# Kinsta® Kinsta® declares [12 subprocessors](https://thirdpartyindex.com/vendors/kinsta#subprocessors) in [its subprocessor list](https://kinsta.com/legal/subprocessors/), which we last checked on 2026-11-11 ([evidence](https://thirdpartyindex.com/evidence/8457)). They include [Amazon Web Services](https://thirdpartyindex.com/vendors/amazon-web-services), [OpenAI](https://thirdpartyindex.com/vendors/openai) and [Anthropic](https://thirdpartyindex.com/vendors/anthropic). The list last changed on 2026-09-24: 1 added, 0 removed, 11 changed. [3 tracked vendors](https://thirdpartyindex.com/vendors/kinsta#used-by) name Kinsta® as a subprocessor, including [Syskit Point](https://thirdpartyindex.com/vendors/syskit-point), [Toggl](https://thirdpartyindex.com/vendors/toggl) and [Adiacent](https://thirdpartyindex.com/vendors/adiacent). Kinsta® (kinsta.com): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index. - Page: https://thirdpartyindex.com/vendors/kinsta - Documents last verified: 2026-11-11 - Transparency rating: 95/100 (how much it publishes, not how secure it is): Subprocessor list 30/30; Processing locations 8/8; Purposes 7/7; Data processing addendum 12/12; Trust center 8/8; Privacy policy 6/6; security.txt 6/6; Security page 5/5; Status page 5/5; Vulnerability disclosure 0/5 (not found); Pages still reachable 8/8 - Supply chain: relies on 8 tracked vendors directly, 59 within two hops, 249 within three; 3 tracked vendors rely on it directly, 5 within two hops, 7 within three - Cite as: Kinsta®, Third Party Index, https://thirdpartyindex.com/vendors/kinsta (data CC BY 4.0) ## Documents | Document | URL | Last verified | Last changed | |---|---|---|---| | Trust center | https://trust.kinsta.com/ | 2026-11-11 | 2026-11-10 | | Subprocessor list | https://kinsta.com/legal/subprocessors/ | 2026-11-11 | 2026-09-24 | | Data processing addendum | https://kinsta.com/legal/data-processing-addendum/ | 2026-11-11 | 2026-09-30 | | Privacy policy | https://kinsta.com/legal/privacy-policy/ | 2026-11-11 | 2026-09-22 | | Terms | https://kinsta.com/legal/terms-service/ | 2026-11-11 | 2026-09-22 | | Security page | https://kinsta.com/wordpress-hosting/security/ | 2026-11-11 | 2026-11-09 | | security.txt | https://kinsta.com/.well-known/security.txt | 2026-11-11 | 2026-09-22 | | Status page | https://status.kinsta.com/ | 2026-11-11 | 2026-11-11 | ## Subprocessors (12) As its own list states them. | Subprocessor | Purpose | Location | Listed since | |---|---|---|---| | [Amazon Web Services, Inc.](https://thirdpartyindex.com/vendors/amazon-web-services.md) | DNS services (Route 53) | For additional information, please review https://aws.amazon.com/compliance/data-privacy/.; United States | 2026-09-24 | | [Anthropic, PBC](https://thirdpartyindex.com/vendors/anthropic.md) (AI model provider: Anthropic) | AI-powered tooling and analytics | For additional information, please review https://www.anthropic.com/legal/non-user-privacy-policy and https://www.anthropic.com/legal/data-processing-addendum.; United States and Ireland | 2026-09-24 | | [Clickhouse, Inc.](https://thirdpartyindex.com/vendors/clickhouse.md) | Analytics and log storage | For additional information, please review https://trust.clickhouse.com/.; United States | 2026-09-24 | | [Cloudflare, Inc.](https://thirdpartyindex.com/vendors/cloudflare.md) | Security and performance | For additional information, please review Cloudflare’s commitment to GDPR compliance and their article on data localization.; Regional – Kinsta utilizes the Cloudflare Data Localization Suite. Data centers are located around the world. | 2026-09-24 | | Google LLC / Google Ireland Limited | Hosting and security | Customer’s Choice – Customers choose the data center where their Customer Applications will be hosted. Data centers are located around the world.; For additional information, please review https://cloud.google.com/privacy/gdpr.; Note: Kinsta’s analytics cluster, which processes IP addresses and other access log information from Client Applications, is hosted in the United States. | 2026-09-24 | | [Hubspot, Inc.](https://thirdpartyindex.com/vendors/hubspot.md) | Customer support and communication | For additional information, please review https://knowledge.hubspot.com/account-security/hubspot-cloud-infrastructure-and-data-hosting-frequently-asked-questions.; United States | 2026-09-24 | | Inactiv.com Media Solutions Private Limited and BlogVault Inc. d/b/a Migrate Guru | Migrations | European Union; For additional information, please review https://migrateguru.com/gdpr/. | 2026-09-24 | | [Intercom, Inc.](https://thirdpartyindex.com/vendors/intercom.md) | Customer support and communication | For additional information, please review https://www.intercom.com/legal/security-policy.; United States | 2026-09-24 | | Mailchannels Corporation | Transmitting transactional emails | Canada; United States; For additional information, please review https://www.mailchannels.com/gdpr/. | 2026-10-10 | | [OpenAI OpCo, LLC / OpenAI Ireland Limited](https://thirdpartyindex.com/vendors/openai.md) (AI model provider: OpenAI) | AI-powered tooling and analytics | For additional information, please review https://openai.com/policies/privacy-policy/ and https://openai.com/policies/data-processing-addendum/.; United States and Ireland | 2026-09-24 | | [Oracle America, Inc](https://thirdpartyindex.com/vendors/oracle.md) | Hosting and security | Customer’s Choice – Customers choose the data center where their Customer Applications will be hosted. Data centers are located around the world.; For additional information, please review https://www.oracle.com/security/gdpr/.; Note: Kinsta’s analytics cluster, which processes IP addresses and other access log information from Client Applications, is hosted in the United States. | 2026-09-24 | | Patchstack OÜ | Security, vulnerability detection, and virtual patching | For additional information, please review https://patchstack.com/privacy-policy and https://patchstack.com/terms-and-conditions/.; United States and European Union | 2026-09-24 | Read from ([evidence](https://thirdpartyindex.com/evidence/8457)). CSV: https://thirdpartyindex.com/vendors/kinsta/subprocessors.csv AI model providers (or a cloud provider's AI model service) among these entries: 2. All vendors that list one: https://thirdpartyindex.com/ai ## Compliance As its trust center lists them. - Audited: SOC 2 Type II, ISO/IEC 27001, ISO/IEC 27017, ISO/IEC 27018, CSA STAR ([evidence](https://thirdpartyindex.com/evidence/14029)) - Claimed: GDPR, CCPA/CPRA ([evidence](https://thirdpartyindex.com/evidence/14029)) ## Web Technologies Kinsta®'s homepage made 202 requests to 35 domains, and 14 services controlled by another company. Loaded on 2026-11-04 by a browser that accepted nothing; other visits may load more or less. What a page loads is not a list of who receives customer data. 14 third parties by category: Analytics 6 (HubSpot, Crazy Egg, LinkedIn, G2.com, Meta; usually detected as Analytics: Wingify); Advertising 5 (Google Cloud, X Corp., Microsoft, OpenAI, Reddit, Inc.); Cookie compliance 1 (Ketch); Payment processors 1 (Stripe); Video players 1 (Wistia). Each company that appears controlled by another organization is counted once, under the main category of the technologies detected from it on this homepage or, when none was, the category recorded from the company's own page (marked reviewed) or else the one it is usually detected as on other published homepages (marked as such); unclassified: none of these. ### Third parties (14) - HubSpot: 32 requests to hsappstatic.net, hubspot.com, hs-scripts.com, hscollectedforms.net, hsforms.com, hubapi.com, hs-analytics.net, hs-banner.com, hsadspixel.net, usemessages.com; HubSpot, HubSpot Analytics, HubSpot Chat (its subprocessor list names it too) - Google Cloud: 23 requests to google.com, doubleclick.net, googletagmanager.com; DoubleClick Floodlight, Google Analytics, Google Tag Manager - X Corp.: 13 requests to t.co, twitter.com, ads-twitter.com; Twitter Ads - Ketch: 8 requests to ketchcdn.com, ketchjs.com; Ketch - Microsoft: 6 requests to bing.com, bing.net; Microsoft Advertising - Stripe: 6 requests to stripe.com, stripe.network; Stripe 3 - Crazy Egg: 4 requests to crazyegg.com; Crazy Egg - LinkedIn: 4 requests to licdn.com, linkedin.com; Linkedin Insight Tag - OpenAI: 4 requests to openai.com; ChatGPT Ads Measurement Pixel (its subprocessor list names it too) - Wingify: 4 requests to wingify.net - G2.com: 3 requests to g2.com, g2crowd.com; G2 Track Your Prospects - Meta: 3 requests to facebook.net, facebook.com; Facebook Pixel 2.9.435 - Reddit, Inc.: 3 requests to reddit.com, redditstatic.com; Reddit Ads - Wistia: 1 request to wistia.net; Wistia ### First party (1) - Kinsta®: 88 requests to kinsta.com; Cloudflare, Emotion, HSTS, Kinsta, LottieFiles, MySQL, Open Graph, PHP, Priority Hints, RSS, Swiper, Webpack, WordPress, WordPress Block Editor, Yoast SEO 24.6, Yoast SEO Premium 24.6, jQuery 3.7.1, jQuery Migrate 3.4.1 7 tracked companies loaded by the homepage are not in Kinsta®'s subprocessor list. A website can use a service without it processing customer data. ## Subprocessor of (3) Tracked vendors whose own subprocessor lists name it, and what they say they use it for. - [Adiacent](https://thirdpartyindex.com/vendors/adiacent.md): utilizziamo Kinsta per l’hosting dei siti basati su WordPress. - [Syskit Point](https://thirdpartyindex.com/vendors/syskit-point.md): Web hosting, Security - [Toggl](https://thirdpartyindex.com/vendors/toggl.md): Managed WordPress hosting provider ## Service status Incidents it reported on its own status page. - Last 90 days: 11 reported incidents (5 major or critical, 3 minor, 3 with no impact stated) - Typical time to resolve: 5 h 31 min - Status page last read: 2026-11-12 - 2026-10-29: Downloadable Backup actions are stuck in processing status in the MyKinsta Dashboard. (minor) - 2026-10-26: MFA emails not being sent for MyKinsta (major) - 2026-10-23: Information in regards to newly discovered PHP vulnerability CVE-2026-115560 (Oct 23, 2026) (no impact stated) - 2026-10-21: PHP Security Vulnerability Update (no impact stated) - 2026-10-20: Partial outage in London datacenter (minor) - 2026-10-08: Service disruption at the Northern Virginia (US East 4) data center (major) - 2026-08-27: Service disruption at the Toronto (CA) data center (major) - 2026-08-26: MyKinsta performance degradation (minor) ## Incidents reported by Kinsta®'s subprocessors Incidents reported in the last 30 days on their own status pages by 5 vendors Kinsta® lists as subprocessors. A subprocessor list names a company, not the service an incident touched. - 2026-11-11: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Kinsta® lists as a subprocessor, reported Unable to start new Workspace Agent runs (critical) - 2026-11-11: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Kinsta® lists as a subprocessor, reported Elevated errors affecting logins, sign-ups, and ChatGPT features (minor) - 2026-11-11: [ClickHouse](https://thirdpartyindex.com/vendors/clickhouse#status), which Kinsta® lists as a subprocessor, reported Provisioning and scaling operations may take longer in AWS ap-northeast-1 Tokyo (minor) - 2026-11-10: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Kinsta® lists as a subprocessor, reported Elevated errors on Fable 52 and Mythos 52 (no impact stated) - 2026-11-10: [HubSpot](https://thirdpartyindex.com/vendors/hubspot#status), which Kinsta® lists as a subprocessor, reported Some HubSpot tools may be unavailable for some users (no impact stated) - 2026-11-10: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Kinsta® lists as a subprocessor, reported Incorrect cost data in Costs API exports (no impact stated) - 2026-11-09: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Kinsta® lists as a subprocessor, reported Elevated Errors On API (minor) - 2026-11-09: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Kinsta® lists as a subprocessor, reported Elevated ChatGPT Conversation Errors (minor) - 2026-11-08: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Kinsta® lists as a subprocessor, reported Elevated errors with image generation (minor) - 2026-11-08: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Kinsta® lists as a subprocessor, reported Degraded performance for Claude Fable 5.1 (minor) - 2026-11-06: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Kinsta® lists as a subprocessor, reported Elevated error rates with some U.S. business Mastercards (no impact stated) - 2026-11-06: [Intercom](https://thirdpartyindex.com/vendors/intercom#status), which Kinsta® lists as a subprocessor, reported Elevated errors and latencies in the European hosting region. (major) - 2026-11-05: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Kinsta® lists as a subprocessor, reported ChatGPT Work and Dots Errors (minor) - 2026-11-04: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Kinsta® lists as a subprocessor, reported Elevated error rates across paid ChatGPT plans (minor) - 2026-11-03: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Kinsta® lists as a subprocessor, reported File upload errors in ChatGPT (minor) - 2026-11-02: [ClickHouse](https://thirdpartyindex.com/vendors/clickhouse#status), which Kinsta® lists as a subprocessor, reported SQL Console database connection outage (minor) - 2026-11-02: [HubSpot](https://thirdpartyindex.com/vendors/hubspot#status), which Kinsta® lists as a subprocessor, reported HubSpot is experiencing issues (no impact stated) - 2026-10-30: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Kinsta® lists as a subprocessor, reported Elevated errors with search in Dots, ChatGPT Work, and certain ChatGPT thinking experiences (minor) - 2026-10-30: [Intercom](https://thirdpartyindex.com/vendors/intercom#status), which Kinsta® lists as a subprocessor, reported Slow Fin Procedures (minor) - 2026-10-30: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Kinsta® lists as a subprocessor, reported Elevated errors for GPT Image 2 API image edits (minor) - 2026-10-28: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Kinsta® lists as a subprocessor, reported Elevated errors affecting the Google Calendar connector (minor) - 2026-10-28: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Kinsta® lists as a subprocessor, reported Elevated errors affecting the Gmail connector (minor) - 2026-10-27: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Kinsta® lists as a subprocessor, reported Elevated errors for Claude Sonnet 5.5 (major) - 2026-10-27: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Kinsta® lists as a subprocessor, reported 6.1 Sol Degraded Model Performance (minor) - 2026-10-27: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Kinsta® lists as a subprocessor, reported Elevated errors for Claude Sonnet 5.5 (major) - 2026-10-27: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Kinsta® lists as a subprocessor, reported Elevated error rates for most hosted Code Reviews and Security Reviews on private GitHub repositories (no impact stated) - 2026-10-26: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Kinsta® lists as a subprocessor, reported Elevated error rates for Ads POST requests (minor) - 2026-10-25: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Kinsta® lists as a subprocessor, reported Elevated errors for Claude Fable 5.1 (major) - 2026-10-25: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Kinsta® lists as a subprocessor, reported Elevated errors for Claude Sonnet 5.5 and other models (major) - 2026-10-24: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Kinsta® lists as a subprocessor, reported Elevated errors for Claude Fable 5 and Claude Fable 5.1 (major) - 2026-10-24: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Kinsta® lists as a subprocessor, reported Elevated errors for Claude Opus 5.5 (major) - 2026-10-23: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Kinsta® lists as a subprocessor, reported Elevated errors for Claude Fable 5.1, Sonnet 5.5, and Haiku 5.5 (critical) - 2026-10-23: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Kinsta® lists as a subprocessor, reported Degraded experience with ChatGPT app connections using CIMD (minor) - 2026-10-23: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Kinsta® lists as a subprocessor, reported Help Center Chat Support Degraded (no impact stated) - 2026-10-23: [HubSpot](https://thirdpartyindex.com/vendors/hubspot#status), which Kinsta® lists as a subprocessor, reported Some HubSpot tools may be unavailable for some users (no impact stated) - 2026-10-23: [ClickHouse](https://thirdpartyindex.com/vendors/clickhouse#status), which Kinsta® lists as a subprocessor, reported Degraded support ticket submission and response (minor) - 2026-10-23: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Kinsta® lists as a subprocessor, reported Delays in customer support responses (no impact stated) - 2026-10-22: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Kinsta® lists as a subprocessor, reported New Ad Accounts failing to provision admins (minor) - 2026-10-22: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Kinsta® lists as a subprocessor, reported Degraded Performance of Dots on Enterprise (minor) - 2026-10-22: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Kinsta® lists as a subprocessor, reported Elevated errors affecting Connectors (minor) - 2026-10-22: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Kinsta® lists as a subprocessor, reported Elevated ChatGPT conversation and Responses API errors (minor) - 2026-10-22: [HubSpot](https://thirdpartyindex.com/vendors/hubspot#status), which Kinsta® lists as a subprocessor, reported Update on PHP security vulnerability (no impact stated) - 2026-10-21: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Kinsta® lists as a subprocessor, reported Authentication errors for some users (major) - 2026-10-21: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Kinsta® lists as a subprocessor, reported Degraded performance for Claude Fable 5 (minor) - 2026-10-21: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Kinsta® lists as a subprocessor, reported Elevated error rates for gpt-5.6-luna API requests (minor) - 2026-10-21: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Kinsta® lists as a subprocessor, reported Elevated FedRAMP API error rates for Astra and Sol (minor) - 2026-10-21: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Kinsta® lists as a subprocessor, reported Degraded performance in ChatGPT, Codex, and APIs (minor) - 2026-10-20: [ClickHouse](https://thirdpartyindex.com/vendors/clickhouse#status), which Kinsta® lists as a subprocessor, reported Google Cloud Outage (minor) - 2026-10-19: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Kinsta® lists as a subprocessor, reported File Download errors (minor) - 2026-10-15: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Kinsta® lists as a subprocessor, reported Widespread feature degradation (major) - 2026-10-14: [Intercom](https://thirdpartyindex.com/vendors/intercom#status), which Kinsta® lists as a subprocessor, reported Customer contact details showing up as "Redacted" in the Intercom Inbox (minor) - 2026-10-14: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Kinsta® lists as a subprocessor, reported Delayed Costs data in the Compliance API (minor) - 2026-10-14: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Kinsta® lists as a subprocessor, reported Limited availability on gpt-image-2.5-flare and gpt-image-2.5-sunburst (minor) - 2026-10-14: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Kinsta® lists as a subprocessor, reported Degraded performance in Codex and ChatGPT Work (minor) - 2026-10-13: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Kinsta® lists as a subprocessor, reported Degraded performance in GPT-6.1 Sol Codex and Work mode (minor) ## Recent changes Changes to its documents and subprocessor list since monitoring began. - 2026-09-24: Changed subprocessor: Amazon Web Services, Inc. (services: Kinsta Managed Hosting (was: none)) ([evidence](https://thirdpartyindex.com/evidence/8457)) - 2026-09-24: Changed subprocessor: Anthropic, PBC (services: Kinsta Managed Hosting, Sevalla (was: none)) ([evidence](https://thirdpartyindex.com/evidence/8457)) - 2026-09-24: Changed subprocessor: Clickhouse, Inc. (services: Kinsta Managed Hosting, Sevalla (was: none)) ([evidence](https://thirdpartyindex.com/evidence/8457)) - 2026-09-24: Changed subprocessor: Cloudflare, Inc. (services: Kinsta Managed Hosting, Sevalla (was: none)) ([evidence](https://thirdpartyindex.com/evidence/8457)) - 2026-09-24: Changed subprocessor: Google LLC / Google Ireland Limited (services: Kinsta Managed Hosting, Sevalla (was: none)) ([evidence](https://thirdpartyindex.com/evidence/8457)) - 2026-09-24: Changed subprocessor: Hubspot, Inc. (services: Kinsta Managed Hosting, Sevalla (was: none)) ([evidence](https://thirdpartyindex.com/evidence/8457)) - 2026-09-24: Changed subprocessor: Inactiv.com Media Solutions Private Limited and BlogVault Inc. d/b/a Migrate Guru (services: Kinsta Managed Hosting (was: none)) ([evidence](https://thirdpartyindex.com/evidence/8457)) - 2026-09-24: Changed subprocessor: Intercom, Inc. (services: Kinsta Managed Hosting, Sevalla (was: none)) ([evidence](https://thirdpartyindex.com/evidence/8457)) - 2026-09-24: Changed subprocessor: Mailchannels Corporation (services: Kinsta Managed Hosting (was: none)) ([evidence](https://thirdpartyindex.com/evidence/8457)) - 2026-09-24: Changed subprocessor: OpenAI OpCo, LLC / OpenAI Ireland Limited (services: Kinsta Managed Hosting, Sevalla (was: none)) ([evidence](https://thirdpartyindex.com/evidence/8457)) - 2026-09-24: Changed subprocessor: Oracle America, Inc (services: Kinsta Managed Hosting, Sevalla (was: none)) ([evidence](https://thirdpartyindex.com/evidence/8457)) - 2026-09-24: Added subprocessor: Patchstack OÜ ([evidence](https://thirdpartyindex.com/evidence/8457)) Feed: https://thirdpartyindex.com/vendors/kinsta/changes.atom The subprocessor list as we read it on any date: https://thirdpartyindex.com/labs/time-machine/kinsta ## Security contact From its security.txt (https://kinsta.com/.well-known/security.txt) ([evidence](https://thirdpartyindex.com/evidence/2542)): - Contact: mailto:security@kinsta.com - Disclosure policy: https://kinsta.com/knowledgebase/disclose-security-vulnerability/ - Languages: en - No expiry date --- Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api