Openwake · evidence pack

Snyk

https://snyk.io · record 662 · read 2026-10-16 · rules/v1 · generated 2026-10-23 04:18 UTC

Facts

Trains on customer data
unclear
No supporting text found in the documents read.
privacy policy · https://snyk.io/policies/privacy/ · confidence 0.20
Opt-out mechanism
To opt out of sales or targeted advertising, update your settings in our cookie manager, use a universal opt-out signal, or email us at privacy@snyk.io.
“To opt out of sales or targeted advertising, update your settings in our cookie manager, use a universal opt-out signal, or email us at privacy@snyk.io.”
privacy policy · https://snyk.io/policies/privacy/ · confidence 0.50
AI features
none stated
No supporting text found in the documents read.
privacy policy · https://snyk.io/policies/privacy/ · confidence 0.20
Model providers named
OpenAI
“OpenAI, LLC Hosted in the U.S. May be accessed globally by Snyk employees.”
subprocessors · https://snyk.io/policies/subprocessors · confidence 0.60
Retention
not stated
No supporting text found in the documents read.
privacy policy · https://snyk.io/policies/privacy/ · confidence 0.20
Hosting regions
EU
“Hosted in the US or EU (Frankfurt, Germany).”
subprocessors · https://snyk.io/policies/subprocessors · confidence 0.50
Subprocessor notice
30 days
“3.2 Snyk will provide Customer with thirty (30) day notice (the “Notice Period”) prior to adding or replacing any Sub-processor by posting details at https://snyk.io/policies/subprocessors/.”
dpa · https://snyk.io/dpa · confidence 0.55

Subprocessors (24)

NameCategoryLocationQuoted from
AmplitudeotherU.S.
“Amplitude, Inc. Hosted in the U.S. May be accessed globally by Snyk employees.”
Akamaiotherunstated
“Akamai Technologies Limited and its affiliates The nature of the Akamai solution, for optimizing traffic management, means that Akamai processes Snyk’s customer data from the region closest to where t”
Amazon Web ServiceshyperscalerU.S.
“Amazon Web Services, Inc. and Amazon Web Services EMEA SARL Data can be hosted in the U.S., EU or Australia at Customer’s election. May be accessed globally by Snyk employees.”
OktaotherEU
“Okta, Inc. (Auth0) Hosted in the U.S, EU or Australia at Customer’s election. May be accessed globally by Snyk employees.”
Auth0otherEU
“Okta, Inc. (Auth0) Hosted in the U.S, EU or Australia at Customer’s election. May be accessed globally by Snyk employees.”
CrowdStrikeotherUS
“CrowdStrike, Inc. Hosted in the US or EU (Frankfurt, Germany). May be accessed globally by Snyk employees.”
DatadogotherU.S.
“Datadog, Inc. Hosted in the U.S. May be accessed globally by Snyk employees.”
dbt LabsotherU.S.
“DBT Labs, Inc. Hosted in the U.S. May be accessed globally by Snyk employees.”
Snowflakeotherunstated
“DBT is a transformation tool used to configure data, which may include developer personal data, stored in Snowflake. DBT serves as a tool to provide meaningful insights on our products and services.”
SentryotherU.S.
“Functional Software, Inc. (Sentry) Hosted in the U.S. May be accessed globally by Snyk employees.”
Google CloudhyperscalerU.S.
“Google Cloud Platform Hosted in the U.S. May be accessed globally by Snyk employees.”
LookerotherEU
“Looker Hosted in the EU. May be accessed globally by Snyk employees.”
MongoDBotherU.S.
“MongoDB Ltd. Data can be hosted in the U.S., EU or Australia depending on Customer’s selection with respect to Customer’s hosting location.”
Slackotherunstated
“Nightfall is a data security and compliance platform that helps detect and protect sensitive data (including Personal Data). It is integrated with various internal tools used by Snyk, for example, Sla”
OpenAImodel providerU.S.
“OpenAI, LLC Hosted in the U.S. May be accessed globally by Snyk employees.”
SalesforceotherU.S.
“Salesforce.com, Inc. Hosted in the U.S. May be accessed globally by Snyk employees.”
TwiliootherU.S.
“Twilio Ireland Limited (Segment.io) Hosted in the U.S. May be accessed globally by Snyk employees.”
SegmentotherU.S.
“Twilio Ireland Limited (Segment.io) Hosted in the U.S. May be accessed globally by Snyk employees.”
ChargebeeotherUS
“Chargebee, Inc. EU, US Snyk uses Chargebee for subscription management, billing, and invoicing”
IntercomotherUS
“Intercom, Inc. US Snyk uses Intercom for customer support, marketing, and CRM”
HubSpototherUS
“Hubspot US Snyk uses Hubspot for marketing and CRM”
StripeotherUS
“Stripe, Inc. US Snyk uses Stripe for processing payments”
Cloudflareotherunstated
“Cloudflare, Inc. Cloudflare processes Snyk’s customer data from the region closest to where the user is located”
NetSuiteotherUSA
“Oracle Netsuite EU, USA Snyk uses Oracle Netsuite for Enterprise Resource Planning”

Sources read

DocumentURLReadContent hashLedger
privacy_policyhttps://snyk.io/policies/privacy/2026-10-16dce0bec429404624…seq 56431
subprocessorshttps://snyk.io/policies/subprocessors2026-10-161e9a5d8358f1ea2d…seq 56432
dpahttps://snyk.io/dpa2026-10-169c901152607fbe34…seq 56433
Ledger proof for this record.
seq 56456 · key 2f898a895f05b7a0 · 2026-10-16T05:27:56.678Z
hash bf7f42652054d519f5044d196d8d60eabb7241055185c850bdad21c89bd7c98c
prev 96fe34533f0851846a4dc4d826a5be8c9dc2421461257f1eef8a71835fb509f1
payload 13d69b7f01f690299ff5d6aa34ce3a81cf731c608e28b94163e4e6f807a3aa08
signature U7QKrZuUrkdhsNWn2J7Yequk6GCcugJ+5paPa00LnwmZulSXW72yssPWMwlxNQ9x3LdeJZEQ1OqAfJ+nSMSCCQ==
anchored 2026-10-16 at head seq 56483 37d279f935d555826dc9c57bd08b20790c0b9ad0508ab5e479e72474759be114
Fetch /v1/keys; for each ledger entry recompute sha256(prev_hash|kind|ref_id|payload_hash|created_at ISO) and verify the Ed25519 signature over that hash. Anchors are committed to git; compare the anchored head with the chain.