Hotjar
Transparency
Breakdown
| Subprocessor list | 30 / 30 | |
| Processing locations | 8 / 8 | |
| Purposes | partial | 4 / 7 |
| Data processing addendum | not found | 0 / 12 |
| Trust center | 8 / 8 | |
| Privacy policy | 6 / 6 | |
| security.txt | 6 / 6 | |
| Security page | not found | 0 / 5 |
| Status page | 5 / 5 | |
| Vulnerability disclosure | not found | 0 / 5 |
| Pages still reachable | 8 / 8 | |
| Total | 75 / 100 |
Only documents we can retrieve count: a page behind a login or a broken link scores nothing.
Badge
For Hotjar's own site; it updates with the rating.
<a href="https://thirdpartyindex.com/vendors/hotjar"><img src="https://thirdpartyindex.com/badge/hotjar.svg" alt="Hotjar transparency rating on Third Party Index" height="20"></a>[](https://thirdpartyindex.com/vendors/hotjar)Documents
| Document | Verified | Changed | Evidence |
|---|---|---|---|
| Trust center | snapshot | ||
| Subprocessor list | snapshot | ||
| Privacy policy | snapshot | ||
| Terms | snapshot | ||
| security.txt | snapshot | ||
| Status page statuspage | snapshot |
Subprocessors
37 third parties, 5 affiliates. CSV · Atom
| Name | Purpose | Location | Listed since |
|---|---|---|---|
| Ada Support, Inc. | Customer support and ticketing services | Toronto, Canada (Adequacy decision; SCCs) | |
| Amazon Web Services, Inc. | Data hosting; Data hosting for Data Connect; Data hosting for the following plans:; Experience Analytics Extension to Product Analytics (“DXA Extension”); Hosting of Sense Chat and Customer Data and backups; Pro & Enterprise; and | EU: Ireland (AWS-EU-West-1); Europe: Frankfurt, Germany (AWS-EU-Central-1); Europe: Ireland (AWS-EU-West-1); Europe: Ireland (AWS-EU-West-1),; Frankfurt, Germany (AWS EU-Central-1) (at-rest only),; Frankfurt, Germany (AWS EU-Central-1) (at-rest only),,; USA: Ohio, USA (AWS-US-East-2); USA: Virginia, USA (AWS-US-East-1); or (DPF; SCCs) | |
| Amazon Web Services Bedrock | Growth, Pro, and Enterprise; Provides Large Language Model (LLM) for the following plans: | France (AWS-EU-West-3),; Germany (AWS-EU-Central-1),; Ireland (AWS-EU-West-1),; Italy (AWS-EU-South-1), or; Ohio, USA (AWS-US-East-2), or; Oregon, USA (AWS-US-West-2); Spain (AWS-EU-South-2),; Sweden (AWS-EU-North-1),; United Kingdom (AWS-EU-West-2),; Virginia, USA (AWS-US-East-1),; or (DPF; SCCs) | |
| Atlassian Pty Ltd (Jira) | Customer support and ticketing services | Sydney, Australia (DPF; SCCs) | |
| Atoms - Retex | Milan, Italy (N/A) | ||
| Cardinal Path LLC | Illinois, USA (SCCs) | ||
| Content Square SAS | Professional Services; Support, Maintenance, Professional Services | Frankfurt, Germany; London, UK; New York, USA; Paris, France (DPF; Intercompany SCCs) | |
| Content Square Canada | Professional Services | Toronto, Canada (Adequacy decision; Intercompany SCCs) | |
| Content Square Israel Ltd. | Support, Maintenance, Professional Services | Tel Aviv, Israel (Adequacy decision; Intercompany SCCs) | |
| Content Square Singapore PTE | Support, Professional Services | Singapore (Intercompany SCCs) | |
| Content Square Spain, S.L. | Professional Services | Madrid, Spain (Intercompany SCCs) | |
| ContentSquare DXA SAAS Solutions LLC | Professional Services | Dubai, UAE (Intercompany SCCs) | |
| ContentSquare Egypt | Support, Professional Services | Cairo, Egypt (Intercompany SCCs) | |
| ContentSquare Italy S.r.l. | Support, Professional Services | Milan, Italy (Intercompany SCCs) | |
| Contentsquare Japan G.K. | Professional Services | Tokyo, Japan (Adequacy decision; Intercompany SCCs) | |
| Converteo SAS | Paris, France (N/A) | ||
| Daily.co | Hosting of recordings* | Europe: Ireland (AWS-EU-West-1)* (DPF; SCCs) | |
| Deepgram, Inc. | San Francisco, USA (SCCs) | ||
| Dentsu Manchester Limited | Manchester, UK (UK SCCs) | ||
| Group Onepoint SAS | Paris, France (N/A) | ||
| Level Access, Inc. | Virginia, USA (SCCs) | ||
| Loris Technologies, Ltd. | Support, Maintenance, Professional Services and conversational intelligence services | Tel Aviv, Israel (Adequacy decision; Intercompany SCCs) | |
| Microsoft Corporation (Azure) | Growth, Pro, and Enterprise; Provides Large Language Model (LLM); Provides Large Language Model (LLM) for the following plans: | Arizona, USA (Azure-West US 3),; California, USA (Azure-West US),; Canada (Azure-Canada East),; Europe; France; France (Azure- France Central),; Germany (Azure-Germany West Central),; Illinois, USA (Azure-North Central US),; India (Azure-South India); Italy (Azure-Italy North); Japan (Azure-Japan East), or; Netherlands (Azure-West Europe),; New South Wales (Azure-Australia East); Norway (Azure-Norway East),; Sweden (Azure-Sweden Central),; Switzerland (Azure-Switzerland North), or; Texas, USA (Azure-South Central US),; USA; United Kingdom (Azure-UK South); Virginia, USA (Azure-East US 2); Virginia, USA (Azure-East US), or; or (DPF; SCCs) | |
| Microsoft Azure | Data hosting for the following plans:; Experience Analytics Extension to Product Analytics (“DXA Extension”); Pro & Enterprise; and | Europe: Ireland (Azure-North Europe); USA: Virginia, USA (Azure-East US); or | |
| OpenAI OpCo, LLC | Provides Large Language Model (LLM) | Europe; USA; or (SCCs) | |
| Postmark | Email delivery service | Chicago, USA (DPF; SCCs) | |
| Salesforce, Inc. | San Francisco, USA (DPF; SCCs) | ||
| Scaletrix.AI (Alabs AI Privacy Limited) | Gurgaon, India (SCCs) | ||
| See “Product Analytics” section below for further sub-processors utilized for this feature | |||
| Snowflake Inc. | USA: Ohio, USA (AWS-US-East-2) (DPF; SCCs) | ||
| Temesis SAS | Paris, France (N/A) | ||
| Tremendous, LLC | Participant rewards provider | New York, USA (DPF) | |
| Turbopuffer Inc. | USA: Ohio, USA (AWS-US-East-2) (SCCs) | ||
| Twilio Inc. | Data hosting | Dublin, Ireland (N/A) | |
| Up Reply GmbH | Munich, Germany (N/A) | ||
| Zendesk, Inc. | Customer support and ticketing services | San Francisco, USA (DPF; SCCs) | |
| Zilker Trail Consulting | Texas, USA (SCCs) |
Hotjar affiliates (5)
Listed as a subprocessor by (18)
Purposes as each company states them.
ActiveState activestate.com Data analytics
Cerbos cerbos.dev
Clearbit clearbit.com Hotjar is an application analytics platform that provide insight into how users interacts with Clearbit Site and Services.
Contentsquare contentsquare.com Support, Maintenance, Professional Services
DataCamp datacamp.com Data analytics; Usage Analytics via heatmaps
Digicert digicert.com Provide website analytics and advertising insights
FrankieOne frankieone.com Portal usage analytics
Heap heap.io Consulting, support, maintenance, implementation, and development
Hightouch hightouch.com Usage Analytics
InMotion Hosting inmotionhosting.com Improve user experience
Instruqt instruqt.com Analytics; Anonymized analysis of website usage (visitor recordings, heatmaps and clickstreams)
Krisp krisp.ai Hotjar is a user experience (UX) and behavior analytics platform designed to help businesses understand how users interact with their websites or applications.; Web analytics
Metabase metabase.com Understanding website visitor behavior.
Orderful orderful.com Product analytics
Prezi prezi.com Analytics Tooling
Syskit Point syskit.com Tracking; User behavior analysis tool
Verda verda.com Data analytics; Privacy policy: https://www.hotjar.com/legal/policies/privacy/
WeTravel wetravel.com Website and app analytics.
Service status
3 incidents in the last 90 days (0 major or critical, 0 minor, 3 with no stated impact) · typically resolved in 3 h 40 min
| Began | Incident | Impact | Lasted |
|---|---|---|---|
| Data collection paused for some customers | none | 3 h 40 min evidence | |
| Growth customers not renewed on 12 Aug for one day | none | 1 min evidence | |
| Potentially all hotjar accounts with varying degrees of limited service. | none | — evidence | |
| Missing VOC Responses | none | — evidence | |
| Potential login issues to Hotjar | none | 16 h 18 min evidence | |
| Surveys not opening in Hotjar application | minor | 59 min evidence | |
| Heatmaps: Issues Generating New Screenshots | minor | 2 days evidence |
As Hotjar's status page reports its own incidents (scheduled maintenance left out), read every few hours since .
Changes
None since tracking began.