A Keenable SELECT report
Who gained ground in SaaS subprocessor lists
Most apps publish a listof who else gets your data.
It's called a subprocessor list: every outside company that handles customer data, from the cloud the app runs on to the service that sends its email. Under GDPR a company has to tell its customers who these vendors are, and give notice before it adds one.
Subprocessor List
No AI model providers.
AI Service Providers, and Figma Weave AI Sub-Processors
Same companies,two moments.
Every company in this report was founded before 2021, and its subprocessor page was captured twice: once between 2018 and 2021, and again in 2026. The panel stays the same, so every difference is a change in what these companies use. Two examples from the report:
Each dot is one company. Tap one.
These are the 151 companies, each one founded before 2021.
Before 2022, not one named OpenAI or Anthropic.
In 2026, 56 name OpenAI. That's 37%.
42 name Anthropic. That's 28%.
All 35 vendors.
Nine competitive categories, as in the report. Each row is the share of the 151 companies whose list names the vendor.
What the chartcan't say alone.
Who the 151 are.
All founded before 2021, most of them between 2010 and 2014. The earlier capture is the last copy of each list before 2022.
All 151,before and after.
What each company added to its list and what it removed, among the 35 vendors. Search a company or a vendor.
What it means.
AI labs are now part of the data supply chain.
Your vendors' vendors see your data.
When a team turns on the AI features in Figma, HubSpot or Box, its content can go to a model provider. The subprocessor list is the public place where that shows up, so it's worth reading before you switch those features on.
Old stacks change slowly.
These lists are a public record of adoption.
Most SaaS companies publish one and update it when they add a vendor. Read across many companies at two dates, they show which tools a market adopted, for any category.
How this report was made
One questionto Keenable SELECT.
Keenable SELECT is an agent that searches the web in SQL. You ask in plain language; it writes queries that search, read and extract across hundreds of pages, and returns rows you can chart.
Asked
Find other competitive categories of subprocessor providers and plot them; publish as a report and explain “the same companies” clearly: companies founded before 2021, with examples.
Method
Figma's page, every copy Time Machine has
- A vendor counts when its name appears anywhere on the company's list. Azure includes Azure OpenAI, and Gemini / Vertex overlaps Google Cloud.
- All companies: the 1,421 companies with a 2026 list on Third Party Index (thirdpartyindex.com), shown only as a reference.
- Copies from 2022 to 2025 are rare, so this compares two moments, not a timeline. Payments (Stripe) and comms APIs (Twilio) were left out because one vendor dominates each.
- Search-based company facts were checked by hand where a search matched a different company with the same name.
Built from publicly available web pages linked above. AI-based extraction may contain errors. Company names and logos belong to their owners and only identify the companies whose public lists were read; no affiliation or endorsement is implied. Logos are each company's own site icon or official GitHub avatar. To report an error: legal@keenable.ai.
Ask the weba question.
Keenable SELECT turns a plain-language question into SQL over the live web and comes back with rows and a report.
Data: subprocessor lists via Third Party Index, page versions via Keenable Time Machine, read October 2026.