IBM

ibm.com

41 tracked vendors name IBM as a subprocessor, including Google Cloud, Elasticsearch and Gainsight Software. We have not found a subprocessor list published by IBM. We monitor 6 of its documents, which we last checked on Nov 11, 2026.

Includes: Apptio, HashiCorp

Subprocessors

None extracted.

Web TechnologiesCSV · Atom

IBM's homepage made 495 requests to 47 domains, 21 services controlled by another company, and 6 domains not identified.

Advertising (9): Microsoft, The Trade Desk, Inc., ID5 Technology Ltd, Reddit, Inc.; reviewed: Eyeota, Index Exchange Inc.; usually detected as Advertising: Magnite, Inc., Xandr, PubMaticAnalytics (6): Google Cloud, Magellan AI, Bombora, Demandbase, LinkedIn, MedalliaTag managers (1): TealiumMarketing automation (1): AdobeCookie compliance (1): TrustArcOther (2): Customer data platform: Segment; reviewed as Customer data platform: LiveRampUnclassified (1): no technology detected from them: Kaltura

21 third parties by category: Advertising 9Analytics 6Tag managers 1Marketing automation 1Cookie compliance 1Other 2Unclassified 1

Third parties 21 · 187 requests
Kaltura kaltura.com 10% of the page's requests 49
Google Cloud DoubleClick Floodlight Google Ads Conversion Tracking Google Analytics Google Tag Manager 5% of the page's requests 25
Tealium Tealium Tealium AudienceStream 5% of the page's requests 24
Adobe Marketo 3% of the page's requests 14
Microsoft Microsoft Advertising 3% of the page's requests 14
The Trade Desk, Inc. theTradeDesk 2% of the page's requests 10
Segment Segment 1.84.3 2% of the page's requests 8
TrustArc TrustArc 1% of the page's requests 7
Magellan AI Magellan AI 1% of the page's requests 5
Bombora Bombora <1% of the page's requests 4
Demandbase Demandbase 11.8.0 <1% of the page's requests 4
ID5 Technology Ltd ID5 1.0.99 <1% of the page's requests 4
LinkedIn Linkedin Insight Tag <1% of the page's requests 3
LiveRamp rlcdn.com <1% of the page's requests 3
Magnite, Inc. rubiconproject.com, tremorhub.com <1% of the page's requests 3
Reddit, Inc. Reddit Ads <1% of the page's requests 3
Eyeota eyeota.net <1% of the page's requests 2
Xandr adnxs.com <1% of the page's requests 2
Index Exchange Inc. casalemedia.com <1% of the page's requests 1
Medallia Decibel <1% of the page's requests 1
PubMatic pubmatic.com <1% of the page's requests 1
Unknown 6 · 35 requests

o11.techd2c7xlmseob604.cloudfront.netsecuredvisit.comusbrowserspeed.comaistudio-cdata-dev1.s3.us-east-1.amazonaws.comvideoamp.com

First party 1 · 273 requests
IBM Adobe Client Data Layer 2.0.2 Adobe Experience Manager Adobe Experience Platform Launch Adobe Target Akamai Akamai Bot Manager Amazon Web Services Emotion Fastly Google Ads HSTS IBM Carbon Design System Java Kaltura Lightbox MUI Material UI Microsoft Clarity Open Graph Prebid Priority Hints React core-js 3.36.1 jQuery 1.12.4 lit-element 3.3.3 lit-html 2.8.0 55% of the page's requests 273

14 tracked companies loaded by the homepage are not in IBM's subprocessor list. A website can use a service without it processing customer data.

Subprocessor of (41)CSV · Atom

41 companies
  • Agilysys agilysys.com
  • Airtable airtable.com AI model provider
  • Apolicy apolicy.io Data Storage
  • AudioStack audiostack.ai Text to speech provider
  • Box box.com
  • Bullhorn bullhorn.com Cloud database management services; Cloud hosting services
  • Celonis celonis.com ● AI inferences and AI services
  • Certara certara.com Cloud hosting (IBM Cloud)
  • Check Point Software Technologies checkpoint.com Support
  • ConnectWise connectwise.com Data Center Provider; United States
  • Daytona daytona.io Cloud Infrastructure
  • Dispel dispel.com Cloud service provider; Data Controller
  • EasyPost easypost.com Cloud Providers
  • Elasticsearch elastic.co Hosting
  • Experian experian.com Mainframe software and support services.; Sub-contractor; Sub-processor
  • Fonn Group fonngroup.com AI functionality (speech-to-text services).
  • Gainsight Software gainsight.com Cloud Service Provider for Certain Generative Artificial Intelligence features.; Natural Language Processing and Cloud Service Provider
  • Google Cloud cloud.google.com Assured Support (US); Technical Support
  • Heap heap.io Performs analytics and reporting on Customer Data within the VOC
  • Higher Logic higherlogic.com AI assistant & Elastic Search
  • HorizonIQ horizoniq.com IBM provides SoftLayer, a dedicated server, managed hosting, and cloud computing provider.
  • Kryterion kryterion.com
  • Medallia medallia.com Watson natural language processing for sentiment analysis.
  • Naviam naviam.io Cloud Infrastructure Operations; Cloud Service Provider
  • PartnerTap partnertap.com Engineering; Enterprise software and cloud services.
  • Persona withpersona.com
  • Precisely Software precisely.com Data Infrastructure
  • Qualtrics qualtrics.com Data hosting facilities.
  • Red Box redboxvoice.com Large-scale cloud database built on Apache Cassandra
  • Sirion sirion.ai Sirion Platform, where all customer data is stored and processed, is; hosted on IBM Cloud
  • SolarWinds solarwinds.com
  • Sysdig sysdig.com Data Storage
  • Temporal temporal.io Datastax Database
  • Textkernel textkernel.com Cloud database management services; Cloud hosting services
  • ThoughtExchange thoughtexchange.com Natural Language API
  • Together AI together.ai Hosting and cloud infrastructure
  • Tungsten Automation tungstenautomation.com Database plugin running on Azure; Tungsten Products or Service(s): Printix
  • UKG ukg.com
  • Uniphore uniphore.com Large-scale cloud database built on Apache Cassandra
  • Virtuozzo virtuozzo.com Hosting provider for Support Gateway
  • Wasabi wasabi.com Compute

ComplianceCSV · Atom

FedRAMP Marketplace

OfferingStatusImpactAgenciesSince
GO.govAuthorizedModerate25
IBM Automation Services for GovernmentAuthorizedModerate11
IBM Cloud for GovernmentAuthorizedHigh4
IBM Data Services for GovernmentAuthorizedModerate1
IBM Envizi ESG ReportingAuthorizedLI-SaaS1
IBM Federal ATOMAuthorizedHigh2
IBM Federal HR CloudAuthorizedModerate5
IBM Platform Services for GovernmentAuthorizedModerate9
SmartCloud for GovernmentAuthorizedHigh4
IBM Platform Services for GovernmentAgency In ProcessHigh—

FedRAMP status from the FedRAMP Marketplace (evidence)

Security recordCSV · Atom

What public security catalogs list for IBM, in their words.

Known exploited vulnerabilities

9 vulnerabilities in IBM's software that CISA lists as exploited in the wild.

CVEProductVulnerabilityListed
CVE-2026-123218Aspera FaspexIBM Aspera Faspex Incorrect Authorization Vulnerability
CVE-2026-9198LangflowIBM Langflow Code Injection Vulnerability
CVE-2022-47986Aspera FaspexIBM Aspera Faspex Code Execution Vulnerability used by ransomware
CVE-2013-3993InfoSphere BigInsightsIBM InfoSphere BigInsights Invalid Input Vulnerability used by ransomware
CVE-2015-7450WebSphere Application Server and Server Hypervisor EditionIBM WebSphere Application Server and Server Hypervisor Edition Code Injection.
CVE-2019-4716Planning AnalyticsIBM Planning Analytics Remote Code Execution Vulnerability
CVE-2020-4427Data Risk ManagerIBM Data Risk Manager Security Bypass Vulnerability
CVE-2020-4428Data Risk ManagerIBM Data Risk Manager Remote Code Execution Vulnerability
CVE-2020-4430Data Risk ManagerIBM Data Risk Manager Directory Traversal Vulnerability

Source: CISA Known Exploited Vulnerabilities catalog (evidence)

ChangesCSV · Atom

  1. Changed registry listing: fedramp:FR2607452240 evidence
  2. Changed registry listing: fedramp:FR2607452240 evidence
  3. Changed registry listing: fedramp:FR2607452240 evidence
  4. Changed registry listing: fedramp:FR2607452240 evidence
Rating badge for IBM's site

IBM transparency rating

It updates with the rating.

<a href="https://thirdpartyindex.com/vendors/ibm"><img src="https://thirdpartyindex.com/badge/ibm.svg" alt="IBM transparency rating on Third Party Index" height="20"></a>
[![IBM transparency rating on Third Party Index](https://thirdpartyindex.com/badge/ibm.svg)](https://thirdpartyindex.com/vendors/ibm)