Matomo
Matomo declares 3 subprocessors in its subprocessor list, which we last checked on Nov 11, 2026 (evidence). They include Amazon Web Services and Tideways. No published changes since we first read it on Sep 22, 2026. 12 tracked vendors name Matomo as a subprocessor, including LexisNexis, Digicert and InMotion Hosting.
Subprocessors CSV of Matomo's subprocessors · Atom feed of Matomo's subprocessors DORA draft CSV of Matomo's subprocessors as declared by Matomo what's this? ·
3 third parties.
| Name | Purpose | Location | Listed since |
|---|---|---|---|
| Amazon Web Service EMEA SARL | - Secure infrastructure for servers and databases and logs - Secure CDN (Content Delivery Network) to store and deliver JavaScript files. This service is provided by AWS Europe. The use of the CDN feature is optional and can be disabled. Visitors are sent to a server closest to their region (traffic from the EU stays in the EU). - DPA:; Cloud provider | EU ( Frankfurt, Germany; Dublin, Ireland) | |
| Oblivion Cloud Control B.V (part of Xebia Group B.V) | - Secure infrastructure management - IT consulting services and support services - DPA available on request; AWS solution provider | The Netherlands | |
| Tideways GmBH | - Improved observability, performance issue detection, and troubleshooting for Matomo Cloud - DPA available on request; Application Performance Monitoring (APM) | Germany |
Web TechnologiesCSV of Matomo's web technologies · Atom feed of Matomo's web technologies
Matomo's homepage made 129 requests to 6 domains, 2 services controlled by another company, and 1 domain not identified.
2 third parties by category: Analytics 1Cookie compliance 1
m-img.org
2 tracked companies loaded by the homepage are not in Matomo's subprocessor list. A website can use a service without it processing customer data.
Subprocessor of (12)CSV of the companies listing Matomo · Atom feed of the companies listing Matomo
AtlasGTM atlasgtm.io Analytics; Product and marketing analytics where configured.
Center for Internet Security cisecurity.org Analytics Tool; Matomo provides the ability to analyze web and application traffic.; Your information will be processed by Matomo relating to the statistical evaluation and analysis of performance and usage behavior on the CIS website and applications for the period necessary to fulfill the purposes outlined in the CIS Privacy Notice and in accordance with applicable law.
Cint cint.com Web analytics and user behavior tracking
Digicert digicert.com Provide website analytics
InMotion Hosting inmotionhosting.com Marketing and advertising communication User analytics
- LexisNexis lexisnexis.com
New/Mode newmode.net Tracking website activity
Nozomi Networks nozominetworks.com Processing of customer and end-user personal data in connection with the delivery, hosting, monitoring, support, and maintenance of Nozomi SaaS products.; Website analytics
Push Security pushsecurity.com
Ubicloud ubicloud.com Marketing/web analytics
UltraDNS ultradns.com Provide website analytics
Veeva Systems veeva.com Matomo product analytics
ComplianceCSV of Matomo's compliance · Atom feed of Matomo's compliance
- Certified
Certifications as Matomo's trust center lists them; reports are usually shared on request (evidence)
Incidents reported by Matomo's subprocessorsCSV of incidents reported by vendors Matomo lists · Atom feed of incidents reported by vendors Matomo lists
4 reported incidents in the last 30 days, by 1 of the vendors Matomo lists as a subprocessor.
A subprocessor list names a company, not the service an incident touched. This does not show that Matomo was involved.
| Date | Company | Incident | Impact | Lasted |
|---|---|---|---|---|
| | Pending PHP Security Release | minor | 6 h 44 min | |
| | Network failures | major | 7 min | |
| | Partial Outage Data Center | major | 2 h 57 min | |
| | MySQL primary database server under extreme load and not responding | critical | 40 min |
ChangesCSV of Matomo's changes · Atom feed of Matomo's changes
See the list as we read it on any date: Time machine
None since tracking began.