How many subprocessors does Semgrep use?

Semgrep lists 1 subprocessor on its published list, including Amazon Web Services.

Does Semgrep have a SOC 2 Type II report?

Yes. Semgrep's trust page lists a SOC 2 Type II report: “Semgrep latest SOC2 Type II Report (Dec 1, 2023 - Nov 30, 2024)”

Which security certifications does Semgrep list?

Semgrep's trust page lists SOC 2 Type II.

When was Semgrep's subprocessor list last checked?

ClauseTrail last checked Semgrep's subprocessor list on September 30, 2026. Lists are re-checked daily.

How do I find out when Semgrep adds or removes a subprocessor?

ClauseTrail monitors Semgrep's subprocessor list, DPA, privacy policy and terms and emails you the exact change — who was added or removed and what the page said before and after. The first vendors are free.

Semgrep Subprocessors List (September 2026): Changes and History

Semgrep names 1 subprocessor on its published list. Read from the vendor's own page and re-checked daily.

Last checked September 30, 2026 Official source ↗

Semgrep subprocessors (September 2026)

#	Subprocessor	Purpose	Location
1	Amazon Web Services	Model provider for Semgrep Assistant / cloud infrastructure	—

Get an email when Semgrep changes its subprocessors

ClauseTrail re-checks this list every day and tells you exactly who was added or removed — including when a vendor starts sending data to an AI provider. The first vendors are free.

Track Semgrep free

Certifications at Semgrep

What Semgrep's trust page lists, with the text each one comes from. SOC 2 Type I or Type II: what's the difference?

SOC 2 Type II: Active

“Semgrep latest SOC2 Type II Report (Dec 1, 2023 - Nov 30, 2024)”
Trust page, trust.semgrep.dev ↗

Documents we track for Semgrep

Privacy policy: checked September 30, 2026 semgrep.dev ↗
Subprocessor list: checked September 30, 2026 trust.semgrep.dev ↗
Terms of service: checked September 30, 2026 semgrep.dev ↗
Trust page: checked September 30, 2026 trust.semgrep.dev ↗

Change history

Tracking since September 30, 2026. No change has been published since; additions, removals and document changes will appear here as they're published.

Semgrep subprocessors FAQ

How many subprocessors does Semgrep use?: Semgrep lists 1 subprocessor on its published list, including Amazon Web Services.
Does Semgrep have a SOC 2 Type II report?: Yes. Semgrep's trust page lists a SOC 2 Type II report: “Semgrep latest SOC2 Type II Report (Dec 1, 2023 - Nov 30, 2024)”
Which security certifications does Semgrep list?: Semgrep's trust page lists SOC 2 Type II.
When was Semgrep's subprocessor list last checked?: ClauseTrail last checked Semgrep's subprocessor list on September 30, 2026. Lists are re-checked daily.
How do I find out when Semgrep adds or removes a subprocessor?: ClauseTrail monitors Semgrep's subprocessor list, DPA, privacy policy and terms and emails you the exact change — who was added or removed and what the page said before and after. The first vendors are free.