# Akamai

Akamai declares [14 subprocessors](https://thirdpartyindex.com/vendors/akamai#subprocessors), plus 19 of its own affiliates, in [its subprocessor list](https://www.akamai.com/fr/legal/compliance/privacy-trust-center/list-of-sub-processors), which we last checked on 2026-11-11 ([evidence](https://thirdpartyindex.com/evidence/254916)). They include [Amazon Web Services](https://thirdpartyindex.com/vendors/amazon-web-services), [Google Cloud](https://thirdpartyindex.com/vendors/google-cloud) and [Microsoft](https://thirdpartyindex.com/vendors/microsoft). No published changes since we first read it on 2026-10-03. [68 tracked vendors](https://thirdpartyindex.com/vendors/akamai#used-by) name Akamai as a subprocessor, including [Microsoft](https://thirdpartyindex.com/vendors/microsoft), [Salesforce](https://thirdpartyindex.com/vendors/salesforce) and [Mailchimp](https://thirdpartyindex.com/vendors/mailchimp).

Akamai (akamai.com): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/akamai
- Documents last verified: 2026-11-11
- Category: cdn-security
- Transparency rating: 69/100 (how much it publishes, not how secure it is): Subprocessor list 30/30; Processing locations 0/8 (partial); Purposes 7/7; Data processing addendum 0/12 (not found); Trust center 8/8; Privacy policy 6/6; security.txt 0/6 (not found); Security page 5/5; Status page 5/5; Vulnerability disclosure 0/5 (not found); Pages still reachable 8/8
- Supply chain: relies on 9 tracked vendors directly, 97 within two hops, 365 within three; 68 tracked vendors rely on it directly, 1649 within two hops, 2771 within three
- Cite as: Akamai, Third Party Index, https://thirdpartyindex.com/vendors/akamai (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Trust center | https://trust.akamai.com/ | 2026-11-11 | 2026-11-10 |
| Subprocessor list | https://www.akamai.com/fr/legal/compliance/privacy-trust-center/list-of-sub-processors | 2026-11-11 | 2026-11-11 |
| Privacy policy | https://www.akamai.com/legal/privacy-statement | 2026-11-11 | 2026-11-03 |
| Terms | https://www.akamai.com/legal/terms-and-conditions | 2026-11-11 | 2026-10-26 |
| Security page | https://www.akamai.com/security | 2026-11-11 | 2026-10-26 |
| Status page | https://www.akamaistatus.com/ | 2026-11-11 | 2026-11-11 |

## Subprocessors (14)

As its own list states them.

| Subprocessor | Purpose | Location | Listed since |
|---|---|---|---|
| [Aiven Oy](https://thirdpartyindex.com/vendors/aiven.md) | Aiven provides Database as a Service solution hosted on Akamai Cloud Computing, except for control plane which is hosted by Aiven, and support services (Managed Databases). | — | 2026-10-03 |
| Akam Mexico Technologies S De Rl De Cv | Pre-Sales, Professional Services and Support Services | — | 2026-10-03 |
| [Amazon Web Services, Inc.](https://thirdpartyindex.com/vendors/amazon-web-services.md) | Amazon Web Services (AWS) provides cloud computing, data aggregation, storage and security analytic services that are used for the following Akamai services:Secure Internet Access (SIA), Enterprise Application Access, Bot Manager Premier, mPulse, Cloud Test, API Security (Hybrid and SaaS version for certain API Security, if chosen by the customer), and Akamai's Customer Control Center.; Amazon Web Services (AWS) provides cloud computing, data aggregation, storage and security analytics.; Amazon's sub-processors used when providing hosting services to us in certain circumstances are published here. | — | 2026-10-03 |
| [Atlassian Pty Ltd.](https://thirdpartyindex.com/vendors/atlassian.md) | Atlassian provides storage services that are part of Akamai's support services for Noname API Security services.Atlassian sub-processors used for the operation of its platform are published here. | — | 2026-10-03 |
| Bitmovin, Inc. | Bitmovin provides live and on demand video workflows | — | 2026-10-03 |
| [Cloudinary, Inc.](https://thirdpartyindex.com/vendors/cloudinary.md) | Cloudinary provides video and image management services. | — | 2026-10-03 |
| [Google LLC](https://thirdpartyindex.com/vendors/google-cloud.md) | Google Cloud Platform uses the sub-processors listed here.; Google provides storage services for API Security services (Hybrid and SaaS version for certain API Security, if chosen by the customer).; Google provides storage services for log files created by Guardicore services in the course of service performance where the Guardicore SaaS/cloud module is chosen by the customer.; Google provides storage services. | — | 2026-10-03 |
| HarperDB, Inc. | HarperDB provides data base services. | — | 2026-10-03 |
| [Hydrolix, Inc.](https://thirdpartyindex.com/vendors/hydrolix.md) | Hydrolix provides log data visualization and reporting services. | — | 2026-10-03 |
| Macrometa Corporation | Macrometa provides data network services to build enterprise data, APPs, APIs and web services. | — | 2026-10-03 |
| [Microsoft Corporation](https://thirdpartyindex.com/vendors/microsoft.md) | Microsoft Azure provides cloud computing, data aggregation, storage and security analytics. Microsoft's sub-processors used for Azure services are published here.; Microsoft Azure provides storage services for Akamai's NetStorage services, Akamai's Control Center and edge server log-files as well as security analytics for Akamai's SIA, Page Integrity Manager, Enterprise Threat Protector and API Security services (Hybrid and SaaS version for certain API Security, if chosen by the customer). Microsoft's sub-processors used for Azure services are published here. | — | 2026-10-03 |
| Queue IT ApS | Queue IT provides a waiting room functionality for web properties as part of Akamai's web performance services. | — | 2026-10-03 |
| [Salesforce.com, Inc.](https://thirdpartyindex.com/vendors/salesforce.md) | Salesforce provides support ticket management and storage services that are part of Akamai's support services.; Salesforce's sub-processors used for the operation of its platform are published here. | — | 2026-10-03 |
| [Workato, Inc.](https://thirdpartyindex.com/vendors/workato.md) | Workato provides storage services for API data customized integration for each customer’s existing applications (e.g., ticketing, security, network) in connection with Noname API Security services. Workato uses the subprocessors listed here. | — | 2026-10-03 |

Read from ([evidence](https://thirdpartyindex.com/evidence/37289)). CSV: https://thirdpartyindex.com/vendors/akamai/subprocessors.csv

### Its own affiliates (19)

- Akamai Technologies s.r.o (Taiwan)
- Akamai Technologies Argentina S.R.L.
- Akamai Technologies Belgium SPRL
- Akamai Technologies Canada Inc
- Akamai Technologies Costa Rica SRL
- Akamai Technologies Denmark ApS
- Akamai Technologies GK
- Akamai Technologies Hong Kong Limited
- Akamai Technologies International AG
- Akamai Technologies Ireland Limited
- Akamai Technologies Israel Ltd.
- Akamai Technologies Malaysia Sdn. Bhd.
- Akamai Technologies Netherlands B.V.
- Akamai Technologies Poland Sp. z.o.o.
- Akamai Technologies Singapore PTE. LTD
- Akamai Technologies Solutions India Private Limited
- Akamai Technologies Spain S.L.U.
- Akamai Technologies YH
- Akamai Tecnologias e Serviços do Brasil Ltda.

## Compliance

As its trust center lists them.

- FedRAMP Marketplace: Moderate · 29 agency authorizations · since Aug 23, 2013
- FedRAMP Marketplace: High

## Security program

What AKAMAI TECHNOLOGIES INC's Form 10-K for fiscal 2025, filed Feb 20, 2026 (Item 1C) says, in its words (https://www.sec.gov/Archives/edgar/data/1086222/000108622226000022/0001086222-26-000022-index.htm).

- Led by: Chief Security Officer, reporting to the Audit Committee to provide information on
- Leader's experience: 15+ years
- Board oversight: Audit Committee
- Practices named: Incident response plan, Threat intelligence
- Engages outside assessors or consultants
- Reviews its suppliers' security
- Says no cybersecurity incident has materially affected it

## Web Technologies

Akamai's homepage made 89 requests to 5 domains, and 2 services controlled by another company. Loaded on 2026-11-05 by a browser that accepted nothing; other visits may load more or less. What a page loads is not a list of who receives customer data.

2 third parties by category: Marketing automation 1 (usually detected as Marketing automation: Adobe); Cookie compliance 1 (usually detected as Cookie compliance: OneTrust). Each company that appears controlled by another organization is counted once, under the main category of the technologies detected from it on this homepage or, when none was, the category recorded from the company's own page (marked reviewed) or else the one it is usually detected as on other published homepages (marked as such); unclassified: none of these.

### Third parties (2)

- Adobe: 10 requests to adobedtm.com, rum.hlx.page
- OneTrust: 1 request to onetrust.io

### First party (1)

- Akamai: 78 requests to akamai.com, go-mpulse.net; Adobe Analytics, Adobe Client Data Layer 2.0.2, Adobe Experience Manager, Adobe Experience Platform Identity Service, Adobe Experience Platform Launch, Akamai, Akamai Bot Manager, Akamai mPulse, Boomerang, HSTS, HTTP/3, Java, OneTrust, Open Graph, PWA, Priority Hints, Prism, React

2 tracked companies loaded by the homepage are not in Akamai's subprocessor list. A website can use a service without it processing customer data.

## Subprocessor of (68)

Tracked vendors whose own subprocessor lists name it, and what they say they use it for.

- [Acquia](https://thirdpartyindex.com/vendors/acquia.md): Application security and performance; Provides VM configured as a default ESP for Mautic when SparkPost sender domains have not been configured.
- [Adobe](https://thirdpartyindex.com/vendors/adobe.md): Akamai provides Adobe with content delivery network services.
- [Airship](https://thirdpartyindex.com/vendors/airship.md): CDN; Cloud Security
- [Amplience](https://thirdpartyindex.com/vendors/amplience.md): Content Delivery
- [Aniview](https://thirdpartyindex.com/vendors/aniview.md)
- [Apica](https://thirdpartyindex.com/vendors/apica.md): Integrations for data metrics
- [Apsona](https://thirdpartyindex.com/vendors/apsona.md): Hosting Providers
- [Automattic](https://thirdpartyindex.com/vendors/automattic.md): Hosts MailPoet accounts
- [Beebole](https://thirdpartyindex.com/vendors/beebole.md): Hosting of the V1 service, including Customer Data
- [Brightcove](https://thirdpartyindex.com/vendors/brightcove.md): Content delivery
- [Capsule8](https://thirdpartyindex.com/vendors/capsule8.md): Content Delivery Network and edge proxy for Sophos software downloads, UI assets, and APIs
- [Cloudinary](https://thirdpartyindex.com/vendors/cloudinary.md): CDN
- [CometChat](https://thirdpartyindex.com/vendors/cometchat.md)
- [ConfigCat](https://thirdpartyindex.com/vendors/configcat.md): Cloud infrastructure services
- [Cookiebot](https://thirdpartyindex.com/vendors/cookiebot.md): CDN provider Geolocation to show the right cookie banner IP address stripping at edge layer for Visitor Attribution Add-On requests.
- [Deskpro](https://thirdpartyindex.com/vendors/deskpro.md): Legacy cloud and website servers Server Location: US Website: https://www.linode.com/
- [Digicert](https://thirdpartyindex.com/vendors/digicert.md): Support website delivery, browser operations, and CDN services
- [DigitalOcean](https://thirdpartyindex.com/vendors/digitalocean.md): Infrastructure
- [DoubleVerify](https://thirdpartyindex.com/vendors/doubleverify.md)
- [Ducksify](https://thirdpartyindex.com/vendors/ducksify.md): Content Delivery Network (CDN) Infrastructure as a; Service (IaaS)
- [Education Perfect](https://thirdpartyindex.com/vendors/education-perfect.md): Content distribution network, edge compute, web application security
- [Equativ](https://thirdpartyindex.com/vendors/equativ.md): Content Delivery Network
- [Escape](https://thirdpartyindex.com/vendors/escape.md): Scanner egress locations
- [Genesys](https://thirdpartyindex.com/vendors/genesys.md)
- [Goldcast](https://thirdpartyindex.com/vendors/goldcast.md): Content delivery network
- [Helios](https://thirdpartyindex.com/vendors/helios.md): Engineering; SnykContent Delivery Network provider - Snyk uses the CDN for managing user traffic on its products and services. Developer personal data may be in…
- [HorizonIQ](https://thirdpartyindex.com/vendors/horizoniq.md): Akamai provides global content delivery network, DDOS and performance monitoring services.
- [HUMAN Security](https://thirdpartyindex.com/vendors/human-security.md): Content Delivery Network
- [Improvely](https://thirdpartyindex.com/vendors/improvely.md)
- [InEvent](https://thirdpartyindex.com/vendors/inevent.md): Video streaming CDN
- [Intralinks](https://thirdpartyindex.com/vendors/intralinks.md)
- [Kaltura](https://thirdpartyindex.com/vendors/kaltura.md): Content delivery network
- [Khoros](https://thirdpartyindex.com/vendors/khoros.md): Content delivery network
- [Kinaxis](https://thirdpartyindex.com/vendors/kinaxis.md): Content delivery network, which allows users to connect to the SaaS Services using the same URL, while establishing an optimal path for performance in their reg…
- [Lark](https://thirdpartyindex.com/vendors/lark.md): CDN
- [LinkedIn](https://thirdpartyindex.com/vendors/linkedin.md): Content Delivery Network (CDN)
- [Lucid Software](https://thirdpartyindex.com/vendors/lucid-software.md): Edge network services, including Web Application and API Protection (WAAP) & Content Delivery Network (CDN) services
- [Mailchimp](https://thirdpartyindex.com/vendors/mailchimp.md): Improves application speed and security.
- [Maileroo](https://thirdpartyindex.com/vendors/maileroo.md): Server hosting, data storage, and infrastructure services for the platform
- [Microsoft](https://thirdpartyindex.com/vendors/microsoft.md): Operating Content Delivery Network (CDN) infrastructure to efficiently deliver content; Network
- [Minter.io](https://thirdpartyindex.com/vendors/minter-io.md): Cloud Hosting
- [mParticle](https://thirdpartyindex.com/vendors/mparticle.md)
- [Nowtilus](https://thirdpartyindex.com/vendors/nowtilus.md): Content Delivery Network
- [Persado](https://thirdpartyindex.com/vendors/persado.md): Cloud security, CDN (Content Delivery Network) and WAF (Web Application Firewall) services.
- [Qencode](https://thirdpartyindex.com/vendors/qencode.md): Content delivery network services to improve the delivery of content globally.
- [Qualtrics](https://thirdpartyindex.com/vendors/qualtrics.md): Content delivery network and web application firewall for our web services.
- [Rackspace](https://thirdpartyindex.com/vendors/rackspace.md): Products & Services – Security
- [Rokt](https://thirdpartyindex.com/vendors/rokt.md)
- [Rootstuff](https://thirdpartyindex.com/vendors/rootstuff.md): A standby copy of the database in Chicago, Illinois, kept in sync for failover. Monitoring probe servers in Ashburn, Seattle, Chicago, London, Frankfurt, Singap…
- [Salesforce](https://thirdpartyindex.com/vendors/salesforce.md)
- [Scaleflex](https://thirdpartyindex.com/vendors/scaleflex.md): Cloud and CDN provider; Scaleflex works with Akamai Technologies SARL (Cloud Compute / Linode) as a preferred Infrastructure-as-a-Service (IaaS) and Content Del…
- [Sitecore](https://thirdpartyindex.com/vendors/sitecore.md): Edge storage and delivery of customer derived optimised content
- [SMTP2GO](https://thirdpartyindex.com/vendors/smtp2go.md): Cloud Hosting
- [Snyk](https://thirdpartyindex.com/vendors/snyk.md): Engineering; SnykContent Delivery Network provider - Snyk uses the CDN for managing user traffic on its products and services. Developer personal data may be in…
- [SOPHOS](https://thirdpartyindex.com/vendors/sophos.md): Content Delivery Network and edge proxy for Sophos software downloads, UI assets, and APIs
- [Stream.io](https://thirdpartyindex.com/vendors/stream-io.md): Server Provider - applicable to Video API
- [Submittable](https://thirdpartyindex.com/vendors/submittable.md): CDN, WAF, DDoS, and visitor prioritization
- [Tableau](https://thirdpartyindex.com/vendors/tableau.md)
- [Tailscale](https://thirdpartyindex.com/vendors/tailscale.md): Cloud hosting provider for DERP servers (2)
- [Text](https://thirdpartyindex.com/vendors/text.md): Network and Security Services; Secure content delivery, performance optimization, web application firewall (WAF) and DDoS protection
- [Transpond](https://thirdpartyindex.com/vendors/transpond.md): Hosting services
- [UltraDNS](https://thirdpartyindex.com/vendors/ultradns.md): Support website delivery, browser operations, and CDN services
- [Unity](https://thirdpartyindex.com/vendors/unity.md)
- [Vimeo](https://thirdpartyindex.com/vendors/vimeo.md): Content delivery network
- [Vivox](https://thirdpartyindex.com/vendors/vivox.md)
- [WalkMe](https://thirdpartyindex.com/vendors/walkme.md): Content Delivery, WAF services
- [WatchGuard Technologies](https://thirdpartyindex.com/vendors/watchguard-technologies.md): CDN services.
- [Zuplo](https://thirdpartyindex.com/vendors/zuplo.md): Hosting, DNS, Networking

## Service status

Incidents it reported on its own status page.

- Last 90 days: 29 reported incidents (0 major or critical, 18 minor, 11 with no impact stated)
- Typical time to resolve: 22 h 15 min
- Status page last read: 2026-11-12
- Under way: Edge Delivery issues between Indonesia and Singapore (minor), since 2026-10-25 13:44 UTC
- 2026-11-03: Property Manager Property Activation Errors (no impact stated)
- 2026-10-30: Customer Security Advisory: CVE-2026-98432 (no impact stated)
- 2026-10-27: Performance Degradation for Customers in Mumbai and Chennai (no impact stated)
- 2026-10-27: Enterprise Application Access (EAA) Connector Issues (minor)
- 2026-10-25: Edge Delivery issues between Indonesia and Singapore (minor)
- 2026-10-23: Customer Security Advisory: Brotli Remote Code Execution Vulnerabilities \[CVE-2026-111497\] (no impact stated)
- 2026-10-22: Customer Security Advisory: Critical F5/NGINX Out-of-Band Vulnerabilities (no impact stated)
- 2026-10-21: Edge Delivery Secure CDN platform at Risk of Capacity Issues (no impact stated)

## Incidents reported by Akamai's subprocessors

Incidents reported in the last 30 days on their own status pages by 3 vendors Akamai lists as subprocessors. A subprocessor list names a company, not the service an incident touched.

- 2026-11-05: [Workato](https://thirdpartyindex.com/vendors/workato#status), which Akamai lists as a subprocessor, reported API Platform Performance Degradation (minor)
- 2026-11-05: [Aiven](https://thirdpartyindex.com/vendors/aiven#status), which Akamai lists as a subprocessor, reported API requests failing/timing out (no impact stated)
- 2026-10-30: [Workato](https://thirdpartyindex.com/vendors/workato#status), which Akamai lists as a subprocessor, reported Webhooks Performance Degradation (minor)
- 2026-10-29: [Workato](https://thirdpartyindex.com/vendors/workato#status), which Akamai lists as a subprocessor, reported Intermittent errors in knowledge base search (minor)
- 2026-10-27: [Workato](https://thirdpartyindex.com/vendors/workato#status), which Akamai lists as a subprocessor, reported Issue with Genie Conversation History and AIRO Chats (minor)
- 2026-10-24: [Cloudinary](https://thirdpartyindex.com/vendors/cloudinary#status), which Akamai lists as a subprocessor, reported Notice regarding recently-reported Ruby regular expression vulnerabilities (CVE-2026-89078, CVE-2026-93577, CVE-2026-97229, CVE-2026-110264) (no impact stated)
- 2026-10-21: [Cloudinary](https://thirdpartyindex.com/vendors/cloudinary#status), which Akamai lists as a subprocessor, reported Notice regarding recently-reported PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619 (no impact stated)
- 2026-10-20: [Aiven](https://thirdpartyindex.com/vendors/aiven#status), which Akamai lists as a subprocessor, reported Google Cloud VPN incident affecting services (minor)
- 2026-10-20: [Workato](https://thirdpartyindex.com/vendors/workato#status), which Akamai lists as a subprocessor, reported Genie and AIRO Not Responding in Workato UI (no impact stated)
- 2026-10-20: [Workato](https://thirdpartyindex.com/vendors/workato#status), which Akamai lists as a subprocessor, reported Log Processing Service Degradation (minor)
- 2026-10-18: [Aiven](https://thirdpartyindex.com/vendors/aiven#status), which Akamai lists as a subprocessor, reported Unable to spin up nodes in vultr-ewr (no impact stated)
- 2026-10-16: [Cloudinary](https://thirdpartyindex.com/vendors/cloudinary#status), which Akamai lists as a subprocessor, reported Issues accessing the Cloudinary web UI (major)
- 2026-10-16: [Workato](https://thirdpartyindex.com/vendors/workato#status), which Akamai lists as a subprocessor, reported Errors in AI by Workato Analyze text action (minor)
- 2026-10-16: [Aiven](https://thirdpartyindex.com/vendors/aiven#status), which Akamai lists as a subprocessor, reported Issues starting new service nodes (no impact stated)
- 2026-10-14: [Workato](https://thirdpartyindex.com/vendors/workato#status), which Akamai lists as a subprocessor, reported Issues with AI by Workato (minor)

## Recent changes

Changes to its documents and subprocessor list since monitoring began.

- 2026-10-24: Changed registry listing: fedramp:F1206061353 ([evidence](https://thirdpartyindex.com/evidence/151994))
- 2026-10-22: Changed registry listing: fedramp:F1206061353 ([evidence](https://thirdpartyindex.com/evidence/141337))
- 2026-10-07: Changed registry listing: fedramp:F1206061353 ([evidence](https://thirdpartyindex.com/evidence/61906))
- 2026-09-30: Changed registry listing: fedramp:F1206061353 ([evidence](https://thirdpartyindex.com/evidence/25653))

Feed: https://thirdpartyindex.com/vendors/akamai/changes.atom

The subprocessor list as we read it on any date: https://thirdpartyindex.com/labs/time-machine/akamai

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api