Bugcrowd
Transparency
Breakdown
| Subprocessor list | 30 / 30 | |
| Processing locations | 8 / 8 | |
| Purposes | 7 / 7 | |
| Data processing addendum | 12 / 12 | |
| Trust center | 8 / 8 | |
| Privacy policy | 6 / 6 | |
| security.txt | 6 / 6 | |
| Security page | 5 / 5 | |
| Status page | not found | 0 / 5 |
| Vulnerability disclosure | 5 / 5 | |
| Pages still reachable | 8 / 8 | |
| Total | 95 / 100 |
Only documents we can retrieve count: a page behind a login or a broken link scores nothing.
Badge
For Bugcrowd's own site; it updates with the rating.
<a href="https://thirdpartyindex.com/vendors/bugcrowd"><img src="https://thirdpartyindex.com/badge/bugcrowd.svg" alt="Bugcrowd transparency rating on Third Party Index" height="20"></a>[](https://thirdpartyindex.com/vendors/bugcrowd)Compliance
- Certified
- FedRAMP
- Bugcrowd for Government (BCGOV) Authorized Moderate · 1 agency authorization · since Feb 19, 2026
Certifications as Bugcrowd's trust center lists them; reports are usually shared on request (evidence) FedRAMP status from the FedRAMP Marketplace (evidence)
Documents
| Document | Verified | Changed | Evidence |
|---|---|---|---|
| Trust center safebase | snapshot | ||
| Subprocessor list safebase | snapshot | ||
| Data processing addendum | snapshot | ||
| Privacy policy | snapshot | ||
| Terms | snapshot | ||
| Security page | snapshot | ||
| security.txt | snapshot | ||
| Security advisories | snapshot |
Subprocessors
| Name | Purpose | Location | Listed since |
|---|---|---|---|
| Adobe Marketo Engage | Email Address | California, USA | |
| Clari | Email Address | California, USA | |
| Datadog | Browser client IP, login activity, and accidental PII | New York, USA | |
| DocuSign | Tax Documents, NDA's, etc... | California, USA | |
| Gainsight | Email, activities on platform | California, USA | |
| email, document sharing, form response collection | California, USA | ||
| GoTo | Email Addresses for Webinars | Massachusetts, USA | |
| Heap | IP and browsing history on-site | California, USA | |
| HelloFax | Employee information over fax | California, USA | |
| Mailgun Technologies, Inc. | Email Address | Texas, USA | |
| Outreach | Email Address | Washington, USA | |
| Personyze | Email Address | Tel Aviv, Israel | |
| Salesforce | Various Contact Details | California, USA | |
| Segment | Email, IP, and browsing history on-site | California, USA | |
| Seismic | Email Address | California, USA | |
| Tableau | Researchers#prime | Washington, USA |
Listed as a subprocessor by (1)
Purposes as each company states them.
Digicert digicert.com Facilitate and manage bug bounty reports and rewards
Changes
None since tracking began.