IBM
Transparency
Breakdown
| Subprocessor list | not found | 0 / 30 |
| Processing locations | no list | 0 / 8 |
| Purposes | no list | 0 / 7 |
| Data processing addendum | 12 / 12 | |
| Trust center | 8 / 8 | |
| Privacy policy | 6 / 6 | |
| security.txt | 6 / 6 | |
| Security page | 5 / 5 | |
| Status page | not found | 0 / 5 |
| Vulnerability disclosure | not found | 0 / 5 |
| Pages still reachable | 8 / 8 | |
| Total | 45 / 100 |
Only documents we can retrieve count: a page behind a login or a broken link scores nothing.
Badge
For IBM's own site; it updates with the rating.
<a href="https://thirdpartyindex.com/vendors/ibm"><img src="https://thirdpartyindex.com/badge/ibm.svg" alt="IBM transparency rating on Third Party Index" height="20"></a>[](https://thirdpartyindex.com/vendors/ibm)No tracked subprocessors.
Documents
| Document | Verified | Changed | Evidence |
|---|---|---|---|
| Trust center | snapshot | ||
| Data processing addendum | snapshot | ||
| Privacy policy | snapshot | ||
| Terms | snapshot | ||
| Security page | snapshot | ||
| security.txt | snapshot |
Subprocessors
None extracted.
Listed as a subprocessor by (14)
Purposes as each company states them.
Airtable airtable.com AI model provider
Apolicy apolicy.io Data Storage
Box box.com
Bullhorn bullhorn.com Cloud hosting services
Daytona daytona.io Cloud Infrastructure
EasyPost easypost.com Cloud Providers
Elasticsearch elastic.co Hosting
Gainsight Software gainsight.com Cloud Service Provider for Certain Generative Artificial Intelligence features.; Natural Language Processing and Cloud Service Provider
Google Cloud cloud.google.com Assured Support (US); Technical Support
Heap heap.io Performs analytics and reporting on Customer Data within the VOC
Kryterion kryterion.com
PagerDuty pagerduty.com Artificial Intelligence
Sysdig sysdig.com Data Storage
Wasabi wasabi.com Compute
Security record
What public security catalogs list for IBM, in their words.
Known exploited vulnerabilities
8 vulnerabilities in IBM's software that CISA lists as exploited in the wild.
| CVE | Product | Vulnerability | Listed |
|---|---|---|---|
| CVE-2026-9198 | Langflow | IBM Langflow Code Injection Vulnerability | evidence |
| CVE-2022-47986 | Aspera Faspex | IBM Aspera Faspex Code Execution Vulnerability used by ransomware | evidence |
| CVE-2013-3993 | InfoSphere BigInsights | IBM InfoSphere BigInsights Invalid Input Vulnerability used by ransomware | evidence |
| CVE-2015-7450 | WebSphere Application Server and Server Hypervisor Edition | IBM WebSphere Application Server and Server Hypervisor Edition Code Injection. | evidence |
| CVE-2019-4716 | Planning Analytics | IBM Planning Analytics Remote Code Execution Vulnerability | evidence |
| CVE-2020-4427 | Data Risk Manager | IBM Data Risk Manager Security Bypass Vulnerability | evidence |
| CVE-2020-4428 | Data Risk Manager | IBM Data Risk Manager Remote Code Execution Vulnerability | evidence |
| CVE-2020-4430 | Data Risk Manager | IBM Data Risk Manager Directory Traversal Vulnerability | evidence |
Changes
None since tracking began.