# Grammarly

[7 tracked vendors](https://thirdpartyindex.com/vendors/grammarly#used-by) name Grammarly as a subprocessor, including [Fastmail](https://thirdpartyindex.com/vendors/fastmail), [WebFX](https://thirdpartyindex.com/vendors/webfx) and [Craft CMS](https://thirdpartyindex.com/vendors/craft-cms). We have not found a subprocessor list published by Grammarly. We monitor 7 of its documents, which we last checked on 2026-11-11.

Grammarly (grammarly.com): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/grammarly
- Documents last verified: 2026-11-11
- Transparency rating: 50/100 (how much it publishes, not how secure it is): Subprocessor list 0/30 (not found); Processing locations 0/8 (no list); Purposes 0/7 (no list); Data processing addendum 12/12; Trust center 8/8; Privacy policy 6/6; security.txt 6/6; Security page 5/5; Status page 5/5; Vulnerability disclosure 0/5 (not found); Pages still reachable 8/8
- Supply chain: relies on 0 tracked vendors directly, 0 within two hops, 0 within three; 7 tracked vendors rely on it directly, 15 within two hops, 26 within three
- Cite as: Grammarly, Third Party Index, https://thirdpartyindex.com/vendors/grammarly (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Trust center | https://www.grammarly.com/trust | 2026-11-11 | 2026-10-15 |
| Data processing addendum | https://superhuman.com/legal/dpa | 2026-11-11 | 2026-09-21 |
| Privacy policy | https://www.grammarly.com/privacy | 2026-11-11 | 2026-10-15 |
| Terms | https://www.grammarly.com/terms | 2026-11-11 | 2026-09-21 |
| Security page | https://www.grammarly.com/security | 2026-11-11 | 2026-10-15 |
| security.txt | https://www.grammarly.com/.well-known/security.txt | 2026-11-11 | 2026-09-21 |
| Status page | https://status.grammarly.com/ | 2026-11-11 | 2026-11-11 |

## Subprocessors (0)

No subprocessor list has been found or read for this vendor.

## Web Technologies

Grammarly's homepage made 240 requests to 40 domains, 25 services controlled by another company, and 2 domains not identified. Loaded on 2026-10-01 by a browser that accepted nothing; other visits may load more or less. What a page loads is not a list of who receives customer data.

25 third parties by category: Advertising 13 (The Trade Desk, Inc., Microsoft, Taboola, Podscribe, Spotify AB; reviewed: BidSwitch GmbH, Index Exchange Inc., Innovid, AdsWizz Inc.; usually detected as Advertising: Xandr, Magnite, Inc., PubMatic, Roku, Inc.); Analytics 7 (Google Cloud, TikTok, Meta, LinkedIn, ZoomInfo, Quora, TikTok); Marketing automation 1 (6Sense Insights, Inc.); Cookie compliance 1 (usually detected as Cookie compliance: Transcend); Affiliate programs 1 (Impact Radius); Email 1 (usually detected as Email: LiveIntent); Security 1 (usually detected as Security: Amazon Web Services). Each company that appears controlled by another organization is counted once, under the main category of the technologies detected from it on this homepage or, when none was, the category recorded from the company's own page (marked reviewed) or else the one it is usually detected as on other published homepages (marked as such); unclassified: none of these.

### Third parties (25)

- Google Cloud: 33 requests to google.com, doubleclick.net, googletagmanager.com, google-analytics.com; DoubleClick Floodlight, Google Analytics, Google Analytics Enhanced eCommerce, Google Sign-in, Google Tag Manager
- 6Sense Insights, Inc.: 19 requests to 6sc.co; 6sense
- The Trade Desk, Inc.: 14 requests to adsrvr.org; theTradeDesk
- Microsoft: 9 requests to clarity.ms, bing.com; Microsoft Advertising
- Taboola: 8 requests to taboola.com; Taboola
- TikTok: 7 requests to tiktok.com; TikTok Pixel
- Meta: 5 requests to facebook.net, facebook.com; Facebook Pixel 2.9.412
- LinkedIn: 4 requests to licdn.com, linkedin.com; Linkedin Insight Tag
- Impact Radius: 3 requests to impactcdn.com, impct.site, pxf.io; Impact
- Podscribe: 3 requests to podscribe.com, d34r8q7sht0t9k.cloudfront.net; Podscribe
- Spotify AB: 3 requests to spotify.com, pdst.fm; Podsights, Spotify Pixel
- Transcend: 3 requests to transcend-cdn.com
- Xandr: 3 requests to adnxs.com
- ZoomInfo: 3 requests to zi-scripts.com, zoominfo.com; Zoominfo
- BidSwitch GmbH: 2 requests to bidswitch.net
- Index Exchange Inc.: 2 requests to casalemedia.com
- Innovid: 2 requests to tvsquared.com
- Quora: 2 requests to quora.com; Quora Pixel
- AdsWizz Inc.: 1 request to adswizz.com
- Amazon Web Services: 1 request to on.aws
- LiveIntent: 1 request to liadm.com
- Magnite, Inc.: 1 request to rubiconproject.com
- PubMatic: 1 request to pubmatic.com
- Roku, Inc.: 1 request to w55c.net
- TikTok: 1 request to tiktokw.us; TikTok Pixel

### Unknown (2)

Domains not identified yet: adxcel-ec2.com, ojrq.net

### First party (1)

- Grammarly: 106 requests to grammarly.com, grammarly.io; Amazon CloudFront, Amazon Web Services, Cart Functionality, HSTS, Innovid Advertising Measurement, Microsoft Clarity, MobX, Next.js 15.5.18, Open Graph, Priority Hints, React, TVSquared, Transcend, Webpack, core-js 3.32.2

13 tracked companies loaded by the homepage are not in Grammarly's subprocessor list. A website can use a service without it processing customer data.

## Subprocessor of (7)

Tracked vendors whose own subprocessor lists name it, and what they say they use it for.

- [Craft CMS](https://thirdpartyindex.com/vendors/craft-cms.md): Grammar checker.
- [Envoy Global](https://thirdpartyindex.com/vendors/envoy-global.md): Writing assistant
- [Fastmail](https://thirdpartyindex.com/vendors/fastmail.md): Writing assistance, primarily for support tickets
- [One Step GPS](https://thirdpartyindex.com/vendors/one-step-gps.md): AI Writing Assistance Software
- [Ringostat](https://thirdpartyindex.com/vendors/ringostat.md): Service of an advanced grammar, spelling, and punctuation checking for written content
- [Superside](https://thirdpartyindex.com/vendors/superside.md)
- [WebFX](https://thirdpartyindex.com/vendors/webfx.md): Customer Communications; Used to engage customers through email and other communication channels.

## Service status

Incidents it reported on its own status page.

- Last 90 days: 3 reported incidents (3 major or critical, 0 minor, 0 with no impact stated)
- Typical time to resolve: 2 h 15 min
- Status page last read: 2026-11-12
- 2026-10-20: Issues with Superhuman Go not loading or showing error messages (major)
- 2026-09-22: Chat is not working at go.superhuman.com (major)
- 2026-08-14: Users May Experience Login Issues Across Some Grammarly and Superhuman Products (major)
- 2026-07-29: Go may work slowly or intermittently (major)
- 2026-07-16: Login to Grammarly via superhuman.com may be temporarily unavailable (minor)
- 2026-05-15: Some Grammarly and Superhuman users may be unable to log in (critical)
- 2026-05-07: PDF reports may not be available in the Grammarly Editor (minor)
- 2026-04-28: Generative AI features may not work as expected in Grammarly for Windows (minor)

## Security contact

From its security.txt (https://www.grammarly.com/.well-known/security.txt) ([evidence](https://thirdpartyindex.com/evidence/870)):

- Contact: mailto:security@grammarly.com
- Disclosure policy: https://hackerone.com/grammarly
- Acknowledgments: https://hackerone.com/grammarly/thanks
- Security jobs: https://www.grammarly.com/jobs/
- No expiry date

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api