Kinsta®
Transparency
Breakdown
| Subprocessor list | 30 / 30 | |
| Processing locations | 8 / 8 | |
| Purposes | 7 / 7 | |
| Data processing addendum | 12 / 12 | |
| Trust center | 8 / 8 | |
| Privacy policy | 6 / 6 | |
| security.txt | 6 / 6 | |
| Security page | 5 / 5 | |
| Status page | 5 / 5 | |
| Vulnerability disclosure | not found | 0 / 5 |
| Pages still reachable | 8 / 8 | |
| Total | 95 / 100 |
Only documents we can retrieve count: a page behind a login or a broken link scores nothing.
Badge
For Kinsta®'s own site; it updates with the rating.
<a href="https://thirdpartyindex.com/vendors/kinsta"><img src="https://thirdpartyindex.com/badge/kinsta.svg" alt="Kinsta® transparency rating on Third Party Index" height="20"></a>[](https://thirdpartyindex.com/vendors/kinsta)Documents
| Document | Verified | Changed | Evidence |
|---|---|---|---|
| Trust center vanta | snapshot | ||
| Subprocessor list | snapshot | ||
| Data processing addendum | snapshot | ||
| Privacy policy | snapshot | ||
| Terms | snapshot | ||
| Security page | snapshot | ||
| security.txt | snapshot | ||
| Status page statuspage | snapshot |
Subprocessors
| Name | Purpose | Location | Listed since |
|---|---|---|---|
| Amazon Web Services, Inc. | DNS services (Route 53) | For additional information, please review https://aws.amazon.com/compliance/data-privacy/.; United States | |
| Anthropic, PBC | AI-powered tooling and analytics | For additional information, please review https://www.anthropic.com/legal/non-user-privacy-policy and https://www.anthropic.com/legal/data-processing-addendum.; United States and Ireland | |
| Clickhouse, Inc. | Analytics and log storage | For additional information, please review https://trust.clickhouse.com/.; United States | |
| Cloudflare, Inc. | Security and performance | For additional information, please review Cloudflare’s commitment to GDPR compliance and their article on data localization.; Regional – Kinsta utilizes the Cloudflare Data Localization Suite. Data centers are located around the world. | |
| Google LLC / Google Ireland Limited | Hosting and security | Customer’s Choice – Customers choose the data center where their Customer Applications will be hosted. Data centers are located around the world.; For additional information, please review https://cloud.google.com/privacy/gdpr.; Note: Kinsta’s analytics cluster, which processes IP addresses and other access log information from Client Applications, is hosted in the United States. | |
| Hubspot, Inc. | Customer support and communication | For additional information, please review https://knowledge.hubspot.com/account-security/hubspot-cloud-infrastructure-and-data-hosting-frequently-asked-questions.; United States | |
| Inactiv.com Media Solutions Private Limited and BlogVault Inc. d/b/a Migrate Guru | Migrations | European Union; For additional information, please review https://migrateguru.com/gdpr/. | |
| Intercom, Inc. | Customer support and communication | For additional information, please review https://www.intercom.com/legal/security-policy.; United States | |
| Mailchannels Corporation | Transmitting transactional emails | Canada, United States; For additional information, please review https://www.mailchannels.com/gdpr/. | |
| OpenAI OpCo, LLC / OpenAI Ireland Limited | AI-powered tooling and analytics | For additional information, please review https://openai.com/policies/privacy-policy/ and https://openai.com/policies/data-processing-addendum/.; United States and Ireland | |
| Oracle America, Inc | Hosting and security | Customer’s Choice – Customers choose the data center where their Customer Applications will be hosted. Data centers are located around the world.; For additional information, please review https://www.oracle.com/security/gdpr/.; Note: Kinsta’s analytics cluster, which processes IP addresses and other access log information from Client Applications, is hosted in the United States. | |
| Patchstack OÜ | Security, vulnerability detection, and virtual patching | For additional information, please review https://patchstack.com/privacy-policy and https://patchstack.com/terms-and-conditions/.; United States and European Union |
Listed as a subprocessor by (2)
Purposes as each company states them.
Syskit Point syskit.com Web hosting, Security
Toggl toggl.com Managed WordPress hosting provider
Changes
- Changed subprocessor: Amazon Web Services, Inc. services: none → Kinsta Managed Hosting evidence
- Changed subprocessor: Anthropic, PBC services: none → Kinsta Managed Hosting, Sevalla evidence
- Changed subprocessor: Clickhouse, Inc. services: none → Kinsta Managed Hosting, Sevalla evidence
- Changed subprocessor: Cloudflare, Inc. services: none → Kinsta Managed Hosting, Sevalla evidence
- Changed subprocessor: Google LLC / Google Ireland Limited services: none → Kinsta Managed Hosting, Sevalla evidence
- Changed subprocessor: Hubspot, Inc. services: none → Kinsta Managed Hosting, Sevalla evidence
- Changed subprocessor: Inactiv.com Media Solutions Private Limited and BlogVault Inc. d/b/a Migrate Guru services: none → Kinsta Managed Hosting evidence
- Changed subprocessor: Intercom, Inc. services: none → Kinsta Managed Hosting, Sevalla evidence
- Changed subprocessor: Mailchannels Corporation services: none → Kinsta Managed Hosting evidence
- Changed subprocessor: OpenAI OpCo, LLC / OpenAI Ireland Limited services: none → Kinsta Managed Hosting, Sevalla evidence
- Changed subprocessor: Oracle America, Inc services: none → Kinsta Managed Hosting, Sevalla evidence
- Added subprocessor: Patchstack OÜ evidence