# Arvato Systems

Arvato Systems declares [42 subprocessors](https://thirdpartyindex.com/vendors/arvato-systems#subprocessors), plus 5 of its own affiliates, in [its subprocessor list](https://www.arvato-systems.com/privacy-policy/subprocessors), which we last checked on 2026-10-26 ([evidence](https://thirdpartyindex.com/evidence/86154)). They include [Microsoft](https://thirdpartyindex.com/vendors/microsoft), [Atlassian](https://thirdpartyindex.com/vendors/atlassian) and [Bird](https://thirdpartyindex.com/vendors/bird). No published changes since we first read it on 2026-10-12.

Arvato Systems (arvato-systems.com): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/arvato-systems
- Documents last verified: 2026-10-26
- Transparency rating: 79/100 (how much it publishes, not how secure it is): Subprocessor list 30/30; Processing locations 8/8; Purposes 4/7 (partial); Data processing addendum 12/12; Trust center 0/8 (not found); Privacy policy 6/6; security.txt 6/6; Security page 5/5; Status page 0/5 (not found); Vulnerability disclosure 0/5 (not found); Pages still reachable 8/8
- Supply chain: relies on 13 tracked vendors directly, 64 within two hops, 288 within three; 0 tracked vendors rely on it directly, 0 within two hops, 0 within three
- Cite as: Arvato Systems, Third Party Index, https://thirdpartyindex.com/vendors/arvato-systems (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Subprocessor list | https://www.arvato-systems.com/privacy-policy/subprocessors | 2026-10-26 | 2026-10-12 |
| Data processing addendum | https://www.arvato-systems.com/resource/blob/262496/d6892367e6f0011c86de3be6d61a7ab6/general-provisions-on-data-processing-data.pdf | 2026-10-26 | 2026-10-14 |
| Privacy policy | https://www.arvato-systems.com/privacy-policy/privacy-policy-for-the-website | 2026-10-26 | 2026-10-14 |
| Security page | https://www.arvato-systems.com/resource/blob/278806/fb8069d251ecbd3c45f591e29cdc3c93/technical-and-organizational-measures-of-the-arvato-systems-group-data.pdf | 2026-10-26 | 2026-10-14 |
| security.txt | https://www.arvato-systems.com/.well-known/security.txt | 2026-10-26 | 2026-10-12 |

## Subprocessors (42)

As its own list states them.

| Subprocessor | Purpose | Location | Listed since |
|---|---|---|---|
| ADICOM Service GmbH | AS400 hosting and operation | Germany | 2026-10-15 |
| AFB gemeinnützige GmbH | Disposal in compliance with data protection regulations | Germany | 2026-10-12 |
| AnyDesk Software GmbH | Remote Access to End-Devices | Germany | 2026-10-12 |
| [Atlassian Pty Ltd.](https://thirdpartyindex.com/vendors/atlassian.md) | SaaS IT Service Management | Australia | 2026-10-12 |
| [Bechtle GmbH](https://thirdpartyindex.com/vendors/bechtle.md) | 2nd level support; 3rd level support | Germany | 2026-10-15 |
| [Bird B.V.](https://thirdpartyindex.com/vendors/bird.md) | Sending text messages | Netherlands | 2026-10-15 |
| Ceyoniq Technology GmbH | 3rd level manufacturer support | Germany | 2026-10-15 |
| Cisco International Ltd. | 3rd level manufacturer support | United Kingdom | 2026-10-15 |
| Cloud SG UK Ltd. | 3rd level manufacturer support | United Kingdom | 2026-10-15 |
| [CODE WHITE GmbH](https://thirdpartyindex.com/vendors/code-white.md) | Security Services | Germany | 2026-10-12 |
| Computacenter AG & Co. oHG | Creation RSA token; Local network LAN services; Network operation | Germany | 2026-10-15 |
| Cursor Expert Solutions GmbH | DB basic adminstration Informix-DB | Germany | 2026-10-15 |
| D-Trust GmbH | Management User-Certificates | Germany | 2026-10-12 |
| DCSO Deutsche Cyber-Sicherheitsorganisation GmbH | Managed Network Threat Analytics | Germany | 2026-10-12 |
| documentus Deutschland GmbH | — | Germany | 2026-10-12 |
| [Emposo GmbH](https://thirdpartyindex.com/vendors/emposo.md) | — | Deutschland | 2026-10-15 |
| [Fox-IT B.V.](https://thirdpartyindex.com/vendors/fox-it.md) | — | Netherlands | 2026-10-15 |
| Genesys Cloud Services B.V. | SaaS CallCenter Software Service Desk | Netherlands | 2026-10-12 |
| glueckkanja AG | SaaS RealmJoin | Germany | 2026-10-15 |
| HEIKO BICK Aktenvernichtung GmbH & Co. KG | — | Germany | 2026-10-12 |
| Hewlett-Packard GmbH | — | Germany | 2026-10-15 |
| Horizon Telecom B.V. | IaaS DDoS-Schutz (Backup) | Netherlands | 2026-10-15 |
| [Link11 GmbH](https://thirdpartyindex.com/vendors/link11.md) | IaaS DDoS protection | Germany | 2026-10-15 |
| Micro Focus Germany GmbH | 3rd level manufacturer support operation management systems | Germany | 2026-10-12 |
| [Microsoft Ireland Operations Ltd.](https://thirdpartyindex.com/vendors/microsoft.md) | 3rd level manufacturer support; IaaS B-Portal; SaaS Microsoft 365 and Azure Cloud Services; SaaS Power BI | Ireland | 2026-10-15 |
| Mimecast Germany GmbH | DMARC Analyzer | Germany | 2026-10-15 |
| Musarubra Ireland Limited | — | Ireland | 2026-10-15 |
| NTT Germany AG & Co. KG | — | Germany | 2026-10-15 |
| One Identity Software International DAC | — | Ireland | 2026-10-15 |
| ORACLE Deutschland B.V. & Co. KG | IaaS VAREDY | Germany | 2026-10-12 |
| PreZero Service Westfalen GmbH & Co. KG | — | Germany | 2026-10-12 |
| Quest Software International Limited | — | Ireland | 2026-10-15 |
| Rapid 7 LLC | — | USA | 2026-10-15 |
| [Raynet GmbH](https://thirdpartyindex.com/vendors/raynet.md) | — | Germany | 2026-10-15 |
| RICOH DEUTSCHLAND GmbH | SaaS Printing Services | Germany | 2026-10-15 |
| SIA Arvato Systems Latvia | — | Latvia | 2026-10-15 |
| Softwareone Deutschland GmbH | 3rd level support | Germany | 2026-10-15 |
| Telekom Deutschland GmbH | Order management and telecommunication expense management for mobile phone contracts | Germany | 2026-10-15 |
| [TELONIC GmbH](https://thirdpartyindex.com/vendors/telonic-2.md) | — | Germany | 2026-10-15 |
| [USU GmbH](https://thirdpartyindex.com/vendors/usu.md) | — | Germany | 2026-10-15 |
| [Veeam Software GmbH](https://thirdpartyindex.com/vendors/veeam-software.md) | — | Germany | 2026-10-15 |
| [Zscaler Inc.](https://thirdpartyindex.com/vendors/zscaler.md) | PaaS Webaccess (Proxy) | USA | 2026-10-12 |

Read from ([evidence](https://thirdpartyindex.com/evidence/86154)). CSV: https://thirdpartyindex.com/vendors/arvato-systems/subprocessors.csv

### Its own affiliates (5)

- Arvato Systems GmbH (Germany)
- Arvato Systems Digital GmbH (Germany)
- Arvato Systems IT S.R.L. (Romania)
- Arvato Systems Malaysia Sdn Bhd (Malaysia)
- Arvato Systems Switzerland AG (Switzerland)

## Web Technologies

Arvato Systems's homepage made 129 requests to 13 domains, 5 services controlled by another company, and 1 domain not identified. Loaded on 2026-10-16 by a browser that accepted nothing; other visits may load more or less. What a page loads is not a list of who receives customer data.

5 third parties by category: Analytics 3 (Google Cloud, LinkedIn, Meta); Advertising 1 (Xandr); Cookie compliance 1 (Usercentrics). Each company that appears controlled by another organization is counted once, under the main category of the technologies detected from it on this homepage or, when none was, the category recorded from the company's own page (marked reviewed) or else the one it is usually detected as on other published homepages (marked as such); unclassified: none of these.

### Third parties (5)

- Usercentrics: 18 requests to usercentrics.eu; Usercentrics
- Google Cloud: 8 requests to googletagmanager.com, googlesyndication.com, youtube.com, google-analytics.com; Google Analytics, Google Tag Manager, YouTube
- LinkedIn: 4 requests to linkedin.com, licdn.com; Linkedin Insight Tag
- Meta: 3 requests to facebook.net, facebook.com; Facebook Pixel 2.9.419
- Xandr: 2 requests to adnxs.com; AppNexus

### Unknown (1)

Domains not identified yet: dmndfrcstng.com

### First party (1)

- Arvato Systems: 93 requests to arvato-systems.com, arvato-systems.de; Azure, Azure Front Door, Babel, CoreMedia, CoreMedia Content Cloud, FancyBox 3.5.6, HSTS, Linkedin Ads, Open Graph, core-js 2.6.12, jQuery 3.7.1

5 tracked companies loaded by the homepage are not in Arvato Systems's subprocessor list. A website can use a service without it processing customer data.

## Subprocessor of (0)

No tracked vendor lists it.

## Incidents reported by Arvato Systems's subprocessors

Incidents reported in the last 30 days on their own status pages by 2 vendors Arvato Systems lists as subprocessors. A subprocessor list names a company, not the service an incident touched.

- 2026-10-23: [Bird](https://thirdpartyindex.com/vendors/bird#status), which Arvato Systems lists as a subprocessor, reported Whatsapp sending is degraded (minor)
- 2026-10-05: [Bird](https://thirdpartyindex.com/vendors/bird#status), which Arvato Systems lists as a subprocessor, reported Bird.com Platform: Increased 5xx errors and delivery deliays (minor)
- 2026-10-04: [Link11](https://thirdpartyindex.com/vendors/link11#status), which Arvato Systems lists as a subprocessor, reported Intermittent phone lines issues (no impact stated)
- 2026-10-04: [Bird](https://thirdpartyindex.com/vendors/bird#status), which Arvato Systems lists as a subprocessor, reported Increased delivery latency for SMS service (minor)

The subprocessor list as we read it on any date: https://thirdpartyindex.com/labs/time-machine/arvato-systems

## Security contact

From its security.txt (https://www.arvato-systems.com/.well-known/security.txt) ([evidence](https://thirdpartyindex.com/evidence/86146)):

- Contact: mailto:bug-reports-arvato-systems@bertelsmann.de
- Security jobs: https://jobsearch.createyourowncareer.com/Arvato_Systems/
- Languages: en, de
- Expired 2026-07-26

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api