# Flagsmith

We monitor the [subprocessor list Flagsmith publishes](https://www.flagsmith.com/gdpr-sub-processor-list), which we last checked on 2026-11-11, but have not read any entries from it. [4 tracked vendors](https://thirdpartyindex.com/vendors/flagsmith#used-by) name Flagsmith as a subprocessor, including [ConnectWise](https://thirdpartyindex.com/vendors/connectwise), [Dataships](https://thirdpartyindex.com/vendors/dataships) and [Axcient](https://thirdpartyindex.com/vendors/axcient).

Flagsmith (flagsmith.com): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/flagsmith
- Documents last verified: 2026-11-11
- Transparency rating: 27/100 (how much it publishes, not how secure it is): Subprocessor list 0/30 (published; no entries could be read); Processing locations 0/8 (no list); Purposes 0/7 (no list); Data processing addendum 0/12 (not found); Trust center 8/8; Privacy policy 6/6; security.txt 0/6 (not found); Security page 0/5 (not found); Status page 5/5; Vulnerability disclosure 0/5 (not found); Pages still reachable 8/8
- Supply chain: relies on 0 tracked vendors directly, 0 within two hops, 0 within three; 4 tracked vendors rely on it directly, 9 within two hops, 9 within three
- Cite as: Flagsmith, Third Party Index, https://thirdpartyindex.com/vendors/flagsmith (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Trust center | https://trust.flagsmith.com/ | 2026-11-11 | 2026-11-08 |
| Subprocessor list | https://www.flagsmith.com/gdpr-sub-processor-list | 2026-11-11 | 2026-09-23 |
| Privacy policy | https://www.flagsmith.com/privacy-policy | 2026-11-11 | 2026-09-23 |
| Terms | https://www.flagsmith.com/terms-of-service | 2026-11-11 | 2026-09-23 |
| Status page | https://status.flagsmith.com/ | 2026-11-11 | 2026-11-11 |

## Subprocessors (0)

No subprocessor list has been found or read for this vendor.

## Compliance

As its trust center lists them.

- Audited: SOC 2 ([evidence](https://thirdpartyindex.com/evidence/10921))
- Claimed: SOC 2 Type II, HIPAA, GDPR ([evidence](https://thirdpartyindex.com/evidence/89013))

## Web Technologies

Flagsmith's homepage made 194 requests to 43 domains, 20 services controlled by another company, and 1 domain not identified. Loaded on 2026-11-10 by a browser that accepted nothing; other visits may load more or less. What a page loads is not a list of who receives customer data.

20 third parties by category: Analytics 9 (Amplitude, TikTok, Reo.Dev, LinkedIn, Albacross, FirstTouch, TikTok; usually detected as Analytics: Cloudflare, G2.com); Advertising 3 (Google Cloud, Microsoft, Reddit, Inc.); Marketing automation 2 (HubSpot, Clearbit); CDN 1 (jsDelivr); Affiliate programs 1 (FirstPromoter); JavaScript libraries 1 (Webflow); Reviews 1 (Slashdot Media); Security 1 (usually detected as Security: Amazon Web Services); Widgets 1 (Vimkit (Jensa Ventures Inc.)). Each company that appears controlled by another organization is counted once, under the main category of the technologies detected from it on this homepage or, when none was, the category recorded from the company's own page (marked reviewed) or else the one it is usually detected as on other published homepages (marked as such); unclassified: none of these.

### Third parties (20)

- Webflow: 51 requests to website-files.com, d3e54v103j8qbb.cloudfront.net; Webflow 1.6.0, jQuery 3.5.1
- Google Cloud: 34 requests to gstatic.com, google.com, doubleclick.net, googletagmanager.com, fonts.googleapis.com; DoubleClick Floodlight, Google Analytics, Google Tag Manager, reCAPTCHA
- HubSpot: 29 requests to hsappstatic.net, hubspot.com, hsforms.com, hsforms.net, hubspotusercontent-eu1.net, hs-analytics.net, hs-banner.com, hs-scripts.com, hsadspixel.net, hubapi.com, hubspotvideo.com, usemessages.com; HubSpot
- Slashdot Media: 16 requests to sf-syn.com, fsdn.com; SourceForge Reviews
- Amplitude: 10 requests to amplitude.com; Amplitude
- Microsoft: 10 requests to clarity.ms, bing.com; Microsoft Advertising
- TikTok: 6 requests to tiktok.com; TikTok Pixel
- Reo.Dev: 5 requests to reo.dev; Reo.Dev
- Cloudflare: 4 requests to cloudflare.com
- G2.com: 3 requests to g2.com
- LinkedIn: 3 requests to linkedin.com, licdn.com; Linkedin Insight Tag
- Albacross: 2 requests to albacross.com; Albacross
- Reddit, Inc.: 2 requests to reddit.com, redditstatic.com; Reddit Ads
- Vimkit (Jensa Ventures Inc.): 2 requests to vimkit.app, vimkit.io; Vimkit
- jsDelivr: 2 requests to jsdelivr.net; jsDelivr
- Amazon Web Services: 1 request to s3-us-west-2.amazonaws.com
- Clearbit: 1 request to clearbitscripts.com; Clearbit
- FirstPromoter: 1 request to firstpromoter.com; FirstPromoter
- FirstTouch: 1 request to firsttouch.ai; FirstTouch
- TikTok: 1 request to tiktokw.us; TikTok Pixel

### Unknown (1)

Domains not identified yet: hubspotonwebflow.com

### First party (1)

- Flagsmith: 8 requests to flagsmith.com; Cloudflare, HSTS, HTTP/3, HubSpot Chat, Linkedin Ads, Microsoft Clarity, Open Graph, Webpack, core-js 3.19.0

12 tracked companies loaded by the homepage are not in Flagsmith's subprocessor list. A website can use a service without it processing customer data.

## Subprocessor of (4)

Tracked vendors whose own subprocessor lists name it, and what they say they use it for.

- [Axcient](https://thirdpartyindex.com/vendors/axcient.md): Feature Flags
- [ConnectWise](https://thirdpartyindex.com/vendors/connectwise.md): Feature Flags; Feature Flags (x360Portal and x360Sync)
- [Dataships](https://thirdpartyindex.com/vendors/dataships.md)
- [TeamForm](https://thirdpartyindex.com/vendors/teamform.md): Service and feature flag management within the TeamForm platform

## Service status

Incidents it reported on its own status page.

- Last 90 days: 2 reported incidents (1 major or critical, 1 minor, 0 with no impact stated)
- Typical time to resolve: 1 h 27 min
- Status page last read: 2026-11-12
- 2026-10-28: Admin and SDK API outage (critical)
- 2026-09-10: Delays processing flag changes (minor)
- 2026-03-03: Numeric values incorrectly being converted to numbers in environment documents (no impact stated)
- 2026-01-22: Data parsing issues in Edge API (minor)

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api