# BuzzFeed We have not found a subprocessor list published by BuzzFeed. We monitor 6 of its documents, which we last checked on 2026-11-11. BuzzFeed (buzzfeed.com): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index. - Page: https://thirdpartyindex.com/vendors/buzzfeed - Documents last verified: 2026-11-11 - Transparency rating: 45/100 (how much it publishes, not how secure it is): Subprocessor list 0/30 (not found); Processing locations 0/8 (no list); Purposes 0/7 (no list); Data processing addendum 12/12; Trust center 8/8; Privacy policy 6/6; security.txt 6/6; Security page 5/5; Status page 0/5 (not found); Vulnerability disclosure 0/5 (not found); Pages still reachable 8/8 - Supply chain: relies on 0 tracked vendors directly, 0 within two hops, 0 within three; 0 tracked vendors rely on it directly, 0 within two hops, 0 within three - Cite as: BuzzFeed, Third Party Index, https://thirdpartyindex.com/vendors/buzzfeed (data CC BY 4.0) ## Documents | Document | URL | Last verified | Last changed | |---|---|---|---| | Trust center | https://www.buzzfeed.com/trust | 2026-11-11 | 2026-11-10 | | Data processing addendum | https://www.buzzfeed.com/dpa | 2026-11-11 | 2026-11-10 | | Privacy policy | https://www.buzzfeed.com/about/privacy | 2026-11-11 | 2026-09-23 | | Terms | https://www.buzzfeed.com/about/useragreement | 2026-11-11 | 2026-09-23 | | Security page | https://www.buzzfeed.com/security | 2026-11-11 | 2026-11-10 | | security.txt | https://www.buzzfeed.com/.well-known/security.txt | 2026-11-11 | 2026-09-23 | ## Subprocessors (0) No subprocessor list has been found or read for this vendor. ## Security program What BuzzFeed, Inc.'s Form 10-K for fiscal 2025, filed Mar 16, 2026 (Item 1C) says, in its words (https://www.sec.gov/Archives/edgar/data/1828972/000182897226000030/0001828972-26-000030-index.htm). - Board oversight: Audit Committee - Frameworks named: NIST - Practices named: Vulnerability management - Engages outside assessors or consultants - Reviews its suppliers' security - Says no cybersecurity incident has materially affected it ## Web Technologies BuzzFeed's homepage made 1,576 requests to 169 domains, 124 services controlled by another company, and 22 domains not identified. Loaded on 2026-11-09 by a browser that accepted nothing; other visits may load more or less. What a page loads is not a list of who receives customer data. 124 third parties by category: Advertising 52 (Magnite, Inc., PubMatic, Equativ, Google Cloud, The Trade Desk, Inc., 33Across, Amazon, Epsilon, OpenX, Rise (Risecodes), TripleLift, ID5 Technology Ltd, Monet Engine Inc (AdaptMX), Seedtag Advertising, S.L., The Ozone Project Limited, Teads, Ad Lightning; reviewed: Nexxen, OneTag Limited, FreeWheel, BidSwitch GmbH, GumGum, Inc., Criteo, LoopMe Limited, Improve Digital, Media.net Advertising FZ-LLC, Yieldmo, DeepIntent, Index Exchange Inc., Tapad, Inc., MediaMath, Viant Technology, Kargo, Nativo Inc., Blis Global Limited, ADITION technologies (Virtual Minds GmbH), Exponential Interactive, Inc. (VDX.tv), Samsung Ads, AcuityAds Inc. (illumin), Bidtellect Inc, Eyeota, OnAudience Ltd, Semasio GmbH; usually detected as Advertising: Xandr, StackAdapt, Sovrn, Adform, Basis Technologies (Basis; formerly Centro), Simpli.fi, Neustar, Inc. (TransUnion), AdRoll, Roku, Inc.); Analytics 7 (Meta, Cloudflare; reviewed: Comscore; usually detected as Analytics: Quantcast, Baidu, Demandbase, LinkedIn); Cookie compliance 3 (OneTrust, LiveRamp; usually detected as Cookie compliance: InMobi); Marketing automation 2 (reviewed: Zeta Global; usually detected as Marketing automation: Adobe); Customer data platform 1 (Lotame); Email 1 (usually detected as Email: LiveIntent); Miscellaneous 1 (reviewed: Yahoo); Retargeting 1 (usually detected as Retargeting: RTB House); Widgets 1 (usually detected as Widgets: Outbrain); Unclassified 55 (PulsePoint, Krush Media, LLC, Opera Software Ireland Limited (Opera), Smaato, Sonobi, ADman Interactive S.L.U., DoubleVerify, Media Force, SmartyAds, Aniview, Automatad Inc. (Mile), Adkernel, Disqus, Vidazoo Ltd, Whaleco Inc. (Temu), Rich Audience, Smile Wanted, Admixer EU GmbH, Adyoulike, Axis Corp LTD, Magnite, Ogury Ltd, ProgrammaticX, Sharethrough, VRTCAL Markets Inc, AdTheorent, Eskimi, MGID, Minute Media (Sportority UK Ltd), Appier, Appnerve, BidTheatre AB, Cadent, Connatix Native Exchange Inc., Copper6, Delta Projects AB, IQzone Inc, IQzone Inc., Insticator Inc., Intercept Interactive Inc. dba Undertone, LoudEcho, Playdigo Inc, SparkV International Inc, Wirtualna Polska Media S.A, Adot, ArcSpan Technologies, Inc., Baidu (Hong Kong) Limited, Between Exchange, IQM Inc., Pacvue, PinkLion LTD, Reset Digital, TrustedStack, ViSTARS Agency, LLC, iPROM). Each company that appears controlled by another organization is counted once, under the main category of the technologies detected from it on this homepage or, when none was, the category recorded from the company's own page (marked reviewed) or else the one it is usually detected as on other published homepages (marked as such); unclassified: none of these. ### Third parties (124) - Magnite, Inc.: 117 requests to rubiconproject.com; Rubicon Project - PubMatic: 104 requests to pubmatic.com; PubMatic - Equativ: 55 requests to smartadserver.com, sascdn.com; Smart Ad Server - Google Cloud: 50 requests to doubleclick.net, googlesyndication.com, google.com, adtrafficquality.google, gstatic.com; Google AdSense, Google Publisher Tag, Google Sign-in - The Trade Desk, Inc.: 40 requests to adsrvr.org; theTradeDesk - Nexxen: 37 requests to 1rx.io, turn.com, unrulymedia.com - 33Across: 33 requests to 33across.com, tynt.com; 33Across - Amazon: 29 requests to amazon-adsystem.com; Amazon Advertising - Epsilon: 29 requests to dotomi.com, fastclick.net; Dotomi - OneTag Limited: 29 requests to onetag-sys.com - OpenX: 29 requests to openx.net, openxcdn.net; OpenX - Rise (Risecodes): 28 requests to yellowblue.io; Rise (Risecodes) - FreeWheel: 27 requests to bidr.io, fwmrm.net, stickyadstv.com - TripleLift: 27 requests to 3lift.com; TripleLift - BidSwitch GmbH: 26 requests to bidswitch.net - Xandr: 26 requests to adnxs.com - ID5 Technology Ltd: 25 requests to id5-sync.com, eu-1-id5-sync.com; ID5 1.0.100 - StackAdapt: 25 requests to stackadapt.com - PulsePoint: 23 requests to contextweb.com - Sovrn: 21 requests to lijit.com - GumGum, Inc.: 20 requests to gumgum.com - Monet Engine Inc (AdaptMX): 20 requests to a-mx.com, a-mo.net, amxrtb.com, amx1.net; AdaptMX - Krush Media, LLC: 19 requests to krushmedia.com - Opera Software Ireland Limited (Opera): 19 requests to opera.com - Seedtag Advertising, S.L.: 19 requests to seedtag.com; Seedtag - Criteo: 18 requests to criteo.com, criteo.net - LoopMe Limited: 18 requests to loopme.me - Smaato: 18 requests to smaato.net - Yahoo: 17 requests to yahoo.com - Sonobi: 16 requests to sonobi.com - ADman Interactive S.L.U.: 15 requests to admanmedia.com - Adform: 15 requests to adform.net - DoubleVerify: 15 requests to doubleverify.com, dv.tech - OneTrust: 15 requests to cookielaw.org, onetrust.com; OneTrust - LiveRamp: 14 requests to rlcdn.com, privacymanager.io; LiveRamp PCM - RTB House: 14 requests to creativecdn.com - Improve Digital: 13 requests to 360yield.com - Media.net Advertising FZ-LLC: 13 requests to media.net - Yieldmo: 13 requests to yieldmo.com - Media Force: 11 requests to mfadsrvr.com - Adobe: 10 requests to everesttech.net, demdex.net - Basis Technologies (Basis; formerly Centro): 10 requests to sitescout.com - The Ozone Project Limited: 10 requests to the-ozone-project.com; Ozone Project - SmartyAds: 9 requests to ck-ie.com - Teads: 9 requests to teads.tv; Teads - Aniview: 8 requests to aniview.com - Automatad Inc. (Mile): 8 requests to atmtd.com - DeepIntent: 8 requests to deepintent.com - Index Exchange Inc.: 8 requests to casalemedia.com - Tapad, Inc.: 8 requests to tapad.com - Zeta Global: 8 requests to rfihub.com - Adkernel: 7 requests to adkernel.com - InMobi: 7 requests to inmobi.com - LiveIntent: 7 requests to liadm.com - Outbrain: 7 requests to outbrain.com - Disqus: 6 requests to disqus.com - MediaMath: 6 requests to mathtag.com - Viant Technology: 6 requests to ipredictive.com - Vidazoo Ltd: 6 requests to cootlogix.com - Whaleco Inc. (Temu): 6 requests to temu.com - Kargo: 5 requests to kargo.com - Nativo Inc.: 5 requests to postrelease.com - Quantcast: 5 requests to quantserve.com - Rich Audience: 5 requests to richaudience.com - Smile Wanted: 5 requests to smilewanted.com - Admixer EU GmbH: 4 requests to admixer.net - Adyoulike: 4 requests to omnitagjs.com - Axis Corp LTD: 4 requests to axis-marketplace.com - Blis Global Limited: 4 requests to blismedia.com - Lotame: 4 requests to crwdcntrl.net; Lotame - Magnite: 4 requests to ccgateway.net - Ogury Ltd: 4 requests to presage.io - ProgrammaticX: 4 requests to programmaticx.ai - Sharethrough: 4 requests to sharethrough.com - Simpli.fi: 4 requests to simpli.fi - VRTCAL Markets Inc: 4 requests to vrtcal.com - Ad Lightning: 3 requests to adlightning.com; Ad Lightning - AdTheorent: 3 requests to adentifi.com - Baidu: 3 requests to mediagotechnology.com - Comscore: 3 requests to scorecardresearch.com - Eskimi: 3 requests to eskimi.com - MGID: 3 requests to mgid.com - Meta: 3 requests to facebook.net, facebook.com; Facebook Pixel 2.9.438 - Minute Media (Sportority UK Ltd): 3 requests to minutemedia-prebid.com - ADITION technologies (Virtual Minds GmbH): 2 requests to adition.com - Appier: 2 requests to appier.net - Appnerve: 2 requests to appnerve.net - BidTheatre AB: 2 requests to bidtheatre.com - Cadent: 2 requests to cadent.com - Connatix Native Exchange Inc.: 2 requests to connatix.com - Copper6: 2 requests to copper6.com - Delta Projects AB: 2 requests to de17a.com - Demandbase: 2 requests to company-target.com - Exponential Interactive, Inc. (VDX.tv): 2 requests to tribalfusion.com - IQzone Inc: 2 requests to iqzonertb.live - IQzone Inc.: 2 requests to iqzone.com - Insticator Inc.: 2 requests to ingage.tech - Intercept Interactive Inc. dba Undertone: 2 requests to undertone.com - LinkedIn: 2 requests to linkedin.com - LoudEcho: 2 requests to loudecho.ai - Neustar, Inc. (TransUnion): 2 requests to agkn.com - Playdigo Inc: 2 requests to playdigo.com - Samsung Ads: 2 requests to adgrx.com - SparkV International Inc: 2 requests to rtbwise.com - Wirtualna Polska Media S.A: 2 requests to wp.pl - AcuityAds Inc. (illumin): 1 request to acuityplatform.com - AdRoll: 1 request to adroll.com - Adot: 1 request to adotmob.com - ArcSpan Technologies, Inc.: 1 request to p7cloud.net - Baidu (Hong Kong) Limited: 1 request to mediago.io - Between Exchange: 1 request to betweendigital.com - Bidtellect Inc: 1 request to bttrack.com - Cloudflare: 1 request to cloudflareinsights.com; Cloudflare Browser Insights - Eyeota: 1 request to eyeota.net - IQM Inc.: 1 request to iqm.com - OnAudience Ltd: 1 request to onaudience.com - Pacvue: 1 request to pacvue.com - PinkLion LTD: 1 request to pinklion.io - Reset Digital: 1 request to resetdigital.co - Roku, Inc.: 1 request to w55c.net - Semasio GmbH: 1 request to semasio.net - TrustedStack: 1 request to trustedstack.com - ViSTARS Agency, LLC: 1 request to vistarsagency.com - iPROM: 1 request to iprom.net ### Unknown (22) Domains not identified yet: plusoneads.com, ymmobi.com, cognitivlabs.com, rtb-oveeo.com, bfmio.com, example.com, rtb.mx, pmbmonetize.live, ctnsnet.com, mxptint.net, s3.amazonaws.com, syncingbridge.com, technoratimedia.com, adtech.ink, advolve.io, anyrtb.com, html-load.cc, media6degrees.com, ortb.net, startappnetwork.com, streamrail.com, yrxtam.com ### First party (1) - BuzzFeed: 100 requests to buzzfeed.com; Adobe Fonts, Amazon Web Services, Criteo, Google Tag Manager, HSTS, Next.js 12.1.0, Nginx, Open Graph, PWA, Permutive, Prebid 11.37.0, Priority Hints, React, Sentry, Typekit, Varnish, Webpack, comScore, core-js 2.6.12, reCAPTCHA 32 tracked companies loaded by the homepage are not in BuzzFeed's subprocessor list. A website can use a service without it processing customer data. ## Subprocessor of (0) No tracked vendor lists it. ## Security contact From its security.txt (https://www.buzzfeed.com/.well-known/security.txt) ([evidence](https://thirdpartyindex.com/evidence/5841)): - Contact: https://www.buzzfeed.com/bug-bounty-program - Languages: en - No expiry date --- Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api