# Level Access

Level Access declares [15 subprocessors](https://thirdpartyindex.com/vendors/level-access#subprocessors) in [its subprocessor list](https://trust.levelaccess.com/subprocessors), which we last checked on 2026-11-11 ([evidence](https://thirdpartyindex.com/evidence/54875)). They include [Amazon Web Services](https://thirdpartyindex.com/vendors/amazon-web-services), [Google Cloud](https://thirdpartyindex.com/vendors/google-cloud) and [Microsoft](https://thirdpartyindex.com/vendors/microsoft). No published changes since we first read it on 2026-09-22. [4 tracked vendors](https://thirdpartyindex.com/vendors/level-access#used-by) name Level Access as a subprocessor, including [Hotjar](https://thirdpartyindex.com/vendors/hotjar), [ServiceNow](https://thirdpartyindex.com/vendors/servicenow) and [Contentsquare](https://thirdpartyindex.com/vendors/contentsquare).

Level Access (levelaccess.com): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/level-access
- Documents last verified: 2026-11-11
- Transparency rating: 72/100 (how much it publishes, not how secure it is): Subprocessor list 30/30; Processing locations 8/8; Purposes 7/7; Data processing addendum 0/12 (not found); Trust center 8/8; Privacy policy 6/6; security.txt 0/6 (not found); Security page 5/5; Status page 0/5 (not found); Vulnerability disclosure 0/5 (not found); Pages still reachable 8/8
- Supply chain: relies on 15 tracked vendors directly, 125 within two hops, 400 within three; 4 tracked vendors rely on it directly, 110 within two hops, 552 within three
- Cite as: Level Access, Third Party Index, https://thirdpartyindex.com/vendors/level-access (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Subprocessor list | https://trust.levelaccess.com/subprocessors | 2026-11-11 | 2026-10-06 |
| Privacy policy | https://www.levelaccess.com/privacy-statement/ | 2026-11-11 | 2026-10-17 |
| Terms | https://www.levelaccess.com/website-terms-service/ | 2026-11-11 | 2026-10-17 |
| Security page | https://trust.levelaccess.com/ | 2026-11-11 | 2026-11-09 |

## Subprocessors (15)

As its own list states them.

| Subprocessor | Purpose | Location | Listed since |
|---|---|---|---|
| [Airbrake](https://thirdpartyindex.com/vendors/airbrake.md) | Application performance and security monitoring; Error monitoring and performance insights | USA | 2026-10-01 |
| [Amazon Web Services](https://thirdpartyindex.com/vendors/amazon-web-services.md) | Cloud provider; Infrastructure hosting for the software platforms; CDN | USA (Ohio and California) | 2026-10-01 |
| [Amplitude, Inc.](https://thirdpartyindex.com/vendors/amplitude.md) | Digital analytics software; User behavior analytics | USA (California) | 2026-10-01 |
| [Auth0](https://thirdpartyindex.com/vendors/okta.md) | SSO provider; Secure access for customers | USA (Washington State) | 2026-10-01 |
| [CDN77](https://thirdpartyindex.com/vendors/cdn77.md) | Content delivery; Content delivery network for Web assets | USA | 2026-10-01 |
| [DataDog, Inc.](https://thirdpartyindex.com/vendors/datadog.md) | Logging and operational monitoring; Security incident and event management; SIEM | USA | 2026-10-01 |
| [Elastic](https://thirdpartyindex.com/vendors/elasticsearch.md) | "Smart" and secure search; Data indexing | USA | 2026-09-22 |
| [Google](https://thirdpartyindex.com/vendors/google-cloud.md) | Gain deeper understanding of company website and app performance; Website usage statistics | USA (California) | 2026-10-01 |
| [Harness](https://thirdpartyindex.com/vendors/harness-io.md) | Feature flag provider; Software delivery platform | USA (California) | 2026-10-01 |
| [Mailgun (Sinch)](https://thirdpartyindex.com/vendors/mailgun.md) | Platform email notifications; Transactional email notifications | USA (California) | 2026-10-01 |
| [Microsoft](https://thirdpartyindex.com/vendors/microsoft.md) | Cloud provider; Infrastructure hosting for the software platforms; CDN | USA | 2026-10-01 |
| [MongoDB](https://thirdpartyindex.com/vendors/mongodb.md) | Database hosting for the software platform; Developer data platform | USA (New York) | 2026-10-01 |
| [Pendo](https://thirdpartyindex.com/vendors/pendo.md) | Product experience tool; Software optimization | USA (North Carolina) | 2026-10-01 |
| [Stripe](https://thirdpartyindex.com/vendors/stripe.md) | Payment processing; SaaS-based financial infrastructure | USA | 2026-10-01 |
| [Zendesk](https://thirdpartyindex.com/vendors/zendesk.md) | Customer service automation; Customer support ticketing system | USA (California) | 2026-10-01 |

Read from ([evidence](https://thirdpartyindex.com/evidence/8893)). CSV: https://thirdpartyindex.com/vendors/level-access/subprocessors.csv

## Compliance

As its trust center lists them.

- Audited: SOC 2, ISO/IEC 27001, FedRAMP ([evidence](https://thirdpartyindex.com/evidence/17362))
- FedRAMP Marketplace: LI-SaaS · 6 agency authorizations · since Sep 29, 2021

## Web Technologies

Level Access's homepage made 154 requests to 8 domains, and 6 services controlled by another company. Loaded on 2026-11-09 by a browser that accepted nothing; other visits may load more or less. What a page loads is not a list of who receives customer data.

6 third parties by category: Analytics 2 (Cloudflare; usually detected as Analytics: HubSpot); Live chat 1 (Qualified.com, Inc.); Cookie compliance 1 (Cookiebot); Caching 1 (NitroPack); Issue trackers 1 (usually detected as Issue trackers: Sentry). Each company that appears controlled by another organization is counted once, under the main category of the technologies detected from it on this homepage or, when none was, the category recorded from the company's own page (marked reviewed) or else the one it is usually detected as on other published homepages (marked as such); unclassified: none of these.

### Third parties (6)

- NitroPack: 94 requests to nitrocdn.com, getnitropack.com; NitroPack
- Qualified.com, Inc.: 37 requests to qualified.com; Qualified
- Cookiebot: 5 requests to cookiebot.com; Cookiebot 1
- HubSpot: 4 requests to hsforms.net
- Cloudflare: 1 request to cloudflareinsights.com; Cloudflare Browser Insights
- Sentry: 1 request to sentry.io

### First party (1)

- Level Access: 12 requests to levelaccess.com; Cloudflare, HTTP/3, HubSpot, LazySizes, Level Access, MySQL, Open Graph, PHP, Priority Hints, RSS, Sentry, WP Engine, WordPress 7.1.4, Yoast SEO

4 tracked companies loaded by the homepage are not in Level Access's subprocessor list. A website can use a service without it processing customer data.

## Subprocessor of (4)

Tracked vendors whose own subprocessor lists name it, and what they say they use it for.

- [Blackboard](https://thirdpartyindex.com/vendors/blackboard.md): Accessibility Assessments
- [Contentsquare](https://thirdpartyindex.com/vendors/contentsquare.md)
- [Hotjar](https://thirdpartyindex.com/vendors/hotjar.md)
- [ServiceNow](https://thirdpartyindex.com/vendors/servicenow.md)

## Incidents reported by Level Access's subprocessors

Incidents reported in the last 30 days on their own status pages by 9 vendors Level Access lists as subprocessors. A subprocessor list names a company, not the service an incident touched.

- 2026-11-06: [Harness.io](https://thirdpartyindex.com/vendors/harness-io#status), which Level Access lists as a subprocessor, reported apidocs.harness.io not responding to HTTPS requests (no impact stated)
- 2026-11-05: [Amplitude](https://thirdpartyindex.com/vendors/amplitude#status), which Level Access lists as a subprocessor, reported Session Replay capturing more sessions than configured (minor)
- 2026-11-05: [Amplitude](https://thirdpartyindex.com/vendors/amplitude#status), which Level Access lists as a subprocessor, reported Delayed S3 export (minor)
- 2026-11-04: [Pendo](https://thirdpartyindex.com/vendors/pendo#status), which Level Access lists as a subprocessor, reported Degradation of Account and Visitor Reports (critical)
- 2026-11-04: [Elasticsearch](https://thirdpartyindex.com/vendors/elasticsearch#status), which Level Access lists as a subprocessor, reported mOLTP PrivateLink connectivity issue (major)
- 2026-11-03: [Harness.io](https://thirdpartyindex.com/vendors/harness-io#status), which Level Access lists as a subprocessor, reported developer.harness.io not responding to HTTPS requests (no impact stated)
- 2026-11-01: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Level Access lists as a subprocessor, reported Elevated Instant Payouts failures (no impact stated)
- 2026-10-28: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Level Access lists as a subprocessor, reported Elevated Issuing errors from 17:13 - 20:41 UTC (minor)
- 2026-10-28: [Harness.io](https://thirdpartyindex.com/vendors/harness-io#status), which Level Access lists as a subprocessor, reported Intermittent CI Pipeline using VM Runner slowness and errors (no impact stated)
- 2026-10-28: [Datadog](https://thirdpartyindex.com/vendors/datadog#status), which Level Access lists as a subprocessor, reported Metrics query are disrupted (major)
- 2026-10-28: [Mailgun](https://thirdpartyindex.com/vendors/mailgun#status), which Level Access lists as a subprocessor, reported Route delays in EU Region (minor)
- 2026-10-27: [Harness.io](https://thirdpartyindex.com/vendors/harness-io#status), which Level Access lists as a subprocessor, reported We are currently seeing delegate selection issue for VM infra executions (minor)
- 2026-10-27: [Airbrake](https://thirdpartyindex.com/vendors/airbrake#status), which Level Access lists as a subprocessor, reported Partial error graph outage (minor)
- 2026-10-26: [Amplitude](https://thirdpartyindex.com/vendors/amplitude#status), which Level Access lists as a subprocessor, reported Data Ingestion Delays (minor)
- 2026-10-26: [Datadog](https://thirdpartyindex.com/vendors/datadog#status), which Level Access lists as a subprocessor, reported Elevated Error Rates for Workflow Automation, App Builder, Bits Code, Bits Agent Builder (major)
- 2026-10-24: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Level Access lists as a subprocessor, reported Elevated Blik errors (no impact stated)
- 2026-10-24: [Amplitude](https://thirdpartyindex.com/vendors/amplitude#status), which Level Access lists as a subprocessor, reported Delayed/Blocked Event Delivery to Amazon Kinesis Destination (no impact stated)
- 2026-10-23: [Elasticsearch](https://thirdpartyindex.com/vendors/elasticsearch#status), which Level Access lists as a subprocessor, reported Elastic Support Portal is unavailable (major)
- 2026-10-22: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Level Access lists as a subprocessor, reported Elevated Bancontact errors (no impact stated)
- 2026-10-22: [Amplitude](https://thirdpartyindex.com/vendors/amplitude#status), which Level Access lists as a subprocessor, reported Streaming to External Destinations Unavailable (no impact stated)
- 2026-10-22: [Amplitude](https://thirdpartyindex.com/vendors/amplitude#status), which Level Access lists as a subprocessor, reported Amplitude Website Outage (no impact stated)
- 2026-10-22: [Amplitude](https://thirdpartyindex.com/vendors/amplitude#status), which Level Access lists as a subprocessor, reported Notice: Amplitude not impacted by recent PHP vulnerabilities (no impact stated)
- 2026-10-22: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Level Access lists as a subprocessor, reported Elevated Bancontact errors (no impact stated)
- 2026-10-22: [Elasticsearch](https://thirdpartyindex.com/vendors/elasticsearch#status), which Level Access lists as a subprocessor, reported 403 error when trying to access Autoops in newly created serverless projects (major)
- 2026-10-20: [Amplitude](https://thirdpartyindex.com/vendors/amplitude#status), which Level Access lists as a subprocessor, reported Export API returns 500 errors across multiple organizations (minor)
- 2026-10-20: [Elasticsearch](https://thirdpartyindex.com/vendors/elasticsearch#status), which Level Access lists as a subprocessor, reported Elastic Cloud scaling issues in Azure (major)
- 2026-10-20: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Level Access lists as a subprocessor, reported Spike in cancellations and expired errors with PayByBank payments (no impact stated)
- 2026-10-20: [MongoDB](https://thirdpartyindex.com/vendors/mongodb#status), which Level Access lists as a subprocessor, reported GCP Availability Zone europe-west2-b connectivity issues (minor)
- 2026-10-20: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Level Access lists as a subprocessor, reported Elevated Revolut Pay errors (no impact stated)
- 2026-10-20: [Elasticsearch](https://thirdpartyindex.com/vendors/elasticsearch#status), which Level Access lists as a subprocessor, reported Degraded availability for some Elastic Cloud Hosted and Serverless deployments in GCP europe-west2 (London) (major)
- 2026-10-19: [Harness.io](https://thirdpartyindex.com/vendors/harness-io#status), which Level Access lists as a subprocessor, reported Degraded performance on prod4 (minor)
- 2026-10-17: [Amplitude](https://thirdpartyindex.com/vendors/amplitude#status), which Level Access lists as a subprocessor, reported We are actively investigating an issue with our ingestion systems lagging (minor)
- 2026-10-15: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Level Access lists as a subprocessor, reported Elevated declines on Mastercard (no impact stated)
- 2026-10-15: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Level Access lists as a subprocessor, reported Elevated declines on Visa (no impact stated)
- 2026-10-15: [Harness.io](https://thirdpartyindex.com/vendors/harness-io#status), which Level Access lists as a subprocessor, reported Degraded performance in UI execution graph in prod3 (minor)
- 2026-10-15: [Harness.io](https://thirdpartyindex.com/vendors/harness-io#status), which Level Access lists as a subprocessor, reported Degraded performance in UI execution graph in prod3 (minor)
- 2026-10-15: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Level Access lists as a subprocessor, reported Elevated Amazon Pay errors (no impact stated)
- 2026-10-13: [Amplitude](https://thirdpartyindex.com/vendors/amplitude#status), which Level Access lists as a subprocessor, reported Degraded Performance- Funnel charts renders as white text on a white/near-white background in light theme (no impact stated)
- 2026-10-13: [Harness.io](https://thirdpartyindex.com/vendors/harness-io#status), which Level Access lists as a subprocessor, reported Prod1: Intermittent issue with IACM stages in some pipelines (minor)

## Federal contracts

U.S. government prime awards and reported subawards to its UEI (YREHPW8HGVK9), from USAspending, by funding agency. Records show funding, not use.

| Agency | Department | Prime awards | Obligated | Subawards | Subaward total | First | Last |
|---|---|---|---|---|---|---|---|
| Food and Drug Administration | Department of Health and Human Services | 5 | $1.2M | — | — | 2010-04-23 | 2026-09-11 |
| Office of the Chief Information Officer | General Services Administration | 3 | $916.6K | — | — | 2016-09-28 | 2026-07-20 |
| Forest Service | Department of Agriculture | 6 | $908.8K | — | — | 2009-09-23 | 2026-02-25 |
| Centers for Disease Control and Prevention | Department of Health and Human Services | — | — | 1 | $885.4K | 2022-07-05 | 2022-07-05 |
| Social Security Administration | Social Security Administration | 2 | $133.8K | 2 | $750.0K | 2010-12-20 | 2015-04-27 |
| Office of the Assistant Secretary for Administration | Department of Health and Human Services | 2 | $835.3K | — | — | 2011-07-28 | 2026-03-11 |
| U.S. Army Corps of Engineers - Civil Program Financing Only | Corps of Engineers - Civil Works | 1 | $499.9K | — | — | 2025-09-30 | 2025-09-30 |
| Health Resources and Services Administration | Department of Health and Human Services | 5 | $456.7K | — | — | 2011-09-25 | 2020-05-08 |
| Office of Personnel Management | Office of Personnel Management | 11 | $284.1K | — | — | 2013-02-22 | 2023-02-28 |
| Office of the Assistant Secretary for Administration and Management | Department of Labor | 2 | $243.7K | — | — | 2023-07-03 | 2024-06-11 |
| Federal Communications Commission | Federal Communications Commission | 2 | $209.8K | — | — | 2019-02-13 | 2026-08-21 |
| National Institutes of Health | Department of Health and Human Services | 14 | $189.1K | — | — | 2013-05-07 | 2026-04-10 |
| Offices, Boards and Divisions | Department of Justice | 5 | $156.5K | — | — | 2014-09-01 | 2019-05-01 |
| Transportation Security Administration | Department of Homeland Security | 1 | $150.7K | — | — | 2017-09-26 | 2022-09-19 |
| Immediate Office of the Secretary of Defense | Department of Defense | 1 | $143.7K | — | — | 2021-09-22 | 2025-07-01 |

And 18 more agencies.
92 records ([evidence](https://thirdpartyindex.com/evidence/164980)). Details: https://thirdpartyindex.com/vendors/level-access/federal

## Recent changes

Changes to its documents and subprocessor list since monitoring began.

- 2026-09-29: Removed certification: SOC 2 Type II ([evidence](https://thirdpartyindex.com/evidence/17362))
- 2026-09-29: Added certification: SOC 2 ([evidence](https://thirdpartyindex.com/evidence/17362))

Feed: https://thirdpartyindex.com/vendors/level-access/changes.atom

The subprocessor list as we read it on any date: https://thirdpartyindex.com/labs/time-machine/level-access

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api
