Keyfactor
Keyfactor declares 6 subprocessors in its subprocessor list, which we last checked on Nov 11, 2026 (evidence). They include Microsoft, Salesforce and Mailgun. No published changes since we first read it on Sep 28, 2026. 1 tracked vendor, eSign, names Keyfactor as a subprocessor.
Not loaded by any published homepage.
Subprocessors CSV of Keyfactor's subprocessors · Atom feed of Keyfactor's subprocessors DORA draft CSV of Keyfactor's subprocessors as declared by Keyfactor what's this? ·
6 third parties.
| Name | Purpose | Location | Listed since |
|---|---|---|---|
| Dotsquares Ltd | Professional Services | ||
| Mailgun (Sinch Email) (If Applicable) | Email, SMTP Provider | ||
| Microsoft Corporation | Hosting Provider | ||
| Penbrothers International Inc. | support services | ||
| Rapid7 | Cybersecurity Solution – Scoped Services | ||
| Salesforce.com, Inc. | Customer Relationship Management |
Web TechnologiesCSV of Keyfactor's web technologies · Atom feed of Keyfactor's web technologies
Keyfactor's homepage made 303 requests to 42 domains, 22 services controlled by another company, and 1 domain not identified.
22 third parties by category: Analytics 7Marketing automation 5Advertising 3CDN 2Live chat 1Cookie compliance 1Other 3
wp.test
12 tracked companies loaded by the homepage are not in Keyfactor's subprocessor list. A website can use a service without it processing customer data.
Subprocessor of (1)CSV of the companies listing Keyfactor · Atom feed of the companies listing Keyfactor
eSign esign.co.uk
ComplianceCSV of Keyfactor's compliance · Atom feed of Keyfactor's compliance
- Certified
- Says it complies with
FedRAMP Marketplace
| Offering | Status | Impact | Agencies | Since |
|---|---|---|---|---|
| Keyfactor for Government | Authorized | Moderate | 1 |
Certifications as Keyfactor's trust center lists them; reports are usually shared on request (evidence) FedRAMP status from the FedRAMP Marketplace (evidence)
Incidents reported by Keyfactor's subprocessorsCSV of incidents reported by vendors Keyfactor lists · Atom feed of incidents reported by vendors Keyfactor lists
2 reported incidents in the last 30 days, by 2 of the vendors Keyfactor lists as subprocessors.
A subprocessor list names a company, not the service an incident touched. This does not show that Keyfactor was involved.
| Date | Company | Incident | Impact | Lasted |
|---|---|---|---|---|
| | Route delays in EU Region | minor | 1 h 3 min | |
| | SIEM - Rapid7 Collector | minor | 10 days |
ChangesCSV of Keyfactor's changes · Atom feed of Keyfactor's changes
See the list as we read it on any date: Time machine
None since tracking began.