# Heymarket

Heymarket (heymarket.com): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/heymarket
- Documents last verified: 2026-10-03
- Transparency rating: 88/100 (how much it publishes, not how secure it is): Subprocessor list 30/30; Processing locations 8/8; Purposes 0/7 (partial); Data processing addendum 12/12; Trust center 8/8; Privacy policy 6/6; security.txt 6/6; Security page 5/5; Status page 5/5; Vulnerability disclosure 0/5 (not found); Pages still reachable 8/8
- Supply chain: relies on 11 tracked vendors directly, 115 within two hops, 358 within three; 0 tracked vendors rely on it directly, 0 within two hops, 0 within three
- Cite as: Heymarket, Third Party Index, https://thirdpartyindex.com/vendors/heymarket (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Trust center | https://trust.heymarket.com/ | 2026-10-03 | 2026-10-03 |
| Subprocessor list | https://www.heymarket.com/dpa/subprocessors/ | 2026-10-03 | 2026-10-03 |
| Data processing addendum | https://www.heymarket.com/dpa/ | 2026-10-03 | 2026-10-03 |
| Privacy policy | https://www.heymarket.com/privacy/ | 2026-10-03 | 2026-10-03 |
| Terms | https://www.heymarket.com/tos/ | 2026-10-03 | 2026-10-03 |
| Security page | https://www.heymarket.com/security/ | 2026-10-03 | 2026-10-03 |
| security.txt | https://www.heymarket.com/.well-known/security.txt | 2026-10-03 | 2026-10-03 |
| Status page | https://status.heymarket.com/ | 2026-10-03 | 2026-10-03 |

## Subprocessors (11)

As its own list states them.

| Subprocessor | Purpose | Location | Listed since |
|---|---|---|---|
| [AWS](https://thirdpartyindex.com/vendors/amazon-web-services.md) | — | Washington, USA | 2026-10-03 |
| [Bandwidth](https://thirdpartyindex.com/vendors/bandwidth.md) | — | Raleigh, NC | 2026-10-03 |
| [Content Square](https://thirdpartyindex.com/vendors/contentsquare.md) | — | California, USA | 2026-10-03 |
| [Google](https://thirdpartyindex.com/vendors/google-cloud.md) | — | California, USA | 2026-10-03 |
| [HubSpot](https://thirdpartyindex.com/vendors/hubspot.md) | — | Cambridge, USA | 2026-10-03 |
| [New Relic](https://thirdpartyindex.com/vendors/new-relic.md) | — | California, USA | 2026-10-03 |
| [Salesforce](https://thirdpartyindex.com/vendors/salesforce.md) | — | California, USA | 2026-10-03 |
| [Slack](https://thirdpartyindex.com/vendors/slack.md) | — | California, USA | 2026-10-03 |
| [Stripe](https://thirdpartyindex.com/vendors/stripe.md) | — | California, USA | 2026-10-03 |
| [Twilio](https://thirdpartyindex.com/vendors/twilio.md) | — | California, USA | 2026-10-03 |
| [Zendesk](https://thirdpartyindex.com/vendors/zendesk.md) | — | California, USA | 2026-10-03 |

Read from ([evidence](https://thirdpartyindex.com/evidence/35640)). CSV: https://thirdpartyindex.com/vendors/heymarket/subprocessors.csv

## Compliance

As its trust center lists them.

- Audited: SOC 2 Type II ([evidence](https://thirdpartyindex.com/evidence/35645))
- Claimed: HIPAA, GDPR, CCPA/CPRA, PIPEDA ([evidence](https://thirdpartyindex.com/evidence/35645))

## Subprocessor of (0)

No tracked vendor lists it.

## Security contact

From its security.txt (https://www.heymarket.com/.well-known/security.txt) ([evidence](https://thirdpartyindex.com/evidence/35642)):

- Contact: mailto:security@heymarket.com
- Disclosure policy: https://www.heymarket.com/vdp/
- Security jobs: https://www.heymarket.com/careers/
- Languages: en
- Valid until 2027-09-21

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api