# Checkmk Checkmk declares [6 subprocessors](https://thirdpartyindex.com/vendors/checkmk#subprocessors), plus 1 of its own affiliates, in [its subprocessor list](https://checkmk.com/application/files/1117/7816/1787/Checkmk_Sub-processor_List_2026-04-29_ENG_final.pdf), which we last checked on 2026-11-11 ([evidence](https://thirdpartyindex.com/evidence/4067)). They include [Amazon Web Services](https://thirdpartyindex.com/vendors/amazon-web-services), [Google Cloud](https://thirdpartyindex.com/vendors/google-cloud) and [Atlassian](https://thirdpartyindex.com/vendors/atlassian). No published changes since we first read it on 2026-09-22. [1 tracked vendor](https://thirdpartyindex.com/vendors/checkmk#used-by), [Verda](https://thirdpartyindex.com/vendors/verda), names Checkmk as a subprocessor. Checkmk (checkmk.com): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index. - Page: https://thirdpartyindex.com/vendors/checkmk - Documents last verified: 2026-11-11 - Transparency rating: 91/100 (how much it publishes, not how secure it is): Subprocessor list 30/30; Processing locations 5/8 (partial); Purposes 6/7 (partial); Data processing addendum 12/12; Trust center 8/8; Privacy policy 6/6; security.txt 6/6; Security page 0/5 (not found); Status page 5/5; Vulnerability disclosure 5/5; Pages still reachable 8/8 - Supply chain: relies on 5 tracked vendors directly, 69 within two hops, 333 within three; 1 tracked vendors rely on it directly, 5 within two hops, 71 within three - Cite as: Checkmk, Third Party Index, https://thirdpartyindex.com/vendors/checkmk (data CC BY 4.0) ## Documents | Document | URL | Last verified | Last changed | |---|---|---|---| | Trust center | https://trust.checkmk.com/ | 2026-11-11 | 2026-10-16 | | Subprocessor list | https://checkmk.com/application/files/1117/7816/1787/Checkmk\_Sub-processor\_List\_2026-04-29\_ENG\_final.pdf | 2026-11-11 | 2026-09-22 | | Data processing addendum | https://checkmk.com/application/files/2417/7494/3674/Data\_Processing\_Agreement\_DPA\_2026\_03\_17\_EN\_final.pdf | 2026-11-11 | 2026-09-22 | | Privacy policy | https://checkmk.com/privacy-policy | 2026-11-11 | 2026-10-06 | | Terms | https://checkmk.com/application/files/9817/7373/4055/Terms\_and\_Conditions\_for\_Checkmk\_Software\_Self-Hosted\_and\_Checkmk\_Cloud\_SaaS\_2026-03-17\_EN\_final.pdf | 2026-11-11 | 2026-09-22 | | security.txt | https://checkmk.com/.well-known/security.txt | 2026-11-11 | 2026-09-22 | | Status page | https://status.checkmk.cloud/ | 2026-11-11 | 2026-11-04 | | Security advisories | https://checkmk.com/vulnerability-disclosure-policy | 2026-11-11 | 2026-09-22 | ## Subprocessors (6) As its own list states them. | Subprocessor | Purpose | Location | Listed since | |---|---|---|---| | [Algolia](https://thirdpartyindex.com/vendors/algolia.md) | Search the Checkmk platform | functionality within Germany; Cloud USA | 2026-09-22 | | [Atlassian Pty Ltd](https://thirdpartyindex.com/vendors/atlassian.md) | Service desk infrastructure for the provision of Support Services. | Germany | 2026-09-22 | | [AWS](https://thirdpartyindex.com/vendors/amazon-web-services.md) | Cloud-Infrastructure Hosting | & Germany; USA | 2026-09-22 | | [Google Cloud EMEA Limited](https://thirdpartyindex.com/vendors/google-cloud.md) (AI model provider: Google Vertex AI / Gemini) | AI-Feature (AI-System) using Gemini models in Vertex AI; Video conferencing platform Europe for remote live support and screen sharing | (SaaS); Europe | 2026-09-22 | | Version 3.0 (2026-04-29) Document Classification: Public | — | — | 2026-09-22 | | [Zoom Inc.](https://thirdpartyindex.com/vendors/zoom.md) | Video conferencing platform USA for remote live support and screen sharing | — | 2026-09-22 | Read from ([evidence](https://thirdpartyindex.com/evidence/4067)). CSV: https://thirdpartyindex.com/vendors/checkmk/subprocessors.csv AI model providers (or a cloud provider's AI model service) among these entries: 1. All vendors that list one: https://thirdpartyindex.com/ai ### Its own affiliates (1) - Checkmk GmbH (Germany; Inc.: Europe; USA & AI-Feature Gemini Vertex AI; Search within the platform; USA) ## Compliance As its trust center lists them. - Audited: SOC 2 Type I, ISO/IEC 27001 ([evidence](https://thirdpartyindex.com/evidence/4063)) - Claimed: GDPR, DORA ([evidence](https://thirdpartyindex.com/evidence/4063)) ## Web Technologies Checkmk's homepage made 68 requests to 2 domains, and 1 service controlled by another company. Loaded on 2026-11-09 by a browser that accepted nothing; other visits may load more or less. What a page loads is not a list of who receives customer data. 1 third party by category: Cookie compliance 1 (CookieFirst). Each company that appears controlled by another organization is counted once, under the main category of the technologies detected from it on this homepage or, when none was, the category recorded from the company's own page (marked reviewed) or else the one it is usually detected as on other published homepages (marked as such); unclassified: none of these. ### Third parties (1) - CookieFirst: 9 requests to cookiefirst.com; CookieFirst ### First party (1) - Checkmk: 59 requests to checkmk.com; Bootstrap 5.2.3, Concrete CMS, Google Tag Manager, HSTS, LazySizes, Open Graph, PHP, PWA, Swiper, Vue.js 2.7.14, YouTube, jQuery 3.6.3 ## Subprocessor of (1) Tracked vendors whose own subprocessor lists name it, and what they say they use it for. - [Verda](https://thirdpartyindex.com/vendors/verda.md): Cloud monitoring; Privacy policy: ## Service status Incidents it reported on its own status page. - Last 90 days: 0 reported incidents (0 major or critical, 0 minor, 0 with no impact stated) - Status page last read: 2026-11-12 - No incidents reported in the last 12 months - 2026-05-20: Email notifications are not being delivered (no impact stated) - 2025-12-16: License activation is temporarily impaired (no impact stated) - 2025-11-13: We are investigating authentication issues with Checkmk SaaS Sites (no impact stated) ## Incidents reported by Checkmk's subprocessors Incidents reported in the last 30 days on their own status pages by 1 vendor Checkmk lists as a subprocessor. A subprocessor list names a company, not the service an incident touched. - 2026-11-10: [Zoom](https://thirdpartyindex.com/vendors/zoom#status), which Checkmk lists as a subprocessor, reported Service Degradation Affecting Zoom Conference Room Connector Services Endpoints in the AMS region. (minor) - 2026-11-10: [Zoom](https://thirdpartyindex.com/vendors/zoom#status), which Checkmk lists as a subprocessor, reported Service Degradation Affecting a subset of users with ZVA and ZoomMate (no impact stated) - 2026-11-09: [Zoom](https://thirdpartyindex.com/vendors/zoom#status), which Checkmk lists as a subprocessor, reported Service Degradation Affecting Zoom Inbound SMS Service in the AU region (minor) - 2026-11-06: [Zoom](https://thirdpartyindex.com/vendors/zoom#status), which Checkmk lists as a subprocessor, reported Service Degradation Affecting Zoom Mail, Calendar and Scheduler. (minor) - 2026-11-03: [Zoom](https://thirdpartyindex.com/vendors/zoom#status), which Checkmk lists as a subprocessor, reported Service Degradation Affecting Outbound MMS Services in the US region (minor) - 2026-10-28: [Zoom](https://thirdpartyindex.com/vendors/zoom#status), which Checkmk lists as a subprocessor, reported Service Degradation Affecting the Evaluations Acknowledge Button in Zoom Quality Management in the US Region (minor) - 2026-10-23: [Zoom](https://thirdpartyindex.com/vendors/zoom#status), which Checkmk lists as a subprocessor, reported Service Degradation Affecting Multiple Zoom Services (minor) - 2026-10-22: [Zoom](https://thirdpartyindex.com/vendors/zoom#status), which Checkmk lists as a subprocessor, reported Service Degradation Affecting Zoom Meetings Services in the US. (minor) - 2026-10-21: [Zoom](https://thirdpartyindex.com/vendors/zoom#status), which Checkmk lists as a subprocessor, reported Service Degradation Affecting Zoom Learning Webpage (minor) - 2026-10-19: [Zoom](https://thirdpartyindex.com/vendors/zoom#status), which Checkmk lists as a subprocessor, reported Service Degradation Affecting Meeting Summaries Via Email. (minor) - 2026-10-19: [Zoom](https://thirdpartyindex.com/vendors/zoom#status), which Checkmk lists as a subprocessor, reported Service Degradation Affecting Zoom Website in UK region (minor) - 2026-10-19: [Zoom](https://thirdpartyindex.com/vendors/zoom#status), which Checkmk lists as a subprocessor, reported Service Degradation Affecting ZP SMS Australia Mobile Numbers (no impact stated) - 2026-10-17: [Zoom](https://thirdpartyindex.com/vendors/zoom#status), which Checkmk lists as a subprocessor, reported Service Degradation Affecting Zoom Chat Compose and SMS Summarisation with AI Companion (minor) - 2026-10-14: [Zoom](https://thirdpartyindex.com/vendors/zoom#status), which Checkmk lists as a subprocessor, reported Service degradation affected Zoom AI Companion in US region (no impact stated) - 2026-10-14: [Zoom](https://thirdpartyindex.com/vendors/zoom#status), which Checkmk lists as a subprocessor, reported Service Degradation Affected Sandbox Creation in ZoomMate (no impact stated) - 2026-10-14: [Zoom](https://thirdpartyindex.com/vendors/zoom#status), which Checkmk lists as a subprocessor, reported Service Degradation Affecting Zoom Clips (minor) - 2026-10-13: [Zoom](https://thirdpartyindex.com/vendors/zoom#status), which Checkmk lists as a subprocessor, reported Service degradation affecting Zoom Meeting API in US region (no impact stated) The subprocessor list as we read it on any date: https://thirdpartyindex.com/labs/time-machine/checkmk ## Security contact From its security.txt (https://checkmk.com/.well-known/security.txt) ([evidence](https://thirdpartyindex.com/evidence/4086)): - Contact: mailto:security@checkmk.com - Disclosure policy: https://checkmk.com/responsible-disclosure-policy - Encryption key: https://checkmk.com/.well-known/pgp-key.txt - Valid until 2028-09-20 - Signed --- Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api