Matomo
Transparency
Breakdown
| Subprocessor list | 30 / 30 | |
| Processing locations | 8 / 8 | |
| Purposes | 7 / 7 | |
| Data processing addendum | 12 / 12 | |
| Trust center | 8 / 8 | |
| Privacy policy | 6 / 6 | |
| security.txt | not found | 0 / 6 |
| Security page | 5 / 5 | |
| Status page | not found | 0 / 5 |
| Vulnerability disclosure | not found | 0 / 5 |
| Pages still reachable | 8 / 8 | |
| Total | 84 / 100 |
Only documents we can retrieve count: a page behind a login or a broken link scores nothing.
Badge
For Matomo's own site; it updates with the rating.
<a href="https://thirdpartyindex.com/vendors/matomo"><img src="https://thirdpartyindex.com/badge/matomo.svg" alt="Matomo transparency rating on Third Party Index" height="20"></a>[](https://thirdpartyindex.com/vendors/matomo)Documents
| Document | Verified | Changed | Evidence |
|---|---|---|---|
| Trust center vanta | snapshot | ||
| Subprocessor list vanta | snapshot | ||
| Data processing addendum | snapshot | ||
| Privacy policy | snapshot | ||
| Terms | snapshot | ||
| Security page | snapshot |
Subprocessors
| Name | Purpose | Location | Listed since |
|---|---|---|---|
| Amazon Web Service EMEA SARL | - Secure infrastructure for servers and databases and logs - Secure CDN (Content Delivery Network) to store and deliver JavaScript files. This service is provided by AWS Europe. The use of the CDN feature is optional and can be disabled. Visitors are sent to a server closest to their region (traffic from the EU stays in the EU). - DPA: https://d1.awsstatic.com/legal/aws-gdpr/AWS_GDPR_DPA.pdf; Cloud provider | EU ( Frankfurt, Germany; Dublin, Ireland) | |
| Oblivion Cloud Control B.V (part of Xebia Group B.V) | - Secure infrastructure management - IT consulting services and support services - DPA available on request; AWS solution provider | The Netherlands | |
| Tideways GmBH | - Improved observability, performance issue detection, and troubleshooting for Matomo Cloud - DPA available on request; Application Performance Monitoring (APM) | Germany |
Listed as a subprocessor by (1)
Purposes as each company states them.
InMotion Hosting inmotionhosting.com Marketing and advertising communication User analytics
Changes
None since tracking began.