Trust Center
ngrok makes it easy to secure your tunnel traffic by providing configurable modules for authentication, encryption, and network policies. By combining components, you can meet your security requirements in a matter of minutes without rearchitecting your application. From concept to connection, ngrok provides a secure, scalable tunnel to share your system with the world or just the single person you need. ngrok has implemented best-in-class security practices to keep customer data safe.
Documents
Subprocessor Update for ngrok's AI Gateway
As ngrok continues to evolve and improve our platform, we have decided to engage with OpenAI and Anthropic as sub-processors in connection with ngrok AI Gateway.
ngrok sends requests to OpenAI and/or Anthropic only at the customer's direction, when the customer (1) configures AI Gateway for OpenAI and/or Anthropic and (2) uses ngrok-managed AI API keys. AI Gateway is currently in Early Access, and the ngrok-managed key feature has not yet been released. We are providing this notice early in the interest of transparency.
Because these vendors may process your organization's data (as defined under the General Data Protection Regulation) in connection with the services & products that ngrok provides, this communication is a notification that OpenAI and Anthropic are going to be added as a new sub-processors. Data will be stored in the United States by both OpenAI and Anthropic. Please let us know if you have any questions.
Website: https://ngrok.ai/
Salesforce Salesloft Drift Compromise - ngrok Security Update
ngrok does use Salesforce as a Customer Relationship Management platform (described in our subprocessors list at https://trust.ngrok.com), but does not use the Salesloft Drift service. ngrok remains unaffected by the 2025 Salesloft Drift security incident. We will continue to monitor developments around this incident for any updates.
Subprocessor Update
As ngrok continues to evolve and improve our platform to meet and exceed your expectations, we have decided to engage HockeyStack as a vendor and sub-processor.
Because this vendor may process your organization's data (as defined under the General Data Protection Regulation) in connection with the services & products that ngrok provides, this communication is a notification that HockeyStack is going to be added as a new sub-processor. ngrok will be using HockeyStack for business and customer analytics. Data will be stored in Germany. Please let us know if you have any questions.