# Elasticsearch

Elasticsearch declares [17 subprocessors](https://thirdpartyindex.com/vendors/elasticsearch#subprocessors) in [its subprocessor list](https://www.elastic.co/agreements/external_subprocessors), which we last checked on 2026-11-12 ([evidence](https://thirdpartyindex.com/evidence/8271)). They include [Amazon Web Services](https://thirdpartyindex.com/vendors/amazon-web-services), [Google Cloud](https://thirdpartyindex.com/vendors/google-cloud) and [Microsoft](https://thirdpartyindex.com/vendors/microsoft). The list last changed on 2026-09-24: 5 added, 0 removed, 3 changed. [166 tracked vendors](https://thirdpartyindex.com/vendors/elasticsearch#used-by) name Elasticsearch as a subprocessor, including [Twilio](https://thirdpartyindex.com/vendors/twilio), [SendGrid](https://thirdpartyindex.com/vendors/sendgrid) and [GitHub](https://thirdpartyindex.com/vendors/github).

Elasticsearch (elastic.co): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/elasticsearch
- Documents last verified: 2026-11-12
- Transparency rating: 89/100 (how much it publishes, not how secure it is): Subprocessor list 30/30; Processing locations 8/8; Purposes 7/7; Data processing addendum 12/12; Trust center 8/8; Privacy policy 6/6; security.txt 0/6 (not found); Security page 5/5; Status page 5/5; Vulnerability disclosure 0/5 (not found); Pages still reachable 8/8
- Supply chain: relies on 12 tracked vendors directly, 110 within two hops, 427 within three; 166 tracked vendors rely on it directly, 1696 within two hops, 2760 within three
- Cite as: Elasticsearch, Third Party Index, https://thirdpartyindex.com/vendors/elasticsearch (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Trust center | https://www.elastic.co/trust | 2026-11-12 | 2026-10-15 |
| Subprocessor list | https://www.elastic.co/agreements/external\_subprocessors | 2026-11-12 | 2026-09-24 |
| Data processing addendum | https://www.elastic.co/elasticsearch/piped-query-language | 2026-11-12 | 2026-11-10 |
| Privacy policy | https://www.elastic.co/trust/privacy | 2026-11-12 | 2026-09-22 |
| Terms | https://www.elastic.co/legal/terms-of-use | 2026-11-12 | 2026-09-22 |
| Security page | https://www.elastic.co/security | 2026-11-12 | 2026-10-08 |
| Status page | https://status.elastic.co/ | 2026-11-12 | 2026-11-12 |

## Subprocessors (17)

As its own list states them.

| Subprocessor | Purpose | Location | Listed since |
|---|---|---|---|
| [Amazon Web Services, Inc.](https://thirdpartyindex.com/vendors/amazon-web-services.md) | Backup; Hosting (other than in Europe, the Middle East, and Africa); Hosting for https://support.elastic.co and the Elastic Uploader Service | United States; selected by customer based on available regions supported by Elastic Cloud | 2026-09-22 |
| [Amazon Web Services EMEA SARL](https://thirdpartyindex.com/vendors/amazon-web-services.md) | Hosting (in Europe, the Middle East, and Africa) | selected by customer based on available regions supported by Elastic Cloud | 2026-09-22 |
| Atlassian Statuspage | Public status-page monitoring: https://status.jina.ai/ | To be confirmed | 2026-09-24 |
| [Cloudflare, Inc.](https://thirdpartyindex.com/vendors/cloudflare.md) | CDN / edge proxy for Jina AI APIs and dashboard | Global | 2026-09-24 |
| [Google LLC (GCP)](https://thirdpartyindex.com/vendors/google-cloud.md) | Hosting and inference for embeddings, rerank, and related public API services(api.jina.ai); Hosting for EIS(Elastic Inference Service) executors on Jina GCP; Hosting for Jina AI Reader and Search (r.jina.ai, s.jina.ai) | United States; United States and Belgium; United States, Belgium, and Singapore | 2026-09-24 |
| [Google Ireland Limited (GCP)](https://thirdpartyindex.com/vendors/google-cloud.md) | Email correspondence with support via Gmail; Hosting | Ireland; selected by customer based on available regions supported by Elastic Cloud | 2026-09-22 |
| [International Business Machines Corporation (IBM Cloud (Softlayer))](https://thirdpartyindex.com/vendors/ibm.md) | Hosting | United States | 2026-09-22 |
| [Microsoft Corporation (Azure)](https://thirdpartyindex.com/vendors/microsoft.md) | Hosting | selected by customer based on available regions supported by Elastic Cloud | 2026-09-22 |
| [MongoDB, Inc.](https://thirdpartyindex.com/vendors/mongodb.md) | Caching layer and database for Jina Reader | United States and Belgium | 2026-09-24 |
| [Okta, Inc.](https://thirdpartyindex.com/vendors/okta.md) | Access authentication | United States | 2026-09-22 |
| [Salesforce.com, Inc.](https://thirdpartyindex.com/vendors/salesforce.md) | Customer support ticketing via Service Cloud | United States | 2026-09-22 |
| [Serper](https://thirdpartyindex.com/vendors/serper.md) | SERP API (Google Search) for Jina Search | United States and Singapore | 2026-09-24 |
| [Stripe, Inc.](https://thirdpartyindex.com/vendors/stripe.md) | Payment processing for prepaid tokens | United States | 2026-09-24 |
| [Supabase, Inc.](https://thirdpartyindex.com/vendors/supabase.md) | Account, API key, and prepaid-wallet database | United States | 2026-09-24 |
| ThorData | Residential proxy when Reader cannot fetch a URL directly | To be confirmed | 2026-09-24 |
| [Tines Automation, Inc.](https://thirdpartyindex.com/vendors/tines.md) | Enterprise workflow automation based on alerts from the customer's Elastic Products (servicing customers in the US, Canada, and Mexico) | United States | 2026-09-22 |
| [Tines Security Services Limited](https://thirdpartyindex.com/vendors/tines.md) | Enterprise workflow automation based on alerts from the customer's Elastic Products (servicing customers in all locations except the US, Canada, and Mexico) | Ireland | 2026-09-22 |

Read from ([evidence](https://thirdpartyindex.com/evidence/1943)). CSV: https://thirdpartyindex.com/vendors/elasticsearch/subprocessors.csv

## Compliance

As its trust center lists them.

- FedRAMP Marketplace: Moderate · 8 agency authorizations · since Jul 22, 2020

## Security program

What Elastic N.V.'s Form 10-K for fiscal 2026, filed Jun 8, 2026 (Item 1C) says, in its words (https://www.sec.gov/Archives/edgar/data/1707753/000170775326000018/0001707753-26-000018-index.htm).

- Led by: Chief Information Security Officer
- Board oversight: Audit Committee
- Frameworks named: NIST CSF, ISO 27001, SOC 2, FedRAMP
- Practices named: Tabletop exercises, Threat intelligence, Phishing simulations, Cyber insurance
- Engages outside assessors or consultants
- Reviews its suppliers' security
- Says no cybersecurity incident has materially affected it

## Web Technologies

Elasticsearch's homepage made 476 requests to 44 domains, 23 services controlled by another company, and 2 domains not identified. Loaded on 2026-10-01 by a browser that accepted nothing; other visits may load more or less. What a page loads is not a list of who receives customer data.

23 third parties by category: Advertising 10 (Google Cloud, Microsoft, X Corp., Reddit, Inc., Spotify AB, The Trade Desk, Inc., Xandr; reviewed: Index Exchange Inc.; usually detected as Advertising: Magnite, Inc., PubMatic); Analytics 5 (Fullstory, LinkedIn, Demandbase, Meta, Quora); Marketing automation 1 (Adobe); A/B Testing 1 (Optimizely); Cookie compliance 1 (iubenda); CMS 1 (reviewed: Contentstack); Customer data platform 1 (reviewed: LiveRamp); Documentation 1 (TechTarget, Inc.); Personalisation 1 (MarketLinc (Lift AI)); Video players 1 (Vidyard). Each company that appears controlled by another organization is counted once, under the main category of the technologies detected from it on this homepage or, when none was, the category recorded from the company's own page (marked reviewed) or else the one it is usually detected as on other published homepages (marked as such); unclassified: none of these.

### Third parties (23)

- Vidyard: 154 requests to vidyard.com; Vidyard
- Optimizely: 108 requests to optimizely.com; Optimizely
- Adobe: 21 requests to typekit.net, adoberesources.net, adobe.io, marketo.net, mktoresp.com; Marketo
- Google Cloud: 18 requests to google.com, doubleclick.net, googletagmanager.com, fonts.googleapis.com; DoubleClick Floodlight, Google Analytics, Google Tag Manager (its subprocessor list names it too)
- Contentstack: 8 requests to contentstack.io
- Fullstory: 8 requests to fullstory.com; FullStory
- Microsoft: 8 requests to clarity.ms, bing.com; Microsoft Advertising (its subprocessor list names it too)
- LinkedIn: 6 requests to linkedin.com, licdn.com; Linkedin Insight Tag
- X Corp.: 5 requests to t.co, twitter.com, ads-twitter.com; Twitter Ads
- iubenda: 5 requests to iubenda.com; iubenda
- Demandbase: 4 requests to company-target.com, demandbase.com; Demandbase 11.7.0
- Meta: 3 requests to facebook.net, facebook.com; Facebook Pixel 2.9.412
- Reddit, Inc.: 3 requests to reddit.com, redditstatic.com; Reddit Ads
- Spotify AB: 3 requests to spotify.com, byspotify.com; Spotify Pixel
- The Trade Desk, Inc.: 3 requests to adsrvr.org; theTradeDesk
- Magnite, Inc.: 2 requests to rubiconproject.com, tremorhub.com
- Quora: 2 requests to quora.com; Quora Pixel
- TechTarget, Inc.: 2 requests to techtarget.com; TechTarget
- Xandr: 2 requests to adnxs.com; AppNexus
- Index Exchange Inc.: 1 request to casalemedia.com
- LiveRamp: 1 request to rlcdn.com
- MarketLinc (Lift AI): 1 request to marketlinc.com; Lift AI
- PubMatic: 1 request to pubmatic.com

### Unknown (2)

Domains not identified yet: userled.io, userledclient.io

### First party (1)

- Elasticsearch: 95 requests to elastic.co, elastic-global-nav-assets.s3.us-west-2.amazonaws.com, es.io; Adobe Fonts, Contentstack, Elastic APM, Emotion, Google Code Prettify, Google Font API, Microsoft Clarity, Next.js 15.5.24, Nginx, Open Graph, PWA, Priority Hints, Radix UI, React, Swiper, Typekit, Varnish, Webpack, core-js 3.47.0

10 tracked companies loaded by the homepage are not in Elasticsearch's subprocessor list. A website can use a service without it processing customer data.

## Subprocessor of (166)

Tracked vendors whose own subprocessor lists name it, and what they say they use it for.

- [Abusix](https://thirdpartyindex.com/vendors/abusix.md): Data Storage and Processing
- [Acumatica](https://thirdpartyindex.com/vendors/acumatica.md): Logging and analytics tool for support and debugging purposes.
- [Ada Support](https://thirdpartyindex.com/vendors/ada-support.md): Answer prediction, database hosting
- [Adobe](https://thirdpartyindex.com/vendors/adobe.md): Elastic N.V. provides managed services that support some optional (customer initiated) features within Adobe's Document Cloud, Experience Manager and Express pr…
- [Affinda](https://thirdpartyindex.com/vendors/affinda.md): Logging
- [Agilysys](https://thirdpartyindex.com/vendors/agilysys.md)
- [Alation](https://thirdpartyindex.com/vendors/alation.md): Data catalog search service
- [AlertMedia](https://thirdpartyindex.com/vendors/alertmedia.md): AlertMedia platform observability and performance
- [Alohi](https://thirdpartyindex.com/vendors/alohi.md): Logs aggregator and visualization
- [Alteryx](https://thirdpartyindex.com/vendors/alteryx.md): Enables user search functionality
- [Apptio](https://thirdpartyindex.com/vendors/apptio.md): Search functionality
- [AppViewX](https://thirdpartyindex.com/vendors/appviewx.md): Search and observability platform (ELK Stack)
- [Assembly](https://thirdpartyindex.com/vendors/assembly.md): Search and analytics engine
- [Auditoria.AI](https://thirdpartyindex.com/vendors/auditoria-ai.md): Data warehouse services
- [Autohive](https://thirdpartyindex.com/vendors/autohive.md)
- [Automation Anywhere](https://thirdpartyindex.com/vendors/automation-anywhere.md): Database and reporting
- [AutoRABIT](https://thirdpartyindex.com/vendors/autorabit.md)
- [Axero](https://thirdpartyindex.com/vendors/axero.md): Search infrastructure for our apps and services
- [Barracuda Networks](https://thirdpartyindex.com/vendors/barracuda-networks.md)
- [Bento](https://thirdpartyindex.com/vendors/bentonow-com.md): Search and analytics
- [BigID](https://thirdpartyindex.com/vendors/bigid.md): Search Functionality
- [Binti](https://thirdpartyindex.com/vendors/binti.md): Enterprise application search vendor.; Enterprise search vendor
- [Boom Learning](https://thirdpartyindex.com/vendors/boom-learning.md): Log aggregator used to monitor infrastructure and application logs in real-time to troubleshoot issues and detect anomalies.
- [Brightcove](https://thirdpartyindex.com/vendors/brightcove.md): Analytics
- [Bullhorn](https://thirdpartyindex.com/vendors/bullhorn.md): Cloud hosting services; Search services
- [Calendly.com](https://thirdpartyindex.com/vendors/calendly-com.md): In-app search services
- [Capacity](https://thirdpartyindex.com/vendors/capacity.md): Engineering; Provides search, analytics and logging platform services for Capacity.
- [Cavalry](https://thirdpartyindex.com/vendors/cavalry.md)
- [Checkstep](https://thirdpartyindex.com/vendors/checkstep.md)
- [Clozd](https://thirdpartyindex.com/vendors/clozd.md): Required; Search and data indexing services. \[Elastic Cloud Trust Center\](
- [Collibra](https://thirdpartyindex.com/vendors/collibra.md): Log and application trace processing for debugging, troubleshooting, auditing, reporting, and detecting and alerting on application behavior; Search functionali…
- [Command Alkon](https://thirdpartyindex.com/vendors/command-alkon.md): Support operations
- [Conveyor](https://thirdpartyindex.com/vendors/conveyor.md): Keyword search
- [Datadome](https://thirdpartyindex.com/vendors/datadome.md): Data storage; Storage
- [Deskpro](https://thirdpartyindex.com/vendors/deskpro.md): Full-text search and analytics engine Server Location: N/A Website: https://www.elastic.co/
- [DocSend](https://thirdpartyindex.com/vendors/docsend.md): Search
- [dotdigital](https://thirdpartyindex.com/vendors/dotdigital.md): Provision of tools for log monitoring and storage of customer data.
- [EditShare](https://thirdpartyindex.com/vendors/editshare.md)
- [Education Perfect](https://thirdpartyindex.com/vendors/education-perfect.md): Error logging
- [Emailable](https://thirdpartyindex.com/vendors/emailable.md): Infrastructure Hosting, Logging, and Monitoring
- [Epsio](https://thirdpartyindex.com/vendors/epsio.md): Engineering
- [Equisolve](https://thirdpartyindex.com/vendors/equisolve.md): Search service hosting
- [Everbridge](https://thirdpartyindex.com/vendors/everbridge.md)
- [Expel](https://thirdpartyindex.com/vendors/expel.md): Application search capability and visualization
- [Fathom](https://thirdpartyindex.com/vendors/fathom.md): Search Provider; 🔒 Handles Meeting Content Data
- [Fenergo](https://thirdpartyindex.com/vendors/fenergo.md): Elasticsearch is a distributed search and analytics engine designed to store, search, and analyze large volumes of data in near real time.; Purpose: Search engi…
- [Fibery](https://thirdpartyindex.com/vendors/fibery.md): Used for keeping company logs
- [Filevine](https://thirdpartyindex.com/vendors/filevine.md): Search and analytics engine
- [Flowmailer](https://thirdpartyindex.com/vendors/flowmailer.md): Search index on synchronised Customer data; Statistics & logging
- [Fountain](https://thirdpartyindex.com/vendors/fountain.md): Search functionality
- [Gamma](https://thirdpartyindex.com/vendors/gamma.md): Documentation search
- [Gem](https://thirdpartyindex.com/vendors/gem.md): In-product search infrastructure
- [Genesys](https://thirdpartyindex.com/vendors/genesys.md)
- [Genetec](https://thirdpartyindex.com/vendors/genetec.md): Cloud services for data storage; cloud services for data storage
- [GitHub](https://thirdpartyindex.com/vendors/github.md): Cloud Hosted Infrastructure
- [GitLab](https://thirdpartyindex.com/vendors/gitlab.md): Search Functionality and Application Logging and Debugging
- [Graphite](https://thirdpartyindex.com/vendors/graphite.md)
- [Graphwise](https://thirdpartyindex.com/vendors/graphwise.md): Security and Event Management (SIEM)
- [Grata](https://thirdpartyindex.com/vendors/grata.md): Used to store application data specifically companies profile data
- [Handshake](https://thirdpartyindex.com/vendors/joinhandshake-com.md): Search functionality across the Handshake platform
- [Harness.io](https://thirdpartyindex.com/vendors/harness-io.md): --- Platform Services and Enablement ---  Data Platform
- [Harvest](https://thirdpartyindex.com/vendors/harvest.md): Infrastructure Partner
- [Hebbia](https://thirdpartyindex.com/vendors/hebbia.md)
- [Help Scout](https://thirdpartyindex.com/vendors/help-scout.md): Data processing enhancing
- [Horizon3.ai](https://thirdpartyindex.com/vendors/horizon3-ai.md): SIEM; SIEM tool for monitoring Horizon3.ai environment.
- [Hund](https://thirdpartyindex.com/vendors/hund.md): Logging
- [Hyperproof](https://thirdpartyindex.com/vendors/hyperproof.md): Logging Services
- [IBM Kubecost](https://thirdpartyindex.com/vendors/ibm-kubecost.md): Search functionality
- [InMoment](https://thirdpartyindex.com/vendors/inmoment.md): Data analytics; Data hosting
- [Ironclad](https://thirdpartyindex.com/vendors/ironclad.md): Search
- [Ivanti](https://thirdpartyindex.com/vendors/ivanti.md): Data hosting for Neurons for MDM
- [JWX](https://thirdpartyindex.com/vendors/jwx.md): Data visualization and exploration tool; Data search and analytics tool
- [Kaleris](https://thirdpartyindex.com/vendors/kaleris.md): Cloud hosting, data platform infrastructure; Provides advanced search and indexing functions. Enables secure processing and indexing of EDI messages containing …
- [Kasten](https://thirdpartyindex.com/vendors/kasten.md): Provides search and analytics engine used for log analysis and data indexing
- [Keap](https://thirdpartyindex.com/vendors/keap.md)
- [Kiflo](https://thirdpartyindex.com/vendors/kiflo.md): Logging, supporting, and debugging
- [Kustomer](https://thirdpartyindex.com/vendors/kustomer.md): Limited to certain customers; Location depends on Kustomer App Region Selected at Onboarding; Search Functionality
- [Level Access](https://thirdpartyindex.com/vendors/level-access.md): "Smart" and secure search; Data indexing
- [LINK Mobility Group ASA](https://thirdpartyindex.com/vendors/link-mobility-group-asa.md)
- [Logo.dev](https://thirdpartyindex.com/vendors/logo-dev.md): Search infrastructure
- [Lucky Orange](https://thirdpartyindex.com/vendors/lucky-orange.md): Cloud infrastructure
- [Management Controls](https://thirdpartyindex.com/vendors/management-controls.md): San Elastic Search is a powerful search engine used to quickly find and analyze data across websites, applications, and databases
- [MasterControl](https://thirdpartyindex.com/vendors/mastercontrol.md): Search engine functionality
- [Medallia](https://thirdpartyindex.com/vendors/medallia.md): Search and analytics.
- [meetergo](https://thirdpartyindex.com/vendors/meetergo.md): CRM
- [Mews](https://thirdpartyindex.com/vendors/mews.md)
- [Modica Group](https://thirdpartyindex.com/vendors/modica-group.md): Security Services
- [Monad](https://thirdpartyindex.com/vendors/monad.md): Search and analytics platform used to support Monad's security operations (SIEM)
- [Muvi](https://thirdpartyindex.com/vendors/muvi.md): Search, logging and analytics
- [Nango](https://thirdpartyindex.com/vendors/nango-dev.md): Log management
- [Naviam](https://thirdpartyindex.com/vendors/naviam.md): Cloud monitoring; Search platform (analytics, logging)
- [Neeto](https://thirdpartyindex.com/vendors/neeto.md): Search service provider
- [New Black](https://thirdpartyindex.com/vendors/new-black.md): IT infrastructure
- [NimbleRx](https://thirdpartyindex.com/vendors/nimblerx.md)
- [Noibu](https://thirdpartyindex.com/vendors/noibu.md): elastic db
- [Nooks](https://thirdpartyindex.com/vendors/nooks.md): Search provider to search and filter data
- [OneTrust](https://thirdpartyindex.com/vendors/onetrust.md): Documentation Search Engine
- [Ortto](https://thirdpartyindex.com/vendors/ortto.md): Application Log Management; Elastic Cloud stores and indexes Ortto's application and system logs, supporting platform debugging, performance monitoring, and sec…
- [OverOps](https://thirdpartyindex.com/vendors/overops.md): --- Platform Services and Enablement ---  Data Platform
- [Own](https://thirdpartyindex.com/vendors/own.md): Indexing and search (Only where customer selects Azure for hosting and data storage)
- [Padlet](https://thirdpartyindex.com/vendors/padlet.md): Content search
- [Partium](https://thirdpartyindex.com/vendors/partium.md): Cloud Services Provider; SaaS
- [Paved](https://thirdpartyindex.com/vendors/paved.md): Search and Analytics
- [Payscale](https://thirdpartyindex.com/vendors/payscale.md): Data storage and search
- [PCI Pal](https://thirdpartyindex.com/vendors/pci-pal.md): PCI Pal uses Elastic as a sub-processor to support logging, search, and monitoring functions within its technical infrastructure. Elastic operates under its own…
- [Pendo](https://thirdpartyindex.com/vendors/pendo.md): \*\*Purpose:\*\* Logging and query solution \*\*Location(s) of processing:\*\* US, EU, JPN, AUS (according to customer's hosting location)
- [Persona](https://thirdpartyindex.com/vendors/persona.md)
- [Ping Identity](https://thirdpartyindex.com/vendors/ping-identity.md): Visualization and analytics
- [Quartzy](https://thirdpartyindex.com/vendors/quartzy.md)
- [Quo](https://thirdpartyindex.com/vendors/quo.md): Engineering; Search and log management
- [Raklet](https://thirdpartyindex.com/vendors/raklet.md): Managed Elasticsearch cluster (search/indexing)
- [Read the Docs](https://thirdpartyindex.com/vendors/read-the-docs.md): Hosted ElasticSearch services for documentation search. Search indexes do not include user data.
- [Recruit CRM](https://thirdpartyindex.com/vendors/recruit-crm.md): Log indexing and search.
- [Recurly](https://thirdpartyindex.com/vendors/recurly.md): Cloud hosted elasticsearch
- [Referral Rock](https://thirdpartyindex.com/vendors/referral-rock.md)
- [Relay Commerce](https://thirdpartyindex.com/vendors/relay-commerce.md)
- [Resend](https://thirdpartyindex.com/vendors/resend.md): In-app search
- [Revealbot](https://thirdpartyindex.com/vendors/revealbot.md): Distributed search and analytics engine. Used to power fast in-app search features, aggregate system logs, and monitor application performance; processes user s…
- [Ripik.AI](https://thirdpartyindex.com/vendors/ripik-ai.md): Infrastructure Monitoring
- [Sardine](https://thirdpartyindex.com/vendors/sardine-ai.md): Cloud resource management
- [Sayari](https://thirdpartyindex.com/vendors/sayari.md): Logging and monitoring
- [Scale AI](https://thirdpartyindex.com/vendors/scale-ai.md): Search
- [ScreenSteps](https://thirdpartyindex.com/vendors/screensteps.md): Data storage and processing; Document and analytics search
- [Segment](https://thirdpartyindex.com/vendors/segment.md): Elastic provides support system indexing, search query optimisation, and operational log analytics for specific Twilio Products and Services
- [SendGrid](https://thirdpartyindex.com/vendors/sendgrid.md): Elastic provides support system indexing, search query optimisation, and operational log analytics for specific Twilio Products and Services
- [Sitecore](https://thirdpartyindex.com/vendors/sitecore.md): Observability / security monitoring; Observability and Security Services
- [SMTP2GO](https://thirdpartyindex.com/vendors/smtp2go.md): Cloud Hosting
- [SnapEngage](https://thirdpartyindex.com/vendors/snapengage.md): Textual search of content in TeamSupport systems.
- [SolarWinds](https://thirdpartyindex.com/vendors/solarwinds.md)
- [Speechmatics](https://thirdpartyindex.com/vendors/speechmatics.md): User analytics monitoring software
- [Split.io](https://thirdpartyindex.com/vendors/split-io.md): --- Platform Services and Enablement ---  Data Platform
- [Sprout Social](https://thirdpartyindex.com/vendors/sprout-social.md)
- [SproutVideo](https://thirdpartyindex.com/vendors/sproutvideo.md)
- [SuperIntern](https://thirdpartyindex.com/vendors/superintern.md): Application logging, monitoring, observability
- [Swifteq](https://thirdpartyindex.com/vendors/swifteq.md)
- [Tavily](https://thirdpartyindex.com/vendors/tavily.md): Data storage; Managed database service
- [TeamDynamix](https://thirdpartyindex.com/vendors/teamdynamix.md)
- [Temporal](https://thirdpartyindex.com/vendors/temporal.md): (Optional) Visibility, monitoring and analysis of business and operational data for Namespaces hosted in Google Cloud or Microsoft Azure.
- [Textkernel](https://thirdpartyindex.com/vendors/textkernel.md): Cloud hosting services; Search services
- [Textline](https://thirdpartyindex.com/vendors/textline.md): Search Engine
- [ThoughtSpot](https://thirdpartyindex.com/vendors/thoughtspot.md)
- [Ticketure](https://thirdpartyindex.com/vendors/ticketure.md): Application Logging
- [Tonkean](https://thirdpartyindex.com/vendors/tonkean.md): Hosting index database
- [Torq Technologies](https://thirdpartyindex.com/vendors/torq-technologies.md): Search functionality
- [TradeCentric](https://thirdpartyindex.com/vendors/tradecentric.md)
- [Trengo](https://thirdpartyindex.com/vendors/trengo.md): Cloud Hosting
- [Triple Whale](https://thirdpartyindex.com/vendors/triple-whale.md): Database engine
- [Tropic](https://thirdpartyindex.com/vendors/tropicapp-io.md): Search and indexing
- [TrueLearn](https://thirdpartyindex.com/vendors/truelearn.md): Search and indexing services
- [Twilio](https://thirdpartyindex.com/vendors/twilio.md): Elastic provides support system indexing, search query optimisation, and operational log analytics for specific Twilio Products and Services
- [Twingate](https://thirdpartyindex.com/vendors/twingate.md): Database hosting and management
- [Unstructured](https://thirdpartyindex.com/vendors/unstructured.md): Log management & technical support services
- [User Interviews](https://thirdpartyindex.com/vendors/user-interviews.md): Enables search and filtering functionality on UI’s platform
- [Userflow](https://thirdpartyindex.com/vendors/userflow.md)
- [Veeam Software](https://thirdpartyindex.com/vendors/veeam-software.md): Provides search and analytics engine used for log analysis and data indexing
- [Veeva Systems](https://thirdpartyindex.com/vendors/veeva-systems.md): Infrastructure, support and content provision
- [Velou](https://thirdpartyindex.com/vendors/velou.md): Search indexing and retrieval
- [Vertesia](https://thirdpartyindex.com/vendors/vertesia.md): Provision of Services to the Customer
- [Very Good Security](https://thirdpartyindex.com/vendors/very-good-security.md): SIEM
- [Voltage Park](https://thirdpartyindex.com/vendors/voltage-park.md)
- [Webflow](https://thirdpartyindex.com/vendors/webflow.md): Product search functionality and analytics
- [WebFX](https://thirdpartyindex.com/vendors/webfx.md): Text search and analytics; Used as an analytics platform.
- [Writer](https://thirdpartyindex.com/vendors/writer.md): Infrastructure
- [xAI](https://thirdpartyindex.com/vendors/spacexai.md): Services and support
- [ZeeMee](https://thirdpartyindex.com/vendors/zeemee.md)
- [ZeroFOX](https://thirdpartyindex.com/vendors/zerofox.md): Log Management

## Security record

CISA's Known Exploited Vulnerabilities catalog lists 3 vulnerabilities in its software:

- CVE-2014-3120 (Elasticsearch), listed 2022-03-25: Elasticsearch Remote Code Execution Vulnerability
- CVE-2015-1427 (Elasticsearch), listed 2022-03-25: Elasticsearch Groovy Scripting Engine Remote Code Execution Vulnerability
- CVE-2019-7609 (Kibana), listed 2022-01-10: Kibana Arbitrary Code Execution

## Service status

Incidents it reported on its own status page.

- Last 90 days: 19 reported incidents (18 major or critical, 1 minor, 0 with no impact stated)
- Typical time to resolve: 4 h 47 min
- Status page last read: 2026-11-12
- Its status page says now: Partial System Outage (affected: AWS Bahrain (me-south-1): major outage)
- 2026-11-04: mOLTP PrivateLink connectivity issue (major)
- 2026-10-23: Elastic Support Portal is unavailable (major)
- 2026-10-22: 403 error when trying to access Autoops in newly created serverless projects (major)
- 2026-10-20: Elastic Cloud scaling issues in Azure (major)
- 2026-10-20: Degraded availability for some Elastic Cloud Hosted and Serverless deployments in GCP europe-west2 (London) (major)
- 2026-10-08: Delayed or Unavailable project operation in GCP us-central1 (major)
- 2026-10-06: Delayed Serverless Metrics in Azure UAE North region (major)
- 2026-09-23: Degraded Performance: Cloud Provisioning Delays (major)

## Incidents reported by Elasticsearch's subprocessors

Incidents reported in the last 30 days on their own status pages by 3 vendors Elasticsearch lists as subprocessors. A subprocessor list names a company, not the service an incident touched.

- 2026-11-12: [Supabase](https://thirdpartyindex.com/vendors/supabase#status), which Elasticsearch lists as a subprocessor, reported Storage request degradation in eu-west-1 (minor)
- 2026-11-11: [Supabase](https://thirdpartyindex.com/vendors/supabase#status), which Elasticsearch lists as a subprocessor, reported Project Lifecycle Issues in ap-northeast-1 (minor)
- 2026-11-08: [Supabase](https://thirdpartyindex.com/vendors/supabase#status), which Elasticsearch lists as a subprocessor, reported Interruption in connections to Supavisor in eu-west-2 (no impact stated)
- 2026-11-06: [Supabase](https://thirdpartyindex.com/vendors/supabase#status), which Elasticsearch lists as a subprocessor, reported Increased Errors with Project Lifecycle Operations in US-West-2 (minor)
- 2026-11-05: [Supabase](https://thirdpartyindex.com/vendors/supabase#status), which Elasticsearch lists as a subprocessor, reported Intermittent 502/503 errors for pg\_net calls to Edge Functions (minor)
- 2026-11-04: [Supabase](https://thirdpartyindex.com/vendors/supabase#status), which Elasticsearch lists as a subprocessor, reported Storage issues in us-east-1 and eu-central-1 (minor)
- 2026-11-04: [Supabase](https://thirdpartyindex.com/vendors/supabase#status), which Elasticsearch lists as a subprocessor, reported Intermittent errors on Supavisor Shared Pooler in us-east-2 (minor)
- 2026-11-03: [Supabase](https://thirdpartyindex.com/vendors/supabase#status), which Elasticsearch lists as a subprocessor, reported Management API Postgres config updates overwriting previous updates (no impact stated)
- 2026-11-02: [Supabase](https://thirdpartyindex.com/vendors/supabase#status), which Elasticsearch lists as a subprocessor, reported Storage uploads failing in us-east-1 (minor)
- 2026-11-01: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Elasticsearch lists as a subprocessor, reported Elevated Instant Payouts failures (no impact stated)
- 2026-10-31: [Supabase](https://thirdpartyindex.com/vendors/supabase#status), which Elasticsearch lists as a subprocessor, reported PG15 -> PG17 Upgrade Failures (no impact stated)
- 2026-10-30: [Supabase](https://thirdpartyindex.com/vendors/supabase#status), which Elasticsearch lists as a subprocessor, reported Logs degraded in multiple regions (no impact stated)
- 2026-10-28: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Elasticsearch lists as a subprocessor, reported Elevated Issuing errors from 17:13 - 20:41 UTC (minor)
- 2026-10-28: [Supabase](https://thirdpartyindex.com/vendors/supabase#status), which Elasticsearch lists as a subprocessor, reported Delayed Log Delivery from 14:10 - 15:30 UTC (minor)
- 2026-10-24: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Elasticsearch lists as a subprocessor, reported Elevated Blik errors (no impact stated)
- 2026-10-22: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Elasticsearch lists as a subprocessor, reported Elevated Bancontact errors (no impact stated)
- 2026-10-22: [Supabase](https://thirdpartyindex.com/vendors/supabase#status), which Elasticsearch lists as a subprocessor, reported Log Drain Issues (minor)
- 2026-10-22: [Supabase](https://thirdpartyindex.com/vendors/supabase#status), which Elasticsearch lists as a subprocessor, reported Elevated Mgmt API Error Rates in Multiple Regions (minor)
- 2026-10-22: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Elasticsearch lists as a subprocessor, reported Elevated Bancontact errors (no impact stated)
- 2026-10-22: [Supabase](https://thirdpartyindex.com/vendors/supabase#status), which Elasticsearch lists as a subprocessor, reported Elevated Mgmt API Error Rates in Multiple Regions (major)
- 2026-10-22: [Supabase](https://thirdpartyindex.com/vendors/supabase#status), which Elasticsearch lists as a subprocessor, reported Project lifecycle operation errors in the EU region (major)
- 2026-10-21: [Supabase](https://thirdpartyindex.com/vendors/supabase#status), which Elasticsearch lists as a subprocessor, reported Intermittent connection errors via the connection pooler in us-east-1 (no impact stated)
- 2026-10-21: [Supabase](https://thirdpartyindex.com/vendors/supabase#status), which Elasticsearch lists as a subprocessor, reported Project lifecycle operations such as project creation, pausing, and restoration, in all regions (major)
- 2026-10-20: [Supabase](https://thirdpartyindex.com/vendors/supabase#status), which Elasticsearch lists as a subprocessor, reported Projects stuck in restarting state (no impact stated)
- 2026-10-20: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Elasticsearch lists as a subprocessor, reported Spike in cancellations and expired errors with PayByBank payments (no impact stated)
- 2026-10-20: [MongoDB](https://thirdpartyindex.com/vendors/mongodb#status), which Elasticsearch lists as a subprocessor, reported GCP Availability Zone europe-west2-b connectivity issues (minor)
- 2026-10-20: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Elasticsearch lists as a subprocessor, reported Elevated Revolut Pay errors (no impact stated)
- 2026-10-19: [Supabase](https://thirdpartyindex.com/vendors/supabase#status), which Elasticsearch lists as a subprocessor, reported Support Form Errors (minor)
- 2026-10-17: [Supabase](https://thirdpartyindex.com/vendors/supabase#status), which Elasticsearch lists as a subprocessor, reported Project creation errors ap-ne1 (minor)
- 2026-10-15: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Elasticsearch lists as a subprocessor, reported Elevated declines on Mastercard (no impact stated)
- 2026-10-15: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Elasticsearch lists as a subprocessor, reported Elevated declines on Visa (no impact stated)
- 2026-10-15: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Elasticsearch lists as a subprocessor, reported Elevated Amazon Pay errors (no impact stated)

## Recent changes

Changes to its documents and subprocessor list since monitoring began.

- 2026-10-07: Changed registry listing: fedramp:FR2004446306 ([evidence](https://thirdpartyindex.com/evidence/61906))
- 2026-09-30: Changed registry listing: fedramp:FR2004446306 ([evidence](https://thirdpartyindex.com/evidence/25653))
- 2026-09-24: Changed subprocessor: Google LLC (GCP) (locations: United States and Singapore → United States, United States and Belgium, United States, Belgium, and Singapore; purpose: Hosting for Jina AI Reader and other API services → Hosting and i…) ([evidence](https://thirdpartyindex.com/evidence/8271))
- 2026-09-24: Changed subprocessor: MongoDB, Inc. (purpose: Underlying caching layer and database for backend services for Jina Reader AI → Caching layer and database for Jina Reader) ([evidence](https://thirdpartyindex.com/evidence/8271))
- 2026-09-24: Changed subprocessor: Serper (purpose: SERP API provider (Google Search) for Jina Reader AI → SERP API (Google Search) for Jina Search) ([evidence](https://thirdpartyindex.com/evidence/8271))
- 2026-09-24: Added subprocessor: Atlassian Statuspage ([evidence](https://thirdpartyindex.com/evidence/8271))
- 2026-09-24: Added subprocessor: Cloudflare, Inc. ([evidence](https://thirdpartyindex.com/evidence/8271))
- 2026-09-24: Added subprocessor: Stripe, Inc. ([evidence](https://thirdpartyindex.com/evidence/8271))
- 2026-09-24: Added subprocessor: Supabase, Inc. ([evidence](https://thirdpartyindex.com/evidence/8271))
- 2026-09-24: Added subprocessor: ThorData ([evidence](https://thirdpartyindex.com/evidence/8271))

Feed: https://thirdpartyindex.com/vendors/elasticsearch/changes.atom

The subprocessor list as we read it on any date: https://thirdpartyindex.com/labs/time-machine/elasticsearch

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api