marimo
Transparency
Breakdown
| Subprocessor list | 30 / 30 | |
| Processing locations | 8 / 8 | |
| Purposes | 7 / 7 | |
| Data processing addendum | not found | 0 / 12 |
| Trust center | not found | 0 / 8 |
| Privacy policy | not found | 0 / 6 |
| security.txt | not found | 0 / 6 |
| Security page | not found | 0 / 5 |
| Status page | not found | 0 / 5 |
| Vulnerability disclosure | not found | 0 / 5 |
| Pages still reachable | 8 / 8 | |
| Total | 53 / 100 |
Only documents we can retrieve count: a page behind a login or a broken link scores nothing.
Badge
For marimo's own site; it updates with the rating.
<a href="https://thirdpartyindex.com/vendors/marimo"><img src="https://thirdpartyindex.com/badge/marimo.svg" alt="marimo transparency rating on Third Party Index" height="20"></a>[](https://thirdpartyindex.com/vendors/marimo)Not listed by any tracked vendor.
Documents
| Document | Verified | Changed | Evidence |
|---|---|---|---|
| Subprocessor list | snapshot | ||
| Terms | snapshot |
Subprocessors
| Name | Purpose | Location | Listed since |
|---|---|---|---|
| Clerk, Inc. | User authentication, session management, and organization membership | United States | |
| Cloudflare, Inc. | Edge workers, CDN, DNS, R2 object storage for notebooks and artifacts, and database connectivity | United States | |
| CoreWeave | Notebook execution, kernel runtime, and application hosting for molab | United States | |
| Functional Software, Inc. (Sentry) | Error monitoring, performance tracing, and debugging | United States | |
| GitHub, Inc. | OAuth sign-in and importing notebooks from public repositories | United States | |
| Loops, Inc. | Transactional and marketing email delivery | United States | |
| Notion Labs, Inc. | Collection of feedback and waitlist submissions | United States | |
| PostHog, Inc. | Product analytics and feature flagging | United States | |
| Vercel Inc. | Hosting for the marimo.io marketing site, Community Cloud, and playground | United States | |
| Weights & Biases, Inc. | AI-assisted code completion and notebook generation | United States |
Security record
What public security catalogs list for marimo, in their words.
Known exploited vulnerabilities
1 vulnerability in marimo's software that CISA lists as exploited in the wild.
| CVE | Product | Vulnerability | Listed |
|---|---|---|---|
| CVE-2026-39987 | Marimo | Marimo Remote Code Execution Vulnerability | evidence |
Changes
None since tracking began.