# Kaseya

We monitor the [subprocessor list Kaseya publishes](https://www.kaseya.com/legal/subprocessors/), which we last checked on 2026-11-11, but have not read any entries from it. A reading from 2026-11-05 is being checked. [6 tracked vendors](https://thirdpartyindex.com/vendors/kaseya#used-by) name Kaseya as a subprocessor, including [ConnectWise](https://thirdpartyindex.com/vendors/connectwise), [Experian](https://thirdpartyindex.com/vendors/experian) and [Noonlight](https://thirdpartyindex.com/vendors/noonlight).

Kaseya (kaseya.com): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/kaseya
- Documents last verified: 2026-11-11
- Transparency rating: 49/100 (how much it publishes, not how secure it is): Subprocessor list 0/30 (published; no entries could be read); Processing locations 0/8 (no list); Purposes 0/7 (no list); Data processing addendum 12/12; Trust center 8/8; Privacy policy 6/6; security.txt 0/6 (not found); Security page 5/5; Status page 5/5; Vulnerability disclosure 5/5; Pages still reachable 8/8
- Supply chain: relies on 0 tracked vendors directly, 0 within two hops, 0 within three; 6 tracked vendors rely on it directly, 15 within two hops, 18 within three
- Cite as: Kaseya, Third Party Index, https://thirdpartyindex.com/vendors/kaseya (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Trust center | https://trust.kaseya.com/ | 2026-11-11 | 2026-11-11 |
| Subprocessor list | https://www.kaseya.com/legal/subprocessors/ | 2026-11-11 | 2026-11-05 |
| Data processing addendum | https://www.kaseya.com/legal/kaseya-data-processing-addendum/ | 2026-11-11 | 2026-11-05 |
| Privacy policy | https://www.kaseya.com/legal/kaseya-privacy-statement/ | 2026-11-11 | 2026-11-05 |
| Terms | https://www.kaseya.com/legal/website-terms-of-use/ | 2026-11-11 | 2026-11-05 |
| Security page | https://www.kaseya.com/solutions/it-security/ | 2026-11-11 | 2026-11-05 |
| Status page | https://status.kaseya.com/ | 2026-11-11 | 2026-11-11 |
| Security advisories | https://www.kaseya.com/legal/vulnerability-disclosure-policy/ | 2026-11-11 | 2026-11-05 |

## Subprocessors (0)

No subprocessor list has been found or read for this vendor.

## Web Technologies

Kaseya's homepage made 88 requests to 7 domains, and 4 services controlled by another company. Loaded on 2026-11-03 by a browser that accepted nothing; other visits may load more or less. What a page loads is not a list of who receives customer data.

4 third parties by category: Marketing automation 2 (Lunio; usually detected as Marketing automation: Salesloft); Tag managers 1 (Google Cloud); Cookie compliance 1 (OneTrust). Each company that appears controlled by another organization is counted once, under the main category of the technologies detected from it on this homepage or, when none was, the category recorded from the company's own page (marked reviewed) or else the one it is usually detected as on other published homepages (marked as such); unclassified: none of these.

### Third parties (4)

- OneTrust: 22 requests to cookielaw.org, onetrust.com; OneTrust
- Google Cloud: 2 requests to googlesyndication.com, googletagmanager.com; Google Tag Manager
- Lunio: 2 requests to mplat-ppcprotect.com; Lunio
- Salesloft: 1 request to driftt.com

### First party (1)

- Kaseya: 61 requests to kaseya.com; Astro, Google Analytics, HSTS, Microsoft Clarity, Netlify, Open Graph, PostHog

4 tracked companies loaded by the homepage are not in Kaseya's subprocessor list. A website can use a service without it processing customer data.

## Subprocessor of (6)

Tracked vendors whose own subprocessor lists name it, and what they say they use it for.

- [ConnectWise](https://thirdpartyindex.com/vendors/connectwise.md): Automated payment management platform; Automates payment processing and recurring billing for MSPs
- [Experian](https://thirdpartyindex.com/vendors/experian.md): IT management software provider; supplies data backup and disaster recovery infrastructure; Sub-Processor
- [Noonlight](https://thirdpartyindex.com/vendors/noonlight.md): Cloud Backup for Microsoft 365
- [Remesh](https://thirdpartyindex.com/vendors/remesh.md): Provides backup and restore services for Google Workspace.
- [TradeCentric](https://thirdpartyindex.com/vendors/tradecentric.md)
- [WatchGuard Technologies](https://thirdpartyindex.com/vendors/watchguard-technologies.md): RMM (Remote Management and Monitoring) product.

## Security record

CISA's Known Exploited Vulnerabilities catalog lists 3 vulnerabilities in its software:

- CVE-2017-18362 (Virtual System/Server Administrator (VSA)), listed 2022-05-24: Kaseya VSA SQL Injection Vulnerability (known ransomware use)
- CVE-2018-20753 (Virtual System/Server Administrator (VSA)), listed 2022-04-13: Kaseya VSA Remote Code Execution Vulnerability (known ransomware use)
- CVE-2021-30116 (Virtual System/Server Administrator (VSA)), listed 2021-11-03: Kaseya Virtual System/Server Administrator (VSA) Information Disclosure Vulnerability (known ransomware use)

## Service status

Incidents it reported on its own status page.

- Last 90 days: 89 reported incidents (44 major or critical, 33 minor, 12 with no impact stated)
- Typical time to resolve: 10 h 36 min
- Status page last read: 2026-11-12
- Its status page says now: Partially Degraded Service (affected: Datto RMM: degraded performance, Uniview Unified Backup Portal: under maintenance, UTMSP: under maintenance, VSA 9: under maintenance)
- Under way: ConnectBooster - Payment Failures due to Surcharge Settings Between ConnectBooster and NMI (major), since 2026-11-11 23:33 UTC
- Under way: DRMM - Syrah - Integration - ITGlue - 401 errors in Web Remote (minor), since 2026-11-11 11:50 UTC
- Under way: Google Brotli Vulnerability (CVE-2026-111497) (no impact stated), since 2026-11-10 19:00 UTC
- Under way: Autotask – Precautionary Suspension of N-able Integrations (no impact stated), since 2026-11-09 20:52 UTC
- Under way: Datto RMM - Version 15.2.0 (Pinotage, Syrah, Zinfandel, Concord) - Autotask Integration Device Sync Delays (major), since 2026-11-06 16:49 UTC
- Under way: Datto BCDR - UK Region - Offsite Synchronization Performance Degradation (minor), since 2026-10-29 19:57 UTC
- Under way: PHP vulnerabilities (CVE-2026-109618 and CVE-2026-109619): Kaseya status - Investigation and Remediation (no impact stated), since 2026-10-21 21:51 UTC
- Under way: ConnectWise Cloud Backup Issue Investigation (no impact stated), since 2026-10-17 20:28 UTC
- 2026-12-29: Datto SaaS Protection - Node 'use1-bfyii-288' - Maintenance Notice (minor)
- 2026-12-24: Datto Endpoint Backup - Backup Failures On "gbe2-dtc-server-409281" (minor)
- 2026-11-11: ConnectBooster - Payment Failures due to Surcharge Settings Between ConnectBooster and NMI (major)
- 2026-11-11: DRMM - Syrah - Integration - ITGlue - 401 errors in Web Remote (minor)
- 2026-11-10: Google Brotli Vulnerability (CVE-2026-111497) (no impact stated)
- 2026-11-10: Datto Partner Portal - Login - Unable to proceed past the Account Selection Page (critical)
- 2026-11-09: Autotask – Precautionary Suspension of N-able Integrations (no impact stated)
- 2026-11-07: \[Datto Partner Portal\] - Datto partner portal is not loading and gives a 504 Gateway Timeout error, and Recovery Launchpad is loading slowly (major)

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api