# Fastly

Fastly declares [5 subprocessors](https://thirdpartyindex.com/vendors/fastly#subprocessors), plus 11 of its own affiliates, in [its subprocessor list](https://docs.fastly.com/products/sub-processors), which we last checked on 2026-11-11 ([evidence](https://thirdpartyindex.com/evidence/787)). They include [MongoDB](https://thirdpartyindex.com/vendors/mongodb) and [Backblaze](https://thirdpartyindex.com/vendors/backblaze). No published changes since we first read it on 2026-09-21. [68 tracked vendors](https://thirdpartyindex.com/vendors/fastly#used-by) name Fastly as a subprocessor, including [Salesforce](https://thirdpartyindex.com/vendors/salesforce), [MongoDB](https://thirdpartyindex.com/vendors/mongodb) and [GitHub](https://thirdpartyindex.com/vendors/github).

Fastly (fastly.com): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/fastly
- Documents last verified: 2026-11-11
- Transparency rating: 94/100 (how much it publishes, not how secure it is): Subprocessor list 30/30; Processing locations 8/8; Purposes 7/7; Data processing addendum 12/12; Trust center 8/8; Privacy policy 6/6; security.txt 0/6 (not found); Security page 5/5; Status page 5/5; Vulnerability disclosure 5/5; Pages still reachable 8/8
- Supply chain: relies on 2 tracked vendors directly, 32 within two hops, 229 within three; 68 tracked vendors rely on it directly, 1420 within two hops, 2781 within three
- Cite as: Fastly, Third Party Index, https://thirdpartyindex.com/vendors/fastly (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Trust center | https://www.fastly.com/trust | 2026-11-11 | 2026-09-28 |
| Subprocessor list | https://docs.fastly.com/products/sub-processors | 2026-11-11 | 2026-09-21 |
| Data processing addendum | https://www.fastly.com/data-processing | 2026-11-11 | 2026-09-28 |
| Privacy policy | https://www.fastly.com/privacy | 2026-11-11 | 2026-09-28 |
| Terms | https://www.fastly.com/terms | 2026-11-11 | 2026-09-28 |
| Security page | https://www.fastly.com/solutions/security | 2026-11-11 | 2026-09-28 |
| Status page | https://www.fastlystatus.com/ | 2026-11-11 | 2026-11-11 |
| Security advisories | https://www.fastly.com/blog/category/security | 2026-11-11 | 2026-11-03 |

## Subprocessors (5)

As its own list states them.

| Subprocessor | Purpose | Location | Listed since |
|---|---|---|---|
| AWS Resources | Fastly uses AWS’s services for backend data hosting, logging, and observability. Products that use AWS’s services are the Next-Gen WAF, Bot Management and the Glitch Platform. AWS is also used for customer dashboards and audit logs, and in the provisioning and hosting of the control plane. | Name and Entity: 410 Terry Avenue North, Seattle, WA 98109-5210; Name and Entity: Amazon Web Services, Inc.; Processing Location: Australia, Brazil, Canada, France, Germany, India, Ireland, Japan, Singapore, South Africa, South Korea, Sweden, United Kingdom, United States | 2026-09-21 |
| [Backblaze Resources](https://thirdpartyindex.com/vendors/backblaze.md) | Fastly uses Backblaze’s services for data hosting. The product that uses Backblaze’s services is Fastly Object Storage. | Name and Entity: 201 Baldwin Ave, San Mateo, California, 94401; Name and Entity: Backblaze, Inc.; Processing Location: Netherlands, United States | 2026-09-21 |
| Google Resources | Fastly uses Google’s services for backend data hosting, data insights, logging, and observability. Products that use Google’s services include Image Optimizer, AI Accelerator, AI Assistant, KV Store, Secret Store, Observability features, and event monitoring services. | Name and Entity: 1600 Amphitheatre Parkway, Mountain View CA 94043; Name and Entity: Google LLC; Processing Location: Australia, Belgium, Canada, Germany, Japan, Netherlands, United Kingdom, United States | 2026-09-21 |
| [MongoDB Atlas Resources](https://thirdpartyindex.com/vendors/mongodb.md) | Fastly uses MongoDB Atlas’ services for backend data hosting. Products that use MongoDB Atlas’ services include Next-Gen WAF and its associated services. | Name and Entity: 1633 Broadway, 38th Floor New York NY 10019; Name and Entity: MongoDB Atlas; Processing Location: United States | 2026-09-21 |
| Wasabi Resources | Fastly uses Wasabi Technologies services for data hosting. The product that uses Wasabi Technologies' services is Fastly Object Storage. | Name and Entity: 75 Arlington Street, Suite 810, Boston, MA 02116; Name and Entity: Wasabi Technologies, LLC; Processing Location: Australia, France, Germany, Italy, Japan, United Kingdom, United States | 2026-09-21 |

Read from ([evidence](https://thirdpartyindex.com/evidence/787)). CSV: https://thirdpartyindex.com/vendors/fastly/subprocessors.csv

### Its own affiliates (11)

- Fastly GmbH (Entity: Birchin Court, 5th Floor, 19-25 Birchin Lane, London, England, EC3V 9DU; Entity: c/o Rueter & Partner, Prielmayerstraße 3, 80335 München, Germany; Processing Location: Germany; Processing Location: United Kingdom)
- Fastly Australia Pty Ltd (Entity: Tricor Chew and Dormers Pty Ltd Level 3 1049 Victoria Road West Ryde, NSW 2114; Processing Location: Australia)
- Fastly Canada Inc. (Entity: 2900 - 733 Seymour Street, PO Box 1, Vancouver, BC V6B OS6; Processing Location: Canada)
- Fastly Cloud Iberica, S.L. (Entity: Calle Marques De Urquijo 26, Planta 3, Puerta IZ, 28008 Madrid, Spain; Processing Location: Spain)
- Fastly France SAS (Entity: 31-35 Rue De La Fédération, 75015 Paris, France; Processing Location: France)
- Fastly India Private Limited (Entity: 56/57 Mittal Chambers 228 Barrister Rajani Patel Marg, Nariman Point Mumbai 400-021; Processing Location: India)
- Fastly International (Holdings) Limited (Entity: Birchin Court, 5th Floor, 19-25 Birchin Lane, London, England, EC3V 9DU; Processing Location: United Kingdom)
- Fastly Kabushiki Kaisha (Entity: Tsao Hibiya 8F, 3-3-13 Shinbashi, Minato-ku, Tokyo 105-0004 Japan; Processing Location: Japan)
- Fastly Netherlands B.V. (Entity: Markt 14, 6211CJ Maastricht, Netherlands; Processing Location: Netherlands)
- Fastly SG Pte. Ltd. (Entity: 101 Thomson Road #14-02/03 United Square 307591 Singapore; Processing Location: Singapore)
- Fastly Sweden AB (Entity: c/o Svalner Skatt & Transaktion Box 16115, 103 23 Stockholm, Sweden; Processing Location: Sweden)

## Security program

What Fastly, Inc.'s Form 10-K for fiscal 2025, filed Feb 25, 2026 (Item 1C) says, in its words (https://www.sec.gov/Archives/edgar/data/1517413/000151741326000053/0001517413-26-000053-index.htm).

- Led by: Chief Information Security Officer
- Board oversight: Board of Directors
- Practices named: Incident response plan, Penetration testing, Vulnerability management, Threat intelligence, Cyber insurance
- Engages outside assessors or consultants
- Reviews its suppliers' security
- Says no cybersecurity incident has materially affected it

## Web Technologies

Fastly's homepage made 231 requests to 36 domains, 22 services controlled by another company, and 2 domains not identified. Loaded on 2026-11-03 by a browser that accepted nothing; other visits may load more or less. What a page loads is not a list of who receives customer data.

22 third parties by category: Advertising 9 (Google Cloud, The Trade Desk, Inc., StackAdapt, MNTN, Inc., Microsoft; reviewed: Clickagy, FreeWheel; usually detected as Advertising: Xandr, Magnite, Inc.); Analytics 6 (ZoomInfo, Adobe, Pendo, LinkedIn, Meta, Intentsify, LLC); Marketing automation 1 (6Sense Insights, Inc.); A/B Testing 1 (Webflow); Cookie compliance 1 (OneTrust); Development 1 (reviewed: Pusher); Documentation 1 (TechTarget, Inc.); Issue trackers 1 (usually detected as Issue trackers: Sentry); RUM 1 (SpeedCurve). Each company that appears controlled by another organization is counted once, under the main category of the technologies detected from it on this homepage or, when none was, the category recorded from the company's own page (marked reviewed) or else the one it is usually detected as on other published homepages (marked as such); unclassified: none of these.

### Third parties (22)

- 6Sense Insights, Inc.: 19 requests to 6sc.co, 6sense.com; 6sense
- ZoomInfo: 17 requests to insent.ai, zoominfo.com, zi-scripts.com; Insent, Zoominfo
- Google Cloud: 14 requests to google.com, doubleclick.net, googletagmanager.com; DoubleClick Floodlight, Google Tag Manager
- OneTrust: 12 requests to cookielaw.org, onetrust.com; OneTrust
- Adobe: 9 requests to bizible.com, marketo.net, bizibly.com, mktoresp.com; Adobe Marketo Measure, Marketo
- Webflow: 9 requests to intellimize.co; Intellimize
- The Trade Desk, Inc.: 8 requests to adsrvr.org; theTradeDesk
- Clickagy: 7 requests to clickagy.com
- Pendo: 7 requests to pendo.io; Pendo 2.348.0\_prod-io
- StackAdapt: 5 requests to stackadapt.com; StackAdapt
- MNTN, Inc.: 4 requests to mountain.com; Mountain
- LinkedIn: 3 requests to linkedin.com, licdn.com; Linkedin Insight Tag
- Meta: 3 requests to facebook.net, facebook.com; Facebook Pixel 2.9.433
- Microsoft: 3 requests to bing.com; Microsoft Advertising
- TechTarget, Inc.: 2 requests to techtarget.com; TechTarget
- Xandr: 2 requests to adnxs.com
- FreeWheel: 1 request to bidr.io
- Intentsify, LLC: 1 request to intentsify.io; Intentsify
- Magnite, Inc.: 1 request to rubiconproject.com
- Pusher: 1 request to pusher.com
- Sentry: 1 request to sentry.io
- SpeedCurve: 1 request to speedcurve.com; SpeedCurve 4.5.3

### Unknown (2)

Domains not identified yet: 35.160.46.251, usbrowserspeed.com

### First party (1)

- Fastly: 99 requests to fastly.com; Astro, Google Analytics, HSTS, HTTP/3, Open Graph, Priority Hints, RSS, Sentry, core-js 3.32.2

14 tracked companies loaded by the homepage are not in Fastly's subprocessor list. A website can use a service without it processing customer data.

## Subprocessor of (68)

Tracked vendors whose own subprocessor lists name it, and what they say they use it for.

- [1000minds](https://thirdpartyindex.com/vendors/1000minds.md): Content delivery network (CDN) and load balancing; Engineering
- [Acquia](https://thirdpartyindex.com/vendors/acquia.md): Content Delivery Network / CDN
- [AddSearch](https://thirdpartyindex.com/vendors/addsearch.md): Fastly provides CDN services for our website.
- [Adobe](https://thirdpartyindex.com/vendors/adobe.md): Fastly assists in providing a subset of Adobe Experience Cloud products content delivery network services to help provide high availability and performance to A…
- [Amplience](https://thirdpartyindex.com/vendors/amplience.md): Content Delivery
- [Apester](https://thirdpartyindex.com/vendors/apester.md): CDN
- [Appwrite](https://thirdpartyindex.com/vendors/appwrite.md): Cloud infrastructure
- [Aprimo](https://thirdpartyindex.com/vendors/aprimo.md): CDN Provider
- [Bitwarden](https://thirdpartyindex.com/vendors/bitwarden.md): Hosting infrastructure
- [Blackbaud](https://thirdpartyindex.com/vendors/blackbaud.md)
- [Braze](https://thirdpartyindex.com/vendors/braze.md): A tool that manages network traffic, optimizing the flow and security of data from backend systems to the Braze dashboard.
- [Brightcove](https://thirdpartyindex.com/vendors/brightcove.md): Content delivery
- [Builder.io](https://thirdpartyindex.com/vendors/builder-io.md)
- [CARTO](https://thirdpartyindex.com/vendors/carto.md): cloud computing services (content distribution network)
- [Chameleon Intelligent Tech](https://thirdpartyindex.com/vendors/chameleon-intelligent-tech.md): Product Infrastructure
- [Chartbeat](https://thirdpartyindex.com/vendors/chartbeat.md): CDN; Content Delivery Network used to distribute Chartbeat code and configurations.
- [Climatiq](https://thirdpartyindex.com/vendors/climatiq.md): Application Infrastructure Provider; Cloud provider
- [Cloudinary](https://thirdpartyindex.com/vendors/cloudinary.md): CDN
- [Contentstack](https://thirdpartyindex.com/vendors/contentstack.md): CDN
- [DevRev](https://thirdpartyindex.com/vendors/devrev.md): Edge cloud platform - (CDN) services and security/Authentication & security.
- [Expel](https://thirdpartyindex.com/vendors/expel.md): Signal Sciences Web Application Firewall for Workbench
- [Filestack](https://thirdpartyindex.com/vendors/filestack.md): ● Content Delivery (CDN); ● User data
- [Firebase](https://thirdpartyindex.com/vendors/firebase.md): headquartered in the United States, to deliver content and managed services on Firebase Hosting to end-users, via the Fastly content delivery network.
- [FireHydrant](https://thirdpartyindex.com/vendors/firehydrant.md): Content delivery
- [Front](https://thirdpartyindex.com/vendors/front.md): Caching service provider
- [Fullstory](https://thirdpartyindex.com/vendors/fullstory.md): Real-time threat detection and prevention; web application Firewall
- [GitHub](https://thirdpartyindex.com/vendors/github.md): Content delivery service
- [Goldcast](https://thirdpartyindex.com/vendors/goldcast.md): Content delivery network
- [Greenhouse](https://thirdpartyindex.com/vendors/greenhouse.md): Delivering assets (images, documents, client-side source code) and firewall services
- [GrowthBook](https://thirdpartyindex.com/vendors/growthbook.md): CDN
- [Harness.io](https://thirdpartyindex.com/vendors/harness-io.md): --- Platform Services and Enablement ---  Content Delivery Network
- [HUMAN Security](https://thirdpartyindex.com/vendors/human-security.md): Content Delivery Network
- [InEvent](https://thirdpartyindex.com/vendors/inevent.md): Video streaming CDN
- [Iru](https://thirdpartyindex.com/vendors/iru.md): Content Distribution Network
- [JDXpert](https://thirdpartyindex.com/vendors/jdxpert.md): Web Application Firewall service securing all US JDXpert client sites (not used by UK and Canadian client sites)
- [JWX](https://thirdpartyindex.com/vendors/jwx.md): Content delivery network
- [Kaltura](https://thirdpartyindex.com/vendors/kaltura.md): Content delivery network
- [Khoros](https://thirdpartyindex.com/vendors/khoros.md): Content delivery network
- [Kolide](https://thirdpartyindex.com/vendors/kolide.md): Content Delivery Network
- [Kontent.ai](https://thirdpartyindex.com/vendors/kontent-ai.md)
- [Lark](https://thirdpartyindex.com/vendors/lark.md): CDN
- [LaunchDarkly](https://thirdpartyindex.com/vendors/launchdarkly.md): Content delivery network provider
- [Magnolia](https://thirdpartyindex.com/vendors/magnolia.md): CDN/WAF services
- [MongoDB](https://thirdpartyindex.com/vendors/mongodb.md): Content Delivery Network for Support
- [mParticle](https://thirdpartyindex.com/vendors/mparticle.md)
- [New Relic](https://thirdpartyindex.com/vendors/new-relic.md): Traffic routing & TLS Termination
- [nylas](https://thirdpartyindex.com/vendors/nylas.md): CDN, Web Application Firewall / DDoS Protection
- [OpenSesame](https://thirdpartyindex.com/vendors/opensesame.md): Network/CDN
- [OverOps](https://thirdpartyindex.com/vendors/overops.md): --- Platform Services and Enablement ---  Content Delivery Network
- [Posit](https://thirdpartyindex.com/vendors/posit.md): Website hosting
- [Qencode](https://thirdpartyindex.com/vendors/qencode.md): Content delivery network services to improve the delivery of content globally.
- [Railway](https://thirdpartyindex.com/vendors/railway.md): Content Delivery Network
- [Rokt](https://thirdpartyindex.com/vendors/rokt.md)
- [Salesforce](https://thirdpartyindex.com/vendors/salesforce.md)
- [Scaleflex](https://thirdpartyindex.com/vendors/scaleflex.md): CDN provider; Scaleflex works with FASTLY as a Content Delivery Network provider to support the reliable, scalable delivery of our solutions.
- [Seenthis](https://thirdpartyindex.com/vendors/seenthis.md): Content network provider
- [Shortcut](https://thirdpartyindex.com/vendors/shortcut.md): Content Delivery Network
- [Smartsheet](https://thirdpartyindex.com/vendors/smartsheet.md): Content delivery network
- [Split.io](https://thirdpartyindex.com/vendors/split-io.md): --- Platform Services and Enablement ---  Content Delivery Network
- [StreamShark](https://thirdpartyindex.com/vendors/streamshark.md): Content Delivery Network (CDN) Services
- [StreamYard](https://thirdpartyindex.com/vendors/streamyard.md): Content Delivery and Traffic Filtering
- [Tableau](https://thirdpartyindex.com/vendors/tableau.md)
- [Teamtailor](https://thirdpartyindex.com/vendors/teamtailor.md): Using a custom domain, and CDN for the Career Site on a custom domain. \[Custom domain\]
- [Turtl](https://thirdpartyindex.com/vendors/turtl.md): Content delivery network
- [Ubiq Security](https://thirdpartyindex.com/vendors/ubiq-security.md): CDN & WAF
- [Uploadcare](https://thirdpartyindex.com/vendors/uploadcare.md): CDN
- [Woopra](https://thirdpartyindex.com/vendors/woopra.md): Content Delivery Network Service
- [Yesware](https://thirdpartyindex.com/vendors/yesware.md): Cloud provider; Website visitor IP addresses and request metadata for the marketing site only; no product or tracking traffic

## Incidents reported by Fastly's subprocessors

Incidents reported in the last 30 days on their own status pages by 1 vendor Fastly lists as a subprocessor. A subprocessor list names a company, not the service an incident touched.

- 2026-10-20: [MongoDB](https://thirdpartyindex.com/vendors/mongodb#status), which Fastly lists as a subprocessor, reported GCP Availability Zone europe-west2-b connectivity issues (minor)

The subprocessor list as we read it on any date: https://thirdpartyindex.com/labs/time-machine/fastly

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api