# Bitly We monitor the [subprocessor list Bitly publishes](https://bitly.com/pages/terms-of-service/), which we last checked on 2026-11-11, but have not read any entries from it. A reading from 2026-10-22 is being checked. [3 tracked vendors](https://thirdpartyindex.com/vendors/bitly#used-by) name Bitly as a subprocessor, including [Sprinklr](https://thirdpartyindex.com/vendors/sprinklr), [BrightLocal](https://thirdpartyindex.com/vendors/brightlocal) and [ParentSquare](https://thirdpartyindex.com/vendors/parentsquare). Bitly (bitly.com): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index. - Page: https://thirdpartyindex.com/vendors/bitly - Documents last verified: 2026-11-11 - Transparency rating: 33/100 (how much it publishes, not how secure it is): Subprocessor list 0/30 (published; no entries could be read); Processing locations 0/8 (no list); Purposes 0/7 (no list); Data processing addendum 0/12 (not found); Trust center 8/8; Privacy policy 6/6; security.txt 6/6; Security page 0/5 (not found); Status page 5/5; Vulnerability disclosure 0/5 (not found); Pages still reachable 8/8 - Supply chain: relies on 0 tracked vendors directly, 0 within two hops, 0 within three; 3 tracked vendors rely on it directly, 8 within two hops, 959 within three - Cite as: Bitly, Third Party Index, https://thirdpartyindex.com/vendors/bitly (data CC BY 4.0) ## Documents | Document | URL | Last verified | Last changed | |---|---|---|---| | Trust center | https://bitly.com/pages/trust | 2026-11-11 | 2026-11-11 | | Subprocessor list | https://bitly.com/pages/terms-of-service/ | 2026-11-11 | 2026-10-22 | | Privacy policy | https://bitly.com/pages/privacy | 2026-11-11 | 2026-11-11 | | Terms | https://bitly.com/pages/terms-of-service | 2026-11-11 | 2026-11-11 | | security.txt | https://bitly.com/.well-known/security.txt | 2026-11-11 | 2026-09-21 | | Status page | https://status.bitly.com/ | 2026-11-11 | 2026-11-11 | ## Subprocessors (0) No subprocessor list has been found or read for this vendor. ## Web Technologies Bitly's homepage made 141 requests to 23 domains, and 9 services controlled by another company. Loaded on 2026-11-03 by a browser that accepted nothing; other visits may load more or less. What a page loads is not a list of who receives customer data. 9 third parties by category: Advertising 3 (Google Cloud, Microsoft, OpenAI); Analytics 1 (ProfitWell); Marketing automation 1 (HubSpot); A/B Testing 1 (Optimizely); Cookie compliance 1 (OneTrust); CDN 1 (jsDelivr); Accessibility 1 (Userway). Each company that appears controlled by another organization is counted once, under the main category of the technologies detected from it on this homepage or, when none was, the category recorded from the company's own page (marked reviewed) or else the one it is usually detected as on other published homepages (marked as such); unclassified: none of these. ### Third parties (9) - Google Cloud: 30 requests to google.com, doubleclick.net, googlesyndication.com, googletagmanager.com, google-analytics.com; DoubleClick Floodlight, Google Analytics, Google Sign-in, Google Tag Manager - Microsoft: 14 requests to bing.com, clarity.ms, bing.net; Microsoft Advertising - OneTrust: 12 requests to cookielaw.org, onetrust.com; OneTrust - Userway: 9 requests to userway.org; UserWay - HubSpot: 7 requests to hubspot.com, hs-analytics.net, hs-banner.com, hs-scripts.com, hsforms.com; HubSpot - Optimizely: 5 requests to optimizely.com; Optimizely - OpenAI: 4 requests to openai.com; ChatGPT Ads Measurement Pixel - ProfitWell: 1 request to profitwell.com; Profitwell - jsDelivr: 1 request to jsdelivr.net; jsDelivr ### Affiliates (1) - Egoditor GmbH (QRCG by Bitly): 11 requests to qr-code-generator.com ### First party (1) - Bitly: 47 requests to qrcg.net, bitly.com; HSTS, HTTP/3, Microsoft Clarity, MySQL, Nginx, Open Graph, PHP, Priority Hints, Swiper, WPML 4.9.6, WordPress, WordPress Block Editor, Yoast SEO 28.2, Yoast SEO Premium 28.2 8 tracked companies loaded by the homepage are not in Bitly's subprocessor list. A website can use a service without it processing customer data. ## Subprocessor of (3) Tracked vendors whose own subprocessor lists name it, and what they say they use it for. - [BrightLocal](https://thirdpartyindex.com/vendors/brightlocal.md): URL shortening service - [ParentSquare](https://thirdpartyindex.com/vendors/parentsquare.md): Shortened links for marketing content. No personally identifiable information is processed or stored. - [Sprinklr](https://thirdpartyindex.com/vendors/sprinklr.md) ## Security record Breaches listed by Have I Been Pwned (CC BY 4.0, haveibeenpwned.com): - Bitly, 2014-05-08: 9313136 accounts; data: Email addresses, Passwords, Usernames ## Service status Incidents it reported on its own status page. - Last 90 days: 0 reported incidents (0 major or critical, 0 minor, 0 with no impact stated) - Status page last read: 2026-11-12 - No incidents reported in the last 12 months - 2026-04-25: Major Service Outage - Bitly.com Website Unavailable (critical) - 2026-03-16: Partial Outage Impacting Pricing and Packaging (no impact stated) - 2026-02-12: Intermittent Provider Issues (minor) - 2026-01-05: Sporadic Login Issues with Support Portal (major) ## Federal contracts U.S. government prime awards and reported subawards to its UEI (ZFVSAC2WZP54), from USAspending, by funding agency. Records show funding, not use. | Agency | Department | Prime awards | Obligated | Subawards | Subaward total | First | Last | |---|---|---|---|---|---|---|---| | Smithsonian Institution | Smithsonian Institution | 3 | $61.5K | — | — | 2024-08-01 | 2026-06-12 | | National Aeronautics and Space Administration | National Aeronautics and Space Administration | 1 | $23.9K | — | — | 2024-06-25 | 2025-04-18 | | Department of State | Department of State | 1 | $12.5K | — | — | 2024-12-04 | 2024-12-04 | 5 records ([evidence](https://thirdpartyindex.com/evidence/10515)). Details: https://thirdpartyindex.com/vendors/bitly/federal ## Security contact From its security.txt (https://bitly.com/.well-known/security.txt) ([evidence](https://thirdpartyindex.com/evidence/600)): - Contact: mailto:security@bitly.com - Encryption key: https://bitly.com/security_pgp.txt - No expiry date --- Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api