# Amazon

[73 tracked vendors](https://thirdpartyindex.com/vendors/amazon#used-by) name Amazon as a subprocessor, including [Amazon Web Services](https://thirdpartyindex.com/vendors/amazon-web-services), [Fivetran](https://thirdpartyindex.com/vendors/fivetran) and [Mailchimp](https://thirdpartyindex.com/vendors/mailchimp). We have not found a subprocessor list published by Amazon. We monitor 6 of its documents, which we last checked on 2026-11-11.

Amazon (amazon.com): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/amazon
- Documents last verified: 2026-11-11
- Transparency rating: 17/100 (how much it publishes, not how secure it is): Subprocessor list 0/30 (not found); Processing locations 0/8 (no list); Purposes 0/7 (no list); Data processing addendum 0/12 (not found); Trust center 0/8 (unreachable); Privacy policy 6/6; security.txt 6/6; Security page 5/5; Status page 0/5 (not found); Vulnerability disclosure 0/5 (not found); Pages still reachable 0/8 (some unreachable this week)
- Supply chain: relies on 0 tracked vendors directly, 0 within two hops, 0 within three; 73 tracked vendors rely on it directly, 2276 within two hops, 2862 within three
- Cite as: Amazon, Third Party Index, https://thirdpartyindex.com/vendors/amazon (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Trust center (currently unreachable) | https://www.amazon.com/trust | 2026-11-03 | 2026-10-17 |
| Privacy policy | https://www.amazon.com/gp/help/customer/display.html?nodeId=GX7NJQ4ZB8MHFRNJ | 2026-11-11 | 2026-10-20 |
| Privacy policy | https://www.amazon.com/gp/help/customer/display.html?nodeId=GX7NJQ4ZB8MHFRNJ&ref\_=footer\_privacy | 2026-11-11 | 2026-11-11 |
| Terms | https://www.amazon.com/gp/help/customer/display.html?ref\_=hp\_left\_v4\_sib&nodeId=GA75EXWGGZPEFSQS | 2026-11-11 | 2026-11-03 |
| Security page | https://www.amazon.com/gp/help/customer/display.html/?nodeId=GRFTMVHP4HXMESSP | 2026-11-11 | 2026-11-11 |
| security.txt | https://www.amazon.com/.well-known/security.txt | 2026-11-11 | 2026-09-29 |

## Subprocessors (0)

No subprocessor list has been found or read for this vendor.

## Web Technologies

Amazon's homepage made 224 requests to 45 domains, 37 services controlled by another company, and 2 domains not identified. Loaded on 2026-11-09 by a browser that accepted nothing; other visits may load more or less. What a page loads is not a list of who receives customer data.

37 third parties by category: Advertising 23 (reviewed: Equativ, FreeWheel, OpenX, BidSwitch GmbH, GumGum, Inc., Improve Digital, Index Exchange Inc., Kargo, LoopMe Limited, Nativo Inc., Samba TV, Inc., Semasio GmbH, TripleLift, WPP Media, Yieldmo, digitalAudience B.V.; usually detected as Advertising: Google Cloud, Magnite, Inc., Xandr, ID5 Technology Ltd, Neustar, Inc. (TransUnion), PubMatic, Taboola); Analytics 3 (reviewed: Comscore, Nielsen, iSpot.tv, Inc.); Customer data platform 2 (reviewed: MEDIARITHMICS SAS, Zeotap); Marketing automation 1 (usually detected as Marketing automation: Adobe); Miscellaneous 1 (reviewed: Yahoo); Surveys 1 (reviewed: Cint); Unclassified 6 (Connatix Native Exchange Inc., Dailymotion, Global Media Group Services Limited, Ogury Ltd, Rich Audience, Ströer SSP GmbH). Each company that appears controlled by another organization is counted once, under the main category of the technologies detected from it on this homepage or, when none was, the category recorded from the company's own page (marked reviewed) or else the one it is usually detected as on other published homepages (marked as such); unclassified: none of these.

### Third parties (37)

- Equativ: 2 requests to smartadserver.com
- FreeWheel: 2 requests to fwmrm.net
- Google Cloud: 2 requests to doubleclick.net
- Magnite, Inc.: 2 requests to rubiconproject.com, tremorhub.com
- OpenX: 2 requests to openx.net
- Xandr: 2 requests to adnxs.com
- Adobe: 1 request to demdex.net
- BidSwitch GmbH: 1 request to bidswitch.net
- Cint: 1 request to samplicio.us
- Comscore: 1 request to scorecardresearch.com
- Connatix Native Exchange Inc.: 1 request to connatix.com
- Dailymotion: 1 request to dmxleo.com
- Global Media Group Services Limited: 1 request to thisisdax.com
- GumGum, Inc.: 1 request to gumgum.com
- ID5 Technology Ltd: 1 request to id5-sync.com
- Improve Digital: 1 request to 360yield.com
- Index Exchange Inc.: 1 request to casalemedia.com
- Kargo: 1 request to kargo.com
- LoopMe Limited: 1 request to loopme.me
- MEDIARITHMICS SAS: 1 request to mediarithmics.com
- Nativo Inc.: 1 request to postrelease.com
- Neustar, Inc. (TransUnion): 1 request to agkn.com
- Nielsen: 1 request to exelator.com
- Ogury Ltd: 1 request to presage.io
- PubMatic: 1 request to pubmatic.com
- Rich Audience: 1 request to richaudience.com
- Samba TV, Inc.: 1 request to samba.tv
- Semasio GmbH: 1 request to semasio.net
- Ströer SSP GmbH: 1 request to adscale.de
- Taboola: 1 request to taboola.com
- TripleLift: 1 request to 3lift.com
- WPP Media: 1 request to mookie1.com
- Yahoo: 1 request to yahoo.com
- Yieldmo: 1 request to yieldmo.com
- Zeotap: 1 request to zeotap.com
- digitalAudience B.V.: 1 request to digitalaudience.io
- iSpot.tv, Inc.: 1 request to ispot.tv

### Affiliates (1)

- IMDb.com, Inc.: 1 request to imdb.com

### Unknown (2)

Domains not identified yet: fout.jp, ninthdecimal.com

### First party (1)

- Amazon: 178 requests to media-amazon.com, amazon.com, amazon-adsystem.com, ssl-images-amazon.com; Akamai, Akamai Bot Manager, Amazon Advertising, HTTP/3, Open Graph, VideoJS, core-js 3.17.3, jQuery, lit-element 4.2.2, lit-html 3.3.3

13 tracked companies loaded by the homepage are not in Amazon's subprocessor list. A website can use a service without it processing customer data.

## Subprocessor of (73)

Tracked vendors whose own subprocessor lists name it, and what they say they use it for.

- [Adobe](https://thirdpartyindex.com/vendors/adobe.md): Amazon Connect assists with phone and chat support by providing a set of digital, cloud-based tools to routing customer issues. This can include call recordings…
- [Amazon Web Services](https://thirdpartyindex.com/vendors/amazon-web-services.md)
- [Anyscale](https://thirdpartyindex.com/vendors/anyscale.md): Cloud Service Provider
- [Arctic Wolf](https://thirdpartyindex.com/vendors/arctic-wolf.md): Artificial Intelligence; Product Research & Development; Data Center & Hosting
- [Asset Panda](https://thirdpartyindex.com/vendors/asset-panda.md): Cloud infrastructure, storage, services
- [AuthZed](https://thirdpartyindex.com/vendors/authzed.md): Hosting and storage services
- [AWeber](https://thirdpartyindex.com/vendors/aweber.md): AWS Privacy; Cloud Infrastructure Hosting
- [Barracuda Networks](https://thirdpartyindex.com/vendors/barracuda-networks.md)
- [Bizzabo](https://thirdpartyindex.com/vendors/bizzabo.md): Cloud Hosting (IaaS, PaaS)
- [Black Kite](https://thirdpartyindex.com/vendors/black-kite.md): GOV INSTANCE ONLY - Email service; Sending emails regarding triggered workflows
- [Browzwear](https://thirdpartyindex.com/vendors/browzwear.md): Cloud services
- [Canopy](https://thirdpartyindex.com/vendors/canopy.md): Hosting
- [CData](https://thirdpartyindex.com/vendors/cdata.md): AWS Hosting; Product & Infrastructure
- [Census](https://thirdpartyindex.com/vendors/census.md): AWS hosting environment for Supplier services
- [CloudCall](https://thirdpartyindex.com/vendors/cloudcall.md): Cloud hosting services
- [Cloudmersive](https://thirdpartyindex.com/vendors/cloudmersive.md): Cloud Infrastructure Services
- [CloudRadial](https://thirdpartyindex.com/vendors/cloudradial.md): https://aws.amazon.com/trust-center/
- [CoachAccountable](https://thirdpartyindex.com/vendors/coachaccountable.md): Backup file storage
- [Convertful](https://thirdpartyindex.com/vendors/convertful.md)
- [Critical Impact](https://thirdpartyindex.com/vendors/critical-impact.md): Cloud Infrastructure Hosting
- [Deepgram](https://thirdpartyindex.com/vendors/deepgram.md): A cloud computing platform offering a variety of services such as hosting, storage, computing, and databases, widely used by businesses and individuals for scal…
- [Digtective](https://thirdpartyindex.com/vendors/digtective.md): Hosting
- [Discourse](https://thirdpartyindex.com/vendors/discourse.md): for enterprise forums hosted on AWS:; for forums hosted in any of our data centers:; provides cloud servers and services for hosting and backup; distributes con…
- [DoiT](https://thirdpartyindex.com/vendors/doit.md): Amazon Web Services provides on-demand cloud computing platforms and APIs to individuals, companies, and governments, on a metered pay-as-you-go basis.
- [DoubleVerify](https://thirdpartyindex.com/vendors/doubleverify.md)
- [Envoy](https://thirdpartyindex.com/vendors/envoy.md): Hosting and database storage
- [eSpatial](https://thirdpartyindex.com/vendors/espatial.md): https://aws.amazon.com/
- [FastSpring](https://thirdpartyindex.com/vendors/fastspring.md): Payment Processing
- [Fivetran](https://thirdpartyindex.com/vendors/fivetran.md): AWS hosting environment for Supplier services
- [Handshake](https://thirdpartyindex.com/vendors/joinhandshake-com.md): Cloud Service Provider
- [Hilos](https://thirdpartyindex.com/vendors/hilos.md): Provides data hosting and cloud computing
- [iProov](https://thirdpartyindex.com/vendors/iproov.md): Provision of customer cloud hosting and storage services
- [Iron Mountain](https://thirdpartyindex.com/vendors/iron-mountain.md): IT & Operational Support
- [JFrog](https://thirdpartyindex.com/vendors/jfrog.md)
- [Juliahub](https://thirdpartyindex.com/vendors/juliahub.md)
- [Kapiche](https://thirdpartyindex.com/vendors/kapiche.md): Cloud hosting
- [Kentik](https://thirdpartyindex.com/vendors/kentik.md): - AI features, when enabled; - AI-based product features; - Data center services; - Data ingestion from customer AWS accounts
- [Leena AI](https://thirdpartyindex.com/vendors/leena-ai.md): We have obtained infrastructure as a service (IaaS) from AWS.  Customers can choose to host in any one of the mentioned locations.
- [LINK Mobility Group ASA](https://thirdpartyindex.com/vendors/link-mobility-group-asa.md)
- [Liveblocks](https://thirdpartyindex.com/vendors/liveblocks.md)
- [Loyalty Juggernaut](https://thirdpartyindex.com/vendors/loyalty-juggernaut.md)
- [Lyric](https://thirdpartyindex.com/vendors/lyric.md): Cloud Hosting Provider
- [MacStadium](https://thirdpartyindex.com/vendors/macstadium.md): Cloud Hosting of the MacStadium customer portal, corporate data storage, and Identity Access Management Services
- [Mailchimp](https://thirdpartyindex.com/vendors/mailchimp.md): Facilitates delivery and temporary storage.
- [Matillion](https://thirdpartyindex.com/vendors/matillion.md)
- [Miro](https://thirdpartyindex.com/vendors/miro.md): Infrastructure
- [Narvar](https://thirdpartyindex.com/vendors/narvar.md)
- [New Black](https://thirdpartyindex.com/vendors/new-black.md): Finance
- [Next Millennium Media](https://thirdpartyindex.com/vendors/next-millennium-media.md)
- [ngrok](https://thirdpartyindex.com/vendors/ngrok.md): Infrastructure Provider providing hosting services and storage.
- [Nintex](https://thirdpartyindex.com/vendors/nintex.md): Cloud Hosting
- [OptiSigns](https://thirdpartyindex.com/vendors/optisigns.md): Cloud hosting
- [Pin](https://thirdpartyindex.com/vendors/pin.md): Hosts all of Pin’s data and web infrastructure
- [Plumsail](https://thirdpartyindex.com/vendors/plumsail.md): Cloud Service Provider. Applicable services: Documents, Forms, Actions, HelpDesk, Org Chart
- [Presidio](https://thirdpartyindex.com/vendors/presidio.md): Cloud Hosting and Services
- [Prodly](https://thirdpartyindex.com/vendors/prodly.md)
- [Referral Factory](https://thirdpartyindex.com/vendors/referral-factory.md): Hosting Providers
- [Relay Commerce](https://thirdpartyindex.com/vendors/relay-commerce.md)
- [Rivery](https://thirdpartyindex.com/vendors/rivery.md): AWS Supplier Data Destination
- [SavvyMoney](https://thirdpartyindex.com/vendors/savvymoney.md)
- [Sessionize](https://thirdpartyindex.com/vendors/sessionize.md): We're using a wide set of Amazon Web Services to make our service running and store your data.
- [Skedulo](https://thirdpartyindex.com/vendors/skedulo.md)
- [Socure](https://thirdpartyindex.com/vendors/socure.md): Socure utilizes AWS for Hosting and IaaS.
- [Stacksync](https://thirdpartyindex.com/vendors/stacksync.md): AWS hosting environment for Supplier services
- [Tuvis](https://thirdpartyindex.com/vendors/tuvis.md): Data Storage Cloud infrastructure hosting Service Distribution
- [Varonis](https://thirdpartyindex.com/vendors/varonis.md): AWS - Cloud service provider SES - Communication application; Personal Data processed by Varonis as a result of customer’s use of the Subscription Services.
- [vFairs](https://thirdpartyindex.com/vendors/vfairs.md): Infrastrcuture Hosting
- [Viktor](https://thirdpartyindex.com/vendors/viktor.md): E-commerce marketplace integration (if enabled by customer)
- [Vocal Video](https://thirdpartyindex.com/vendors/vocal-video.md): Hosting Providers
- [WeTravel](https://thirdpartyindex.com/vendors/wetravel.md): Cloud computing infrastructure, website hosting, and data hosting.
- [Whereby](https://thirdpartyindex.com/vendors/whereby.md)
- [Wolfia](https://thirdpartyindex.com/vendors/wolfia.md): Primary cloud-hosting and infrastructure platform and AI services
- [xAmplify](https://thirdpartyindex.com/vendors/xamplify.md): AWS hosting environment for Supplier services

## Federal contracts

U.S. government prime awards and reported subawards to its UEI (TMKBFBRHFKH3), from USAspending, by funding agency. Records show funding, not use.

| Agency | Department | Prime awards | Obligated | Subawards | Subaward total | First | Last |
|---|---|---|---|---|---|---|---|
| Department of State | Department of State | 17 | $193.5K | 3 | $670.4K | 2020-09-16 | 2026-09-24 |
| U.S. International Development Finance Corporation | U.S. International Development Finance Corporation | 2 | $500.0K | — | — | 2024-03-26 | 2026-07-20 |
| Substance Abuse and Mental Health Services Administration | Department of Health and Human Services | — | — | 1 | $237.8K | 2023-12-15 | 2023-12-15 |
| Health Resources and Services Administration | Department of Health and Human Services | — | — | 1 | $161.7K | 2023-10-23 | 2023-10-23 |
| Environmental Protection Agency | Environmental Protection Agency | 5 | $58.5K | — | — | 2020-10-20 | 2026-07-10 |
| Department of Veterans Affairs | Department of Veterans Affairs | 3 | $43.6K | — | — | 2020-03-18 | 2021-05-06 |
| U.S. Agency for Global Media | U.S. Agency for Global Media | 2 | $40.6K | — | — | 2026-07-07 | 2026-09-03 |
| Smithsonian Institution | Smithsonian Institution | 3 | $27.0K | — | — | 2020-01-28 | 2021-07-21 |
| Drug Enforcement Administration | Department of Justice | 3 | $25.5K | — | — | 2024-07-30 | 2026-09-24 |
| Department of Education | Department of Education | 1 | $25.2K | — | — | 2026-03-05 | 2026-03-05 |
| Department of the Air Force | Department of Defense | 1 | $24.6K | — | — | 2025-10-01 | 2025-10-01 |
| Offices, Boards and Divisions | Department of Justice | 2 | $18.4K | — | — | 2023-06-08 | 2025-12-15 |
| Federal Prison System / Bureau of Prisons | Department of Justice | 1 | $12.8K | — | — | 2023-05-03 | 2023-05-03 |
| National Institutes of Health | Department of Health and Human Services | 1 | $10.4K | — | — | 2025-09-30 | 2025-09-30 |
| Office of Inspector General | General Services Administration | 4 | $1.8K | — | — | 2023-01-30 | 2025-09-14 |

And 2 more agencies.
53 records ([evidence](https://thirdpartyindex.com/evidence/202715)). Details: https://thirdpartyindex.com/vendors/amazon/federal

## Security contact

From its security.txt (https://www.amazon.com/.well-known/security.txt) ([evidence](https://thirdpartyindex.com/evidence/18754)):

- Contact: https://hackerone.com/amazonvrp/reports/new
- Disclosure policy: https://hackerone.com/amazonvrp
- Security jobs: https://www.amazon.jobs/en/teams/infosec
- No expiry date

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api