Keyfactor

keyfactor.com

Keyfactor declares 6 subprocessors in its subprocessor list, which we last checked on Nov 11, 2026 (evidence). They include Microsoft, Salesforce and Mailgun. No published changes since we first read it on Sep 28, 2026. 1 tracked vendor, eSign, names Keyfactor as a subprocessor.

Subprocessors CSV of Keyfactor's subprocessors · Atom feed of Keyfactor's subprocessors DORA draft CSV of Keyfactor's subprocessors as declared by Keyfactor what's this? · 

6 third parties.

NamePurposeLocationListed since
Dotsquares Ltd Professional Services
Mailgun (Sinch Email) (If Applicable) Email, SMTP Provider
Microsoft Corporation Hosting Provider
Penbrothers International Inc. support services
Rapid7 Cybersecurity Solution – Scoped Services
Salesforce.com, Inc. Customer Relationship Management

Web TechnologiesCSV of Keyfactor's web technologies · Atom feed of Keyfactor's web technologies

Keyfactor's homepage made 303 requests to 42 domains, 22 services controlled by another company, and 1 domain not identified.

Analytics (7): HubSpot, Google Cloud, LinkedIn, Meta, Quora, Cloudflare, Crazy EggMarketing automation (5): 6Sense Insights, Inc., PathFactory, Dreamdata, Oktopost; usually detected as Marketing automation: AdobeAdvertising (3): Microsoft, Reddit, Inc.; usually detected as Advertising: XandrCDN (2): UNPKG, jsDelivrLive chat (1): Qualified.com, Inc.Cookie compliance (1): OneTrustOther (3): Issue trackers: Sentry; usually detected as Translation: Weglot; Video players: Wistia

22 third parties by category: Analytics 7Marketing automation 5Advertising 3CDN 2Live chat 1Cookie compliance 1Other 3

Third parties 22 · 186 requests
Qualified.com, Inc. Qualified 22% of the page's requests 66
OneTrust OneTrust 8% of the page's requests 24
6Sense Insights, Inc. 6sense 7% of the page's requests 22
PathFactory PathFactory 5% of the page's requests 16
Microsoftsubprocessor Microsoft Advertising 4% of the page's requests 11
HubSpot HubSpot HubSpot Analytics 3% of the page's requests 10
Adobe typekit.net 3% of the page's requests 8
Google Cloud Google Analytics Google Tag Manager 2% of the page's requests 5
LinkedIn Linkedin Insight Tag 1% of the page's requests 4
Meta Facebook Pixel 2.9.419 <1% of the page's requests 3
Dreamdata Dreamdata <1% of the page's requests 2
Oktopost Oktopost <1% of the page's requests 2
Quora Quora Pixel <1% of the page's requests 2
Reddit, Inc. Reddit Ads <1% of the page's requests 2
Sentry Sentry 9.6.1 <1% of the page's requests 2
Cloudflare Cloudflare Browser Insights <1% of the page's requests 1
Crazy Egg Crazy Egg <1% of the page's requests 1
UNPKG Unpkg web-vitals 5.0.1 <1% of the page's requests 1
Weglot weglot.com <1% of the page's requests 1
Wistia Wistia <1% of the page's requests 1
Xandr adnxs.com <1% of the page's requests 1
jsDelivr jsDelivr <1% of the page's requests 1
Unknown 1 · 1 request

wp.test

First party 1 · 116 requests
Keyfactor Adobe Fonts Cloudflare Font Awesome HSTS HTTP/3 Microsoft Clarity MySQL Open Graph PHP Priority Hints Pure CSS React Typekit Weglot WordPress WordPress Block Editor Yoast SEO 28.4 Yoast SEO Premium 22.3 core-js 3.32.2 styled-components 5.2.3 wpBakery 38% of the page's requests 116

12 tracked companies loaded by the homepage are not in Keyfactor's subprocessor list. A website can use a service without it processing customer data.

Subprocessor of (1)CSV of the companies listing Keyfactor · Atom feed of the companies listing Keyfactor

1 company

ComplianceCSV of Keyfactor's compliance · Atom feed of Keyfactor's compliance

Certified
Says it complies with

FedRAMP Marketplace

OfferingStatusImpactAgenciesSince
Keyfactor for GovernmentAuthorizedModerate1

Certifications as Keyfactor's trust center lists them; reports are usually shared on request (evidence) FedRAMP status from the FedRAMP Marketplace (evidence)

Incidents reported by Keyfactor's subprocessorsCSV of incidents reported by vendors Keyfactor lists · Atom feed of incidents reported by vendors Keyfactor lists

2 reported incidents in the last 30 days, by 2 of the vendors Keyfactor lists as subprocessors.

A subprocessor list names a company, not the service an incident touched. This does not show that Keyfactor was involved.

DateCompanyIncidentImpactLasted
MailgunRoute delays in EU Region minor1 h 3 min
Rapid7SIEM - Rapid7 Collector minor10 days

Who is around them.

ChangesCSV of Keyfactor's changes · Atom feed of Keyfactor's changes

See the list as we read it on any date: Time machine

None since tracking began.

Rating badge for Keyfactor's site

Keyfactor transparency rating

It updates with the rating.

<a href="https://thirdpartyindex.com/vendors/keyfactor"><img src="https://thirdpartyindex.com/badge/keyfactor.svg" alt="Keyfactor transparency rating on Third Party Index" height="20"></a>
[![Keyfactor transparency rating on Third Party Index](https://thirdpartyindex.com/badge/keyfactor.svg)](https://thirdpartyindex.com/vendors/keyfactor)