# Keeper Security

[7 tracked vendors](https://thirdpartyindex.com/vendors/keeper-security#used-by) name Keeper Security as a subprocessor, including [Teqblaze](https://thirdpartyindex.com/vendors/teqblaze), [Contender Solutions](https://thirdpartyindex.com/vendors/contender-solutions) and [dotCMS](https://thirdpartyindex.com/vendors/dotcms). We have not found a subprocessor list published by Keeper Security. We monitor 8 of its documents, which we last checked on 2026-11-11.

Keeper Security (keepersecurity.com): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/keeper-security
- Documents last verified: 2026-11-11
- Transparency rating: 55/100 (how much it publishes, not how secure it is): Subprocessor list 0/30 (not found); Processing locations 0/8 (no list); Purposes 0/7 (no list); Data processing addendum 12/12; Trust center 8/8; Privacy policy 6/6; security.txt 6/6; Security page 5/5; Status page 5/5; Vulnerability disclosure 5/5; Pages still reachable 8/8
- Supply chain: relies on 0 tracked vendors directly, 0 within two hops, 0 within three; 7 tracked vendors rely on it directly, 8 within two hops, 8 within three
- Cite as: Keeper Security, Third Party Index, https://thirdpartyindex.com/vendors/keeper-security (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Trust center | https://trust.keeper.io/ | 2026-11-11 | 2026-11-11 |
| Data processing addendum | https://www.keepersecurity.com/legal/dpa/ | 2026-11-11 | 2026-10-30 |
| Privacy policy | https://www.keepersecurity.com/legal/terms-of-use/?s=privacy | 2026-11-11 | 2026-11-11 |
| Terms | https://www.keepersecurity.com/legal/terms-of-use/ | 2026-11-11 | 2026-11-11 |
| Security page | https://www.keepersecurity.com/security.html | 2026-11-11 | 2026-11-04 |
| security.txt | https://www.keepersecurity.com/.well-known/security.txt | 2026-11-11 | 2026-09-23 |
| Status page | https://statuspage.keeper.io/ | 2026-11-11 | 2026-11-11 |
| Security advisories | https://www.keepersecurity.com/vulnerability-disclosure-policy/ | 2026-11-11 | 2026-10-21 |

## Subprocessors (0)

No subprocessor list has been found or read for this vendor.

## Compliance

As its trust center lists them.

- Audited: SOC 2, SOC 3, ISO/IEC 27001, ISO/IEC 27017, ISO/IEC 27018, StateRAMP, TX-RAMP ([evidence](https://thirdpartyindex.com/evidence/9657))
- Claimed: GDPR, CCPA/CPRA ([evidence](https://thirdpartyindex.com/evidence/9657))
- FedRAMP Marketplace: High · 6 agency authorizations · since Dec 18, 2025

## Web Technologies

Keeper Security's homepage made 191 requests to 43 domains, and 25 services controlled by another company. Loaded on 2026-11-10 by a browser that accepted nothing; other visits may load more or less. What a page loads is not a list of who receives customer data.

25 third parties by category: Advertising 12 (Google Cloud, X Corp., Microsoft, OpenAI, Podscribe, Reddit, Inc., Snap Inc.; reviewed: Tapad, Inc., Index Exchange Inc.; usually detected as Advertising: Snap, Magnite, Inc., PubMatic); Analytics 8 (ZoomInfo, Crazy Egg, Demandbase, HubSpot, Magellan AI, LinkedIn, G2.com, Meta); Marketing automation 1 (Braze); Cart abandonment 1 (UpSellit); Customer data platform 1 (reviewed: LiveRamp); Font scripts 1 (usually detected as Font scripts: Font Awesome); Issue trackers 1 (Help Scout). Each company that appears controlled by another organization is counted once, under the main category of the technologies detected from it on this homepage or, when none was, the category recorded from the company's own page (marked reviewed) or else the one it is usually detected as on other published homepages (marked as such); unclassified: none of these.

### Third parties (25)

- Google Cloud: 41 requests to google.com, gstatic.com, doubleclick.net, googletagmanager.com, google-analytics.com; DoubleClick Floodlight, Google Analytics, Google Tag Manager, reCAPTCHA
- Snap: 7 requests to snapchat.com
- X Corp.: 5 requests to ads-twitter.com, twitter.com, t.co; Twitter Ads
- ZoomInfo: 5 requests to zoominfo.com, zi-scripts.com; Zoominfo
- Crazy Egg: 4 requests to crazyegg.com; Crazy Egg
- Demandbase: 4 requests to company-target.com, demandbase.com; Demandbase 11.10.0
- HubSpot: 4 requests to hs-analytics.net, hs-banner.com, hs-scripts.com, hubspot.com; HubSpot, HubSpot Analytics
- Magellan AI: 4 requests to mgln.ai; Magellan AI
- Microsoft: 4 requests to bing.com; Microsoft Advertising
- Braze: 3 requests to braze.eu, appboycdn.com; Braze 3.0
- Help Scout: 3 requests to helpscout.net; Help Scout
- LinkedIn: 3 requests to linkedin.com, licdn.com; Linkedin Insight Tag
- OpenAI: 3 requests to openai.com; ChatGPT Ads Measurement Pixel
- Podscribe: 3 requests to pdscrb.com, d34r8q7sht0t9k.cloudfront.net; Podscribe
- Reddit, Inc.: 3 requests to reddit.com, redditstatic.com; Reddit Ads
- Font Awesome: 2 requests to fontawesome.com
- G2.com: 2 requests to g2.com, g2crowd.com; G2 Track Your Prospects
- Magnite, Inc.: 2 requests to rubiconproject.com, tremorhub.com
- Meta: 2 requests to facebook.net; Facebook Pixel 2.9.439
- Snap Inc.: 2 requests to sc-static.net; Snap Pixel
- Tapad, Inc.: 2 requests to tapad.com
- Index Exchange Inc.: 1 request to casalemedia.com
- LiveRamp: 1 request to rlcdn.com
- PubMatic: 1 request to pubmatic.com
- UpSellit: 1 request to upsellit.com; UpSellit

### First party (1)

- Keeper Security: 79 requests to keepersecurity.com; Google Font API, HSTS, Material Design Lite, Nginx, Open Graph, PWA, Priority Hints, React, Slick, core-js 3.32.2, jQuery 3.7.1

14 tracked companies loaded by the homepage are not in Keeper Security's subprocessor list. A website can use a service without it processing customer data.

## Subprocessor of (7)

Tracked vendors whose own subprocessor lists name it, and what they say they use it for.

- [Contender Solutions](https://thirdpartyindex.com/vendors/contender-solutions.md): Password Management
- [dotCMS](https://thirdpartyindex.com/vendors/dotcms.md)
- [InvestorFlow](https://thirdpartyindex.com/vendors/investorflow.md): Password and Access Management; Password and Privileged Account Access Management
- [NimbleRx](https://thirdpartyindex.com/vendors/nimblerx.md): Password Manager
- [Presidio](https://thirdpartyindex.com/vendors/presidio.md): Password management
- [Teqblaze](https://thirdpartyindex.com/vendors/teqblaze.md): Password manager
- [TradeCentric](https://thirdpartyindex.com/vendors/tradecentric.md)

## Service status

Incidents it reported on its own status page.

- Last 90 days: 1 reported incidents (0 major or critical, 1 minor, 0 with no impact stated)
- Typical time to resolve: 3 h 11 min
- Status page last read: 2026-11-12
- 2026-09-09: SMS 2FA issues with AWS aggregator (minor)
- 2026-07-31: EU KeeperPAM router and gateway connections (no impact stated)
- 2026-07-08: Resolved: Keeper Gateway and KSM API errors (major)
- 2026-06-19: Direct record sharing enforcement issue (minor)
- 2026-03-31: API errors during maintenance operation (major)
- 2026-03-23: Resolved: KeeperPAM Connection Errors in US Data Center (major)
- 2026-03-16: Resolved: KeeperPAM Connection Errors in US Data Center (major)
- 2026-02-19: US GovCloud Region - Login Errors Resolved (no impact stated)

## Recent changes

Changes to its documents and subprocessor list since monitoring began.

- 2026-10-17: Changed registry listing: fedramp:FR2116544598A ([evidence](https://thirdpartyindex.com/evidence/115244))

Feed: https://thirdpartyindex.com/vendors/keeper-security/changes.atom

## Security contact

From its security.txt (https://www.keepersecurity.com/.well-known/security.txt) ([evidence](https://thirdpartyindex.com/evidence/7164)):

- Contact: https://bugcrowd.com/engagements/keepersecurity
- Disclosure policy: https://keepersecurity.com/security.html
- Acknowledgments: https://bugcrowd.com/engagements/keepersecurity/hall_of_fames
- Security jobs: https://apply.workable.com/keepersecurity/
- Languages: en
- Valid until 2026-12-31

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api