Grafana
Grafana declares 8 subprocessors in its subprocessor list, which we last checked on Nov 11, 2026 (evidence). They include Amazon Web Services, Google Cloud and Microsoft. No published changes since we first read it on Sep 22, 2026. 73 tracked vendors name Grafana as a subprocessor, including Zendesk, Mailgun and Zapier.
Subprocessors CSV of Grafana's subprocessors · Atom feed of Grafana's subprocessors DORA draft CSV of Grafana's subprocessors as declared by Grafana what's this? ·
8 third parties.
| Name | Purpose | Location | Listed since |
|---|---|---|---|
| AlphaAI Technologies (Tavily) | Optional: AI feature | USA (Default) | |
| Alphabet Inc. | Infrastructure, Cloud Service Provider, Optional: AI feature | USA (Default)* | |
| Amazon.com Inc. (AWS)410 Terry Ave N, Seattle, WA 98109-5210 | Infrastructure, Cloud Service Provider, Optional: AI feature | USA (Default)* | |
| Anthropic548 Market St, PMB 90375, San Francisco, CA 94104 | Optional: AI feature | USA (Default) | |
| Microsoft Corporation (Azure)One Microsoft Way, Redmond, WA 98052-6399 | Infrastructure, Cloud Service Provider | USA (Default)* | |
| OpenAI3180 18th St., San Francisco, CA 94101 | Optional: AI feature | USA (Default) | |
| Palantir Technologies Inc.100 Hamilton Ave. Suite 300 Palo Alto, CA 94301 | For customers using Grafana’s Federal Cloud offering | USA (Default) | |
| Twilio Inc. (Sendgrid)375 Beale St Suite 300 San Francisco, CA 94105 | Email, Alerting for SaaS | USA (Default) |
Web TechnologiesCSV of Grafana's web technologies · Atom feed of Grafana's web technologies
Grafana's homepage made 176 requests to 14 domains, and 7 services controlled by another company.
7 third parties by category: Analytics 2Advertising 1Marketing automation 1Cookie compliance 1Other 1Unclassified 1
6 tracked companies loaded by the homepage are not in Grafana's subprocessor list. A website can use a service without it processing customer data.
Subprocessor of (73)CSV of the companies listing Grafana · Atom feed of the companies listing Grafana
Acrolinx acrolinx.com Log and metrics aggregation and analysis
Alation alation.com Log processing for debugging, troubleshooting, auditing, reporting, and detecting and alerting on application behavior
Alcide alcide.io
Arctic Wolf arcticwolf.com Logging, Data Aggregation, Visualization
Automox automox.com
Avoma avoma.com Logging and Monitoring
BetterCloud bettercloud.com Monitoring; [Website]( Analyzes System Metrics and provides Monitoring / Alerting
Browserbase browserbase.com Monitoring/Logs; Provides data visualization and analytics tools and hosting (Grafana Cloud). Responsible for storing and processing metrics, logs, and traces as configured by the customer. Browserbase defines dashboards, data sources, and user access permissions within Grafana’s platform.
BugHerd bugherd.com Observability
Capsule8 capsule8.com Operational dashboard (metrics) services
Cerebrium cerebrium.ai Monitoring and observability; Platform performance metrics
Ceros ceros.com Relevant Customer Data: IP address associated with login credentials. AI Features are optional and may be disabled by customers. When AI Features are disabled, Grafana will not process any data in connection with such features. If a customer elects to use AI Features, Grafana will process only the data included in the applicable user inputs for the purpose of generating AI outputs. AI interactions may be stored within Grafana for debugging purposes for a period of three (3) months, after which such data will be permanently deleted. Grafana will not use AI feature data to provide services to any other customers of Grafana or Ceros.; System Monitoring, AI Traffic Routing and Debugging
Check Point Software Technologies checkpoint.com Infrastructure Monitoring
Clay clay.com Logging and metrics
ComplyAdvantage complyadvantage.com Observability platform, collecting and processing metrics of our production telemetry for the purpose of monitoring the availability, security, and performance of our production services.
Conveo conveo.ai Cloud monitoring & LLM Observability; Processing Activity Description Observability for the Conveo Platform Data Residency / Processing Location UK Headquarters Location New York, United States
DitchCarbon ditchcarbon.com Metrics and dashboards
Enzuzo enzuzo.com Infrastructure Logs
Escape escape.tech Observability: traces, logs, metrics, profiles
fal fal.ai - Contact: legal-ops@grafana.com - Address: 29 Broadway Penthouse, New York, NY 10006 USA - Description: Connectivity monitoring, logging and analytics.; Service Monitoring and Logging
Flybits flybits.com
Forcepoint forcepoint.com Web application
Gainsight Software gainsight.com Application Monitoring
ImprovMX improvmx.com We use Grafana to handle metrics and logging.
Inception Labs inceptionlabs.ai Analytics and monitoring platform used to visualize and monitor metrics, logs, and data from various sources.; Data analytics
InMoment inmoment.com System monitoring
Jimdo jimdo.com
Juliahub juliahub.com
Kasten kasten.io Provides observability platform used for storage and analysis of service logs, metrics and traces of Veeam cloud services
Laivly laivly.com Application, infrastructure, and security monitoring.
LandingAI landing.ai Observability platform used for internal monitoring of system health and performance. - Grafana's Subprocessors: [List]( - Products: All (US).; Visualization and dashboarding software
Laravel laravel.com Observability
LightTable lighttable.ai Application monitoring
Linq linqapp.com
Lovable lovable.dev Log/trace/metrics storage
Luma AI lumalabs.ai Monitoring and observability provider
LumApps lumapps.com Monitoring and analyzing metrics, performances, logs and traces. Diagnostics of end user network reliability, performance and UX
Mailgun mailgun.com Analytics and logs
MasterControl mastercontrol.com Application monitoring, observability and metrics
OptiSigns optisigns.com Inc dba Grafana: Log & Monitoring
Optro optro.ai Security logging, metrics, and reporting
Outreach outreach.io Infrastructure Monitoring and Logging
Podium podium.com
QA Wolf qawolf.com Grafana Cloud provides monitoring, logging, and observability services for QA Wolf's infrastructure and application performance.
Rapid7 rapid7.com
Ravenna ravennahq.com
Reclaim.ai reclaim.ai Performance and infrastructure monitoring
Render render.com Monitoring / Observability
replit replit.com
Restate restate.dev Metrics and Observability; Observability
- Show next 23
ComplianceCSV of Grafana's compliance · Atom feed of Grafana's compliance
- Certified
- Says it complies with
Certifications as Grafana's trust center lists them; reports are usually shared on request (evidence)
Security recordCSV of Grafana's security record · Atom feed of Grafana's security record
What public security catalogs list for Grafana, in their words.
Known exploited vulnerabilities
2 vulnerabilities in Grafana's software that CISA lists as exploited in the wild.
| CVE | Product | Vulnerability | Listed |
|---|---|---|---|
| CVE-2021-43798 | Grafana | Grafana Path Traversal Vulnerability | |
| CVE-2021-39226 | Grafana | Grafana Authentication Bypass Vulnerability |
Source: CISA Known Exploited Vulnerabilities catalog (evidence)
Service statusCSV of Grafana's status page incidents · Atom feed of Grafana's status page incidents
90 days agotoday
- 67 incidents in 90 days
- 14 major or critical
- 2 h 48 min typical time to resolve
- 2 days longest major
| Began | Incident | Impact | Lasted |
|---|---|---|---|
| Cloud Logs writes - Elevated latency and error rates in prod-eu-central-0 | no impact stated | 17 min | |
| Mimir query unexpected response with status code 500 | minor | 8 h 31 min | |
| Synthetic Monitoring — Jakarta Public Probe Degradation | no impact stated | 1 min | |
| GitHub returning 403 for all Git Sync repositories | minor | 1 h 57 min | |
| October usage report visualization issue | minor | 3 days | |
| Increased query latency for Logs in GCP US Central (prod-us-central-0) | minor | 1 h 30 min | |
| Elevated Request Errors for Grafana Across Multiple Regions | minor | 1 h 1 min | |
| Grafana Cloud: k6 timeouts | no impact stated | — |
Incidents per month
critical major minor no impact stated
Components affected
| Component | Incidents | Bar |
|---|---|---|
| AWS Germany - prod-eu-west-2 | 6 | |
| AWS US East (VA) - prod-us-east-3 | 6 | |
| Azure Netherlands - prod-eu-west-3 | 5 | |
| GCP US Central - prod-us-central-0 | 5 | |
| GCP US Central - prod-us-central-4 | 5 | |
| AWS Brazil - prod-sa-east-1 | 4 | |
| AWS Germany - prod-eu-west-4 | 4 | |
| AWS Switzerland - prod-eu-central-0 | 4 |
As Grafana's status page reports its own incidents (scheduled maintenance left out), read every few hours since (evidence)
Incidents reported by Grafana's subprocessorsCSV of incidents reported by vendors Grafana lists · Atom feed of incidents reported by vendors Grafana lists
182 reported incidents in the last 30 days, by 1 of the vendors Grafana lists as a subprocessor.
A subprocessor list names a company, not the service an incident touched. This does not show that Grafana was involved.
And 157 more. All of them: CSV · Who is around them.
ChangesCSV of Grafana's changes · Atom feed of Grafana's changes
See the list as we read it on any date: Time machine
None since tracking began.