# Corelight

Corelight declares [5 subprocessors](https://thirdpartyindex.com/vendors/corelight#subprocessors) in [its subprocessor list](https://corelight.com/legal/subprocessors), which we last checked on 2026-11-12 ([evidence](https://thirdpartyindex.com/evidence/12128)). They include [Amazon Web Services](https://thirdpartyindex.com/vendors/amazon-web-services), [OpenAI](https://thirdpartyindex.com/vendors/openai) and [Salesforce](https://thirdpartyindex.com/vendors/salesforce). No published changes since we first read it on 2026-09-28.

Corelight (corelight.com): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/corelight
- Documents last verified: 2026-11-12
- Transparency rating: 89/100 (how much it publishes, not how secure it is): Subprocessor list 30/30; Processing locations 8/8; Purposes 7/7; Data processing addendum 12/12; Trust center 8/8; Privacy policy 6/6; security.txt 0/6 (not found); Security page 5/5; Status page 5/5; Vulnerability disclosure 0/5 (not found); Pages still reachable 8/8
- Supply chain: relies on 5 tracked vendors directly, 65 within two hops, 269 within three; 0 tracked vendors rely on it directly, 0 within two hops, 0 within three
- Cite as: Corelight, Third Party Index, https://thirdpartyindex.com/vendors/corelight (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Trust center | https://corelight.com/legal/trust-center | 2026-11-12 | 2026-09-28 |
| Subprocessor list | https://corelight.com/legal/subprocessors | 2026-11-12 | 2026-09-28 |
| Data processing addendum | https://corelight.com/hubfs/legal/corelight-data-processing-addendum.pdf | 2026-11-12 | 2026-09-28 |
| Privacy policy | https://corelight.com/legal/privacy | 2026-11-12 | 2026-09-28 |
| Terms | https://corelight.com/terms-of-use/ | 2026-11-12 | 2026-09-28 |
| Security page | https://corelight.com/support/security | 2026-11-12 | 2026-09-28 |
| Status page | https://status.corelight.com/ | 2026-11-12 | 2026-11-12 |

## Subprocessors (5)

As its own list states them.

| Subprocessor | Purpose | Location | Listed since |
|---|---|---|---|
| [Amazon Web Services, Inc.](https://thirdpartyindex.com/vendors/amazon-web-services.md) | Cloud hosting provider for Corelight Investigator; Hosting and storage provider for CCS Data\* \*Only processed by Corelight if Corelight Sensor’s Corelight Cloud Services (CCS) features enabled at customer’s election | Customers may select an AWS region from the options below: • Germany • UAE • United States; United States | 2026-10-01 |
| [OpenAI, L.L.C.](https://thirdpartyindex.com/vendors/openai.md) (AI model provider: OpenAI) | Generative AI services provider for Corelight Investigator’s intelligence product features | United States | 2026-09-28 |
| [Pendo.io, Inc.](https://thirdpartyindex.com/vendors/pendo.md) | Provider of in-platform usage analytics for Corelight Investigator | United States | 2026-09-28 |
| [salesforce, inc.](https://thirdpartyindex.com/vendors/salesforce.md) | Customer account administration platform service provider | United States | 2026-09-28 |
| [Zendesk, Inc.](https://thirdpartyindex.com/vendors/zendesk.md) | Customer support platform service provider | United States | 2026-09-28 |

Read from ([evidence](https://thirdpartyindex.com/evidence/12128)). CSV: https://thirdpartyindex.com/vendors/corelight/subprocessors.csv

AI model providers (or a cloud provider's AI model service) among these entries: 1. All vendors that list one: https://thirdpartyindex.com/ai

## Compliance

As its trust center lists them.

- FedRAMP Marketplace: Moderate

## Web Technologies

Corelight's homepage made 119 requests to 23 domains, and 8 services controlled by another company. Loaded on 2026-11-10 by a browser that accepted nothing; other visits may load more or less. What a page loads is not a list of who receives customer data.

8 third parties by category: Analytics 3 (Google Cloud, ZoomInfo; usually detected as Analytics: HubSpot); Marketing automation 2 (PathFactory, 6Sense Insights, Inc.); Advertising 1 (Reddit, Inc.); Cookie compliance 1 (Osano); Development 1 (reviewed: Pusher). Each company that appears controlled by another organization is counted once, under the main category of the technologies detected from it on this homepage or, when none was, the category recorded from the company's own page (marked reviewed) or else the one it is usually detected as on other published homepages (marked as such); unclassified: none of these.

### Third parties (8)

- HubSpot: 16 requests to hsforms.com, hubspot.com, hs-banner.com, hscollectedforms.net, hubspotusercontent-na1.net, hsforms.net
- PathFactory: 16 requests to pathfactory.com; PathFactory
- Google Cloud: 12 requests to googletagmanager.com, gstatic.com, googlesyndication.com, fonts.googleapis.com, google-analytics.com, google.com, googleadservices.com; Google Analytics, Google Call Conversion Tracking, Google Tag Manager
- ZoomInfo: 11 requests to insent.ai, zi-scripts.com, zoominfo.com; Insent, Zoominfo
- Reddit, Inc.: 2 requests to reddit.com, redditstatic.com; Reddit Ads
- 6Sense Insights, Inc.: 1 request to 6sense.com; 6sense
- Osano: 1 request to osano.com; Osano
- Pusher: 1 request to pusher.com

### First party (1)

- Corelight: 59 requests to corelight.com; Cloudflare, Facebook Pixel, Google Font API, HSTS, HTTP/3, HubSpot, HubSpot CMS Hub, Lenis 1.0.34, Linkedin Insight Tag, Open Graph, PostHog, React, Swiper, lit-html 2.8.0, styled-components 5.3.11

6 tracked companies loaded by the homepage are not in Corelight's subprocessor list. A website can use a service without it processing customer data.

## Subprocessor of (0)

No tracked vendor lists it.

## Service status

Incidents it reported on its own status page.

- Last 90 days: 3 reported incidents (3 major or critical, 0 minor, 0 with no impact stated)
- Typical time to resolve: 44 min
- Status page last read: 2026-11-12
- 2026-11-11: The Investigator UI is currently experiencing issues in the US West region (major)
- 2026-10-28: Investigator UI (WebApp) is down in NA region (critical)
- 2026-08-20: Investigator data ingestion affected for a subset of customers (major)
- 2026-06-11: Investigator UI experiencing issues (major)
- 2026-06-02: Investigator UI is experiencing the degraded performance in NA/EU regions (major)
- 2026-03-02: The Investigator system in the Middle East region is currently down, and we are working with the cloud provider to resolve the issue. (critical)

## Incidents reported by Corelight's subprocessors

Incidents reported in the last 30 days on their own status pages by 2 vendors Corelight lists as subprocessors. A subprocessor list names a company, not the service an incident touched.

- 2026-11-12: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Corelight lists as a subprocessor, reported GPT-image-2.5 and 2.6 Sunburst & Flare High error rate (minor)
- 2026-11-11: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Corelight lists as a subprocessor, reported Unable to start new Workspace Agent runs (critical)
- 2026-11-11: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Corelight lists as a subprocessor, reported Elevated errors affecting logins, sign-ups, and ChatGPT features (minor)
- 2026-11-10: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Corelight lists as a subprocessor, reported Incorrect cost data in Costs API exports (no impact stated)
- 2026-11-09: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Corelight lists as a subprocessor, reported Elevated Errors On API (minor)
- 2026-11-09: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Corelight lists as a subprocessor, reported Elevated ChatGPT Conversation Errors (minor)
- 2026-11-08: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Corelight lists as a subprocessor, reported Elevated errors with image generation (minor)
- 2026-11-06: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Corelight lists as a subprocessor, reported Elevated error rates with some U.S. business Mastercards (no impact stated)
- 2026-11-05: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Corelight lists as a subprocessor, reported ChatGPT Work and Dots Errors (minor)
- 2026-11-04: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Corelight lists as a subprocessor, reported Elevated error rates across paid ChatGPT plans (minor)
- 2026-11-04: [Pendo](https://thirdpartyindex.com/vendors/pendo#status), which Corelight lists as a subprocessor, reported Degradation of Account and Visitor Reports (critical)
- 2026-11-03: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Corelight lists as a subprocessor, reported File upload errors in ChatGPT (minor)
- 2026-10-30: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Corelight lists as a subprocessor, reported Elevated errors with search in Dots, ChatGPT Work, and certain ChatGPT thinking experiences (minor)
- 2026-10-30: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Corelight lists as a subprocessor, reported Elevated errors for GPT Image 2 API image edits (minor)
- 2026-10-27: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Corelight lists as a subprocessor, reported 6.1 Sol Degraded Model Performance (minor)
- 2026-10-27: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Corelight lists as a subprocessor, reported Elevated error rates for most hosted Code Reviews and Security Reviews on private GitHub repositories (no impact stated)
- 2026-10-26: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Corelight lists as a subprocessor, reported Elevated error rates for Ads POST requests (minor)
- 2026-10-23: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Corelight lists as a subprocessor, reported Degraded experience with ChatGPT app connections using CIMD (minor)
- 2026-10-23: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Corelight lists as a subprocessor, reported Help Center Chat Support Degraded (no impact stated)
- 2026-10-23: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Corelight lists as a subprocessor, reported Delays in customer support responses (no impact stated)
- 2026-10-22: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Corelight lists as a subprocessor, reported New Ad Accounts failing to provision admins (minor)
- 2026-10-22: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Corelight lists as a subprocessor, reported Degraded Performance of Dots on Enterprise (minor)
- 2026-10-22: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Corelight lists as a subprocessor, reported Elevated ChatGPT conversation and Responses API errors (minor)
- 2026-10-21: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Corelight lists as a subprocessor, reported Authentication errors for some users (major)
- 2026-10-21: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Corelight lists as a subprocessor, reported Elevated error rates for gpt-5.6-luna API requests (minor)
- 2026-10-21: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Corelight lists as a subprocessor, reported Elevated FedRAMP API error rates for Astra and Sol (minor)
- 2026-10-21: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Corelight lists as a subprocessor, reported Degraded performance in ChatGPT, Codex, and APIs (minor)
- 2026-10-19: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Corelight lists as a subprocessor, reported File Download errors (minor)
- 2026-10-15: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Corelight lists as a subprocessor, reported Widespread feature degradation (major)
- 2026-10-14: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Corelight lists as a subprocessor, reported Delayed Costs data in the Compliance API (minor)
- 2026-10-14: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Corelight lists as a subprocessor, reported Limited availability on gpt-image-2.5-flare and gpt-image-2.5-sunburst (minor)
- 2026-10-14: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Corelight lists as a subprocessor, reported Degraded performance in Codex and ChatGPT Work (minor)

The subprocessor list as we read it on any date: https://thirdpartyindex.com/labs/time-machine/corelight

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api
