashLedger
privacy_policyhttps://snyk.io/policies/privacy/2026-09-0504c53870be2b0137…seq 117
subprocessorshttps://snyk.io/policies/subprocessors2026-09-05e22d98d22b4f1859…seq 182
dpahttps://snyk.io/dpa2026-09-055ec925358b0af1dd…seq 183
Ledger proof for this record.
seq 392 · key 2f898a895f05b7a0 · 2026-09-06T01:39:47.399Z
hash 50d77ac3b80234a96e7ee98b083f0df0915f7dbb989ed5daf28b0b164387be52
prev f764dba1887b1dec6af15f92f065b7bfd46f06dbe1b21a7e35e0512f5aed1885
payload df24e5168ceaea16d05e2253246b99f287be7ffe3e346beca07a3f81d69d4d60
signature eUUW7f9+BJZ5NFVM9cK7RjISRxRDtP5CbtYKM82Gkiu+d55l+vKedEmfgK3VW+f6JR7fVdeB6Y65iS55estJAw==
anchored 2026-09-06 at head seq 564 231a9dea0f93915bd7110e6786e00908325db3031635ace53c1023f850e0c49c
Fetch /v1/keys; for each ledger entry recompute sha256(prev_hash|kind|ref_id|payload_hash|created_at ISO) and verify the Ed25519 signature over that hash. Anchors are committed to git; compare the anchored head with the chain.