Grafana

grafana.com

Grafana declares 8 subprocessors in its subprocessor list, which we last checked on Nov 11, 2026 (evidence). They include Amazon Web Services, Google Cloud and Microsoft. No published changes since we first read it on Sep 22, 2026. 73 tracked vendors name Grafana as a subprocessor, including Zendesk, Mailgun and Zapier.

Subprocessors CSV of Grafana's subprocessors · Atom feed of Grafana's subprocessors DORA draft CSV of Grafana's subprocessors as declared by Grafana what's this? · 

8 third parties.

NamePurposeLocationListed since
AlphaAI Technologies (Tavily) Optional: AI featureUSA (Default)
Alphabet Inc. Infrastructure, Cloud Service Provider, Optional: AI featureUSA (Default)*
Amazon.com Inc. (AWS)410 Terry Ave N, Seattle, WA 98109-5210 Infrastructure, Cloud Service Provider, Optional: AI featureUSA (Default)*
Anthropic548 Market St, PMB 90375, San Francisco, CA 94104 Optional: AI featureUSA (Default)
Microsoft Corporation (Azure)One Microsoft Way, Redmond, WA 98052-6399 Infrastructure, Cloud Service ProviderUSA (Default)*
OpenAI3180 18th St., San Francisco, CA 94101 Optional: AI featureUSA (Default)
Palantir Technologies Inc.100 Hamilton Ave. Suite 300 Palo Alto, CA 94301 For customers using Grafana’s Federal Cloud offeringUSA (Default)
Twilio Inc. (Sendgrid)375 Beale St Suite 300 San Francisco, CA 94105 Email, Alerting for SaaSUSA (Default)

Web TechnologiesCSV of Grafana's web technologies · Atom feed of Grafana's web technologies

Grafana's homepage made 176 requests to 14 domains, and 7 services controlled by another company.

Analytics (2): LinkedIn, MetaAdvertising (1): Google CloudMarketing automation (1): ClearbitCookie compliance (1): OneTrustOther (1): reviewed as CMS: StoryblokUnclassified (1): no technology detected from them: Gravity

7 third parties by category: Analytics 2Advertising 1Marketing automation 1Cookie compliance 1Other 1Unclassified 1

Third parties 7 · 85 requests
Storyblok storyblok.com 31% of the page's requests 54
Google Cloudsubprocessor DoubleClick Floodlight Google Analytics Google Tag Manager 6% of the page's requests 11
OneTrust OneTrust 6% of the page's requests 11
LinkedIn Linkedin Insight Tag 2% of the page's requests 3
Meta Facebook Pixel 2.9.435 2% of the page's requests 3
Clearbit Clearbit 1% of the page's requests 2
Gravity trygravity.com <1% of the page's requests 1
First party 1 · 91 requests
Grafana Adobe Target 2.6.0 Google Cloud Google Cloud CDN Grafana Faro HSTS HTTP/3 Lucide Next.js 16.4.1 Next.js App Router Nginx Open Graph Priority Hints Radix UI React Rudderstack Vercel Vercel Speed Insights 2.0.0 Webpack core-js 3.32.2 52% of the page's requests 91

6 tracked companies loaded by the homepage are not in Grafana's subprocessor list. A website can use a service without it processing customer data.

Subprocessor of (73)CSV of the companies listing Grafana · Atom feed of the companies listing Grafana

1–50 of 73
  • Acrolinx acrolinx.com Log and metrics aggregation and analysis
  • Alation alation.com Log processing for debugging, troubleshooting, auditing, reporting, and detecting and alerting on application behavior
  • Alcide alcide.io
  • Arctic Wolf arcticwolf.com Logging, Data Aggregation, Visualization
  • Automox automox.com
  • Avoma avoma.com Logging and Monitoring
  • BetterCloud bettercloud.com Monitoring; [Website]( Analyzes System Metrics and provides Monitoring / Alerting
  • Browserbase browserbase.com Monitoring/Logs; Provides data visualization and analytics tools and hosting (Grafana Cloud). Responsible for storing and processing metrics, logs, and traces as configured by the customer. Browserbase defines dashboards, data sources, and user access permissions within Grafana’s platform.
  • BugHerd bugherd.com Observability
  • Capsule8 capsule8.com Operational dashboard (metrics) services
  • Cerebrium cerebrium.ai Monitoring and observability; Platform performance metrics
  • Ceros ceros.com Relevant Customer Data: IP address associated with login credentials. AI Features are optional and may be disabled by customers. When AI Features are disabled, Grafana will not process any data in connection with such features. If a customer elects to use AI Features, Grafana will process only the data included in the applicable user inputs for the purpose of generating AI outputs. AI interactions may be stored within Grafana for debugging purposes for a period of three (3) months, after which such data will be permanently deleted. Grafana will not use AI feature data to provide services to any other customers of Grafana or Ceros.; System Monitoring, AI Traffic Routing and Debugging
  • Check Point Software Technologies checkpoint.com Infrastructure Monitoring
  • Clay clay.com Logging and metrics
  • ComplyAdvantage complyadvantage.com Observability platform, collecting and processing metrics of our production telemetry for the purpose of monitoring the availability, security, and performance of our production services.
  • Conveo conveo.ai Cloud monitoring & LLM Observability; Processing Activity Description Observability for the Conveo Platform Data Residency / Processing Location UK Headquarters Location New York, United States
  • DitchCarbon ditchcarbon.com Metrics and dashboards
  • Enzuzo enzuzo.com Infrastructure Logs
  • Escape escape.tech Observability: traces, logs, metrics, profiles
  • fal fal.ai - Contact: legal-ops@grafana.com - Address: 29 Broadway Penthouse, New York, NY 10006 USA - Description: Connectivity monitoring, logging and analytics.; Service Monitoring and Logging
  • Flybits flybits.com
  • Forcepoint forcepoint.com Web application
  • Gainsight Software gainsight.com Application Monitoring
  • ImprovMX improvmx.com We use Grafana to handle metrics and logging.
  • Inception Labs inceptionlabs.ai Analytics and monitoring platform used to visualize and monitor metrics, logs, and data from various sources.; Data analytics
  • InMoment inmoment.com System monitoring
  • Jimdo jimdo.com
  • Juliahub juliahub.com
  • Kasten kasten.io Provides observability platform used for storage and analysis of service logs, metrics and traces of Veeam cloud services
  • Laivly laivly.com Application, infrastructure, and security monitoring.
  • LandingAI landing.ai Observability platform used for internal monitoring of system health and performance. - Grafana's Subprocessors: [List]( - Products: All (US).; Visualization and dashboarding software
  • Laravel laravel.com Observability
  • LightTable lighttable.ai Application monitoring
  • Linq linqapp.com
  • Lovable lovable.dev Log/trace/metrics storage
  • Luma AI lumalabs.ai Monitoring and observability provider
  • LumApps lumapps.com Monitoring and analyzing metrics, performances, logs and traces. Diagnostics of end user network reliability, performance and UX
  • Mailgun mailgun.com Analytics and logs
  • MasterControl mastercontrol.com Application monitoring, observability and metrics
  • OptiSigns optisigns.com Inc dba Grafana: Log & Monitoring
  • Optro optro.ai Security logging, metrics, and reporting
  • Outreach outreach.io Infrastructure Monitoring and Logging
  • Podium podium.com
  • QA Wolf qawolf.com Grafana Cloud provides monitoring, logging, and observability services for QA Wolf's infrastructure and application performance.
  • Rapid7 rapid7.com
  • Ravenna ravennahq.com
  • Reclaim.ai reclaim.ai Performance and infrastructure monitoring
  • Render render.com Monitoring / Observability
  • replit replit.com
  • Restate restate.dev Metrics and Observability; Observability
  • Show next 23

ComplianceCSV of Grafana's compliance · Atom feed of Grafana's compliance

Certified
Says it complies with

Certifications as Grafana's trust center lists them; reports are usually shared on request (evidence)

Security recordCSV of Grafana's security record · Atom feed of Grafana's security record

What public security catalogs list for Grafana, in their words.

Known exploited vulnerabilities

2 vulnerabilities in Grafana's software that CISA lists as exploited in the wild.

CVEProductVulnerabilityListed
CVE-2021-43798GrafanaGrafana Path Traversal Vulnerability
CVE-2021-39226GrafanaGrafana Authentication Bypass Vulnerability

Source: CISA Known Exploited Vulnerabilities catalog (evidence)

Service statusCSV of Grafana's status page incidents · Atom feed of Grafana's status page incidents

Aug 14: no incident reportedAug 15: no incident reportedAug 16: no incident reportedAug 17: no incident reportedAug 18: 1 incident (1 critical)Aug 19: no incident reportedAug 20: no incident reportedAug 21: no incident reportedAug 22: no incident reportedAug 23: no incident reportedAug 24: no incident reportedAug 25: 1 incident (1 minor)Aug 26: no incident reportedAug 27: 2 incidents (1 minor, 1 no impact stated)Aug 28: 2 incidents (1 major, 1 minor)Aug 29: no incident reportedAug 30: no incident reportedAug 31: no incident reportedSep 1: 1 incident (1 minor)Sep 2: 1 incident (1 no impact stated)Sep 3: 2 incidents (1 major, 1 minor)Sep 4: 3 incidents (1 major, 2 minor)Sep 5: no incident reportedSep 6: no incident reportedSep 7: no incident reportedSep 8: 2 incidents (2 minor)Sep 9: 1 incident (1 minor)Sep 10: no incident reportedSep 11: no incident reportedSep 12: 1 incident (1 minor)Sep 13: no incident reportedSep 14: 3 incidents (2 minor, 1 no impact stated)Sep 15: 1 incident (1 minor)Sep 16: no incident reportedSep 17: no incident reportedSep 18: no incident reportedSep 19: no incident reportedSep 20: no incident reportedSep 21: 1 incident (1 no impact stated)Sep 22: 2 incidents (1 major, 1 minor)Sep 23: no incident reportedSep 24: no incident reportedSep 25: no incident reportedSep 26: 1 incident (1 minor)Sep 27: no incident reportedSep 28: 2 incidents (1 critical, 1 no impact stated)Sep 29: no incident reportedSep 30: 1 incident (1 minor)Oct 1: no incident reportedOct 2: 1 incident (1 minor)Oct 3: 1 incident (1 no impact stated)Oct 4: 1 incident (1 minor)Oct 5: 1 incident (1 minor)Oct 6: no incident reportedOct 7: 1 incident (1 no impact stated)Oct 8: 1 incident (1 no impact stated)Oct 9: 1 incident (1 no impact stated)Oct 10: no incident reportedOct 11: no incident reportedOct 12: 2 incidents (1 major, 1 no impact stated)Oct 13: 2 incidents (2 minor)Oct 14: 1 incident (1 minor)Oct 15: 2 incidents (1 major, 1 minor)Oct 16: 1 incident (1 minor)Oct 17: no incident reportedOct 18: no incident reportedOct 19: 1 incident (1 major)Oct 20: 4 incidents (1 major, 1 minor, 2 no impact stated)Oct 21: 3 incidents (1 major, 1 minor, 1 no impact stated)Oct 22: no incident reportedOct 23: 2 incidents (1 major, 1 minor)Oct 24: no incident reportedOct 25: no incident reportedOct 26: 1 incident (1 no impact stated)Oct 27: 2 incidents (1 critical, 1 minor)Oct 28: no incident reportedOct 29: no incident reportedOct 30: no incident reportedOct 31: no incident reportedNov 1: no incident reportedNov 2: 4 incidents (1 major, 1 minor, 2 no impact stated)Nov 3: 3 incidents (3 minor)Nov 4: 1 incident (1 minor)Nov 5: no incident reportedNov 6: 1 incident (1 no impact stated)Nov 7: no incident reportedNov 8: no incident reportedNov 9: no incident reportedNov 10: 2 incidents (1 minor, 1 no impact stated)Nov 11: no incident reported

90 days agotoday

  • 67 incidents in 90 days
  • 14 major or critical
  • 2 h 48 min typical time to resolve
  • 2 days longest major
BeganIncidentImpactLasted
Cloud Logs writes - Elevated latency and error rates in prod-eu-central-0no impact stated17 min
Mimir query unexpected response with status code 500minor8 h 31 min
Synthetic Monitoring — Jakarta Public Probe Degradationno impact stated1 min
GitHub returning 403 for all Git Sync repositoriesminor1 h 57 min
October usage report visualization issueminor3 days
Increased query latency for Logs in GCP US Central (prod-us-central-0)minor1 h 30 min
Elevated Request Errors for Grafana Across Multiple Regionsminor1 h 1 min
Grafana Cloud: k6 timeoutsno impact stated—

Incidents per month

0 20 40 Dec 2025: 13 incidents (1 critical, 6 major, 2 minor, 4 no impact stated) · typical time to resolve 40 min Jan 2026: 20 incidents (7 major, 5 minor, 8 no impact stated) · typical time to resolve 3 h 7 min Feb 2026: 30 incidents (3 critical, 8 major, 15 minor, 4 no impact stated) · typical time to resolve 2 h 27 min Mar 2026: 31 incidents (4 critical, 12 major, 9 minor, 6 no impact stated) · typical time to resolve 8 h 11 min Apr 2026: 23 incidents (1 critical, 5 major, 14 minor, 3 no impact stated) · typical time to resolve 5 h May 2026: 12 incidents (1 critical, 7 major, 4 minor) · typical time to resolve 2 h 37 min Jun 2026: 23 incidents (2 critical, 11 major, 8 minor, 2 no impact stated) · typical time to resolve 6 h 44 min Jul 2026: 39 incidents (3 critical, 13 major, 19 minor, 4 no impact stated) · typical time to resolve 2 h 39 min Aug 2026: 14 incidents (3 critical, 1 major, 8 minor, 2 no impact stated) · typical time to resolve 1 h 22 min Sep 2026: 22 incidents (1 critical, 3 major, 14 minor, 4 no impact stated) · typical time to resolve 3 h 17 min Oct 2026: 28 incidents (1 critical, 6 major, 12 minor, 9 no impact stated) · typical time to resolve 3 h 5 min Nov 2026: 11 incidents (1 major, 6 minor, 4 no impact stated) · typical time to resolve 1 h 48 min Dec 2025Jan 2026Feb Mar Apr May Jun Jul Aug Sep Oct Nov

critical major minor no impact stated

Components affected

ComponentIncidentsBar
AWS Germany - prod-eu-west-26
AWS US East (VA) - prod-us-east-36
Azure Netherlands - prod-eu-west-35
GCP US Central - prod-us-central-05
GCP US Central - prod-us-central-45
AWS Brazil - prod-sa-east-14
AWS Germany - prod-eu-west-44
AWS Switzerland - prod-eu-central-04

As Grafana's status page reports its own incidents (scheduled maintenance left out), read every few hours since (evidence)

Incidents reported by Grafana's subprocessorsCSV of incidents reported by vendors Grafana lists · Atom feed of incidents reported by vendors Grafana lists

182 reported incidents in the last 30 days, by 1 of the vendors Grafana lists as a subprocessor.

A subprocessor list names a company, not the service an incident touched. This does not show that Grafana was involved.

DateCompanyIncidentImpactLasted
SendGridSMS Delivery Failures from Twilio to Turkcell Turkey minor3 h 54 min
SendGridRetroactive Incident Impacting Twilio Usage APIs no impact stated1 min
SendGridIssue resolved minor1 h 43 min
SendGridSMS Delivery Receipt Delays from Twilio Phone Numbers to Movistar Venezuela minor3 h 26 min
SendGridGateway API (Lookup API) Failure Increase on Verizon in United States minor10 h 23 min
SendGridWhatsApp Business API Message Send Failures minor16 h 29 min
SendGridVoice Call Failures from a Subset of Twilio Phone Numbers to Chile minor19 h 20 min
SendGridVoice Call Audio Quality Degradation, Silent and One-Way Audio between Twilio and Multiple Networks in United Kingdom minor5 h 18 min
SendGridSMS Delivery Delays and Failures from a Subset of Twilio Alphanumeric Sender IDs and Long Codes to Multiple Networks in Italy minor3 h 14 min
SendGridSMS Delivery Delays and Failures from Twilio to Spusu United Kingdom minor3 h 26 min
SendGridSMS Delivery Receipt Delays from Twilio to Bouygues Telecom France minor13 h 31 min
SendGridSMS Delivery Failures from Network Subscribers in Germany to a Subset of Twilio Long Codes minor8 h 40 min
SendGridSMS Delivery Failures from Twilio to ETL Laos minor16 h 8 min
SendGridSMS Delivery Failures from Twilio to MTN Nigeria minor6 h
SendGridSilent Network Authentication (SNA) Failure Increase and Gateway API (Lookup API) Failure Increase on EnStream in Canada minor14 h 12 min
SendGridSMS Delivery Receipt Delays from Twilio to Globe Philippines minor13 h 16 min
SendGridSMS Delivery Receipt Delays from a Subset of Twilio Long Codes and Short Codes to Multiple Networks in United States minor21 h 36 min
SendGridSMS Delivery Delays from Twilio to Multiple Networks in India minor3 h 39 min
SendGridSMS Delivery Receipt Delays from a Subset of Twilio Short Codes to Multiple Networks in New Zealand minor2 days
SendGridSMS Delivery Delays from a Subset of Twilio Long Codes to Multiple Networks in Chile minorongoing
SendGridSMS Delivery Delays from Twilio to Claro Dominican Republic minor3 h 46 min
SendGridTwiML ConversationRelay Documents Page Error minor1 h 55 min
SendGridVoice Call Failures from a Subset of Twilio Phone Numbers to Chile minor3 h 44 min
SendGridVoice Call Audio Quality Degradation from a Subset of Twilio Mobile Numbers to Claro Colombia minor36 min
SendGridNotification Logs Unavailable in Console minor1 h 34 min

And 157 more. All of them: CSV · Who is around them.

ChangesCSV of Grafana's changes · Atom feed of Grafana's changes

See the list as we read it on any date: Time machine

None since tracking began.

Rating badge for Grafana's site

Grafana transparency rating

It updates with the rating.

<a href="https://thirdpartyindex.com/vendors/grafana"><img src="https://thirdpartyindex.com/badge/grafana.svg" alt="Grafana transparency rating on Third Party Index" height="20"></a>
[![Grafana transparency rating on Third Party Index](https://thirdpartyindex.com/badge/grafana.svg)](https://thirdpartyindex.com/vendors/grafana)