Grafana
Transparency
Breakdown
| Subprocessor list | 30 / 30 | |
| Processing locations | 8 / 8 | |
| Purposes | 7 / 7 | |
| Data processing addendum | 12 / 12 | |
| Trust center | 8 / 8 | |
| Privacy policy | 6 / 6 | |
| security.txt | not found | 0 / 6 |
| Security page | 5 / 5 | |
| Status page | 5 / 5 | |
| Vulnerability disclosure | 5 / 5 | |
| Pages still reachable | 8 / 8 | |
| Total | 94 / 100 |
Only documents we can retrieve count: a page behind a login or a broken link scores nothing.
Badge
For Grafana's own site; it updates with the rating.
<a href="https://thirdpartyindex.com/vendors/grafana"><img src="https://thirdpartyindex.com/badge/grafana.svg" alt="Grafana transparency rating on Third Party Index" height="20"></a>[](https://thirdpartyindex.com/vendors/grafana)Documents
| Document | Verified | Changed | Evidence |
|---|---|---|---|
| Trust center safebase | snapshot | ||
| Subprocessor list | snapshot | ||
| Data processing addendum | snapshot | ||
| Privacy policy | snapshot | ||
| Terms | snapshot | ||
| Security page | snapshot | ||
| Status page statuspage | snapshot | ||
| Security advisories | snapshot |
Subprocessors
| Name | Purpose | Location | Listed since |
|---|---|---|---|
| AlphaAI Technologies (Tavily) | Optional: AI feature | USA (Default) | |
| Alphabet Inc., Google (GCP)1600 Amphitheatre Parkway Mountain View, CA 94043 | Infrastructure, Cloud Service Provider, Optional: AI feature | USA (Default)* | |
| Amazon.com Inc. (AWS)410 Terry Ave N, Seattle, WA 98109-5210 | Infrastructure, Cloud Service Provider, Optional: AI feature | USA (Default)* | |
| Anthropic548 Market St, PMB 90375, San Francisco, CA 94104 | Optional: AI feature | USA (Default) | |
| Microsoft Corporation (Azure)One Microsoft Way, Redmond, WA 98052-6399 | Infrastructure, Cloud Service Provider | USA (Default)* | |
| OpenAI3180 18th St., San Francisco, CA 94101 | Optional: AI feature | USA (Default) | |
| Palantir Technologies Inc.100 Hamilton Ave. Suite 300 Palo Alto, CA 94301 | For customers using Grafana’s Federal Cloud offering | USA (Default) | |
| Twilio Inc. (Sendgrid)375 Beale St Suite 300 San Francisco, CA 94105 | Email, Alerting for SaaS | USA (Default) |
Listed as a subprocessor by (21)
Purposes as each company states them.
Alcide alcide.io
Avoma avoma.com Logging and Monitoring
Browserbase browserbase.com Monitoring/Logs; Provides data visualization and analytics tools and hosting (Grafana Cloud). Responsible for storing and processing metrics, logs, and traces as configured by the customer. Browserbase defines dashboards, data sources, and user access permissions within Grafana’s platform.
Clay clay.com Logging and metrics
Forcepoint forcepoint.com Web application
InMoment inmoment.com System monitoring
Jimdo jimdo.com
- Laravel laravel.com Observability
Optro optro.ai Security logging, metrics, and reporting
Parallel Web Systems parallel.ai Logging and observability
Podium podium.com
Rapid7 rapid7.com
Redpanda redpanda.com Operational Alerting and Dashboards
SnapLogic snaplogic.com Cloud Monitoring Software
Sovrn sovrn.com Product metrics monitoring
SurrealDB surrealdb.com Product telemetry and stack visualisation tool
Synadia synadia.com Dashboard Visualization
Tackle.io tackle.io Observability stack for metric collection, logging, and dashboarding
UKG ukg.com
Zapier zapier.com Observability, monitoring, and application reliability
replit replit.com
Security record
What public security catalogs list for Grafana, in their words.
Known exploited vulnerabilities
2 vulnerabilities in Grafana's software that CISA lists as exploited in the wild.
| CVE | Product | Vulnerability | Listed |
|---|---|---|---|
| CVE-2021-43798 | Grafana | Grafana Path Traversal Vulnerability | evidence |
| CVE-2021-39226 | Grafana | Grafana Authentication Bypass Vulnerability | evidence |
Changes
None since tracking began.