Third Party Index

Medallia

medallia.com

Transparency

Exemplary

Breakdown
Subprocessor list30 / 30
Processing locations8 / 8
Purposes7 / 7
Data processing addendum12 / 12
Trust center8 / 8
Privacy policy6 / 6
security.txt6 / 6
Security page5 / 5
Status pagenot found0 / 5
Vulnerability disclosurenot found0 / 5
Pages still reachable8 / 8
Total90 / 100

Only documents we can retrieve count: a page behind a login or a broken link scores nothing.

Badge

Medallia transparency rating

For Medallia's own site; it updates with the rating.

<a href="https://thirdpartyindex.com/vendors/medallia"><img src="https://thirdpartyindex.com/badge/medallia.svg" alt="Medallia transparency rating on Third Party Index" height="20"></a>
[![Medallia transparency rating on Third Party Index](https://thirdpartyindex.com/badge/medallia.svg)](https://thirdpartyindex.com/vendors/medallia)

Documents

DocumentVerifiedChangedEvidence
Trust center safebase snapshot
Subprocessor list snapshot
Data processing addendum snapshot
Privacy policy snapshot
Terms snapshot
Security page snapshot
security.txt snapshot

Subprocessors

38 third parties. CSV · Atom

NamePurposeLocationListed since
Accenture International Ltd. Implementation and servicing.Ireland
Affectiva, Inc. Software-based recognition of facial emotions.USA
Amazon Comprehend Sentiment analysisUS, Canada, EU, Australia
Amazon Web Service Hosts platform data: Telephone numbers, Callback requests, meta data sent with telephone calls.; Hosts platform data: Telephone numbers, Email addresses, Survey invitations, survey responses.USA
Amazon Web Services, Inc. (Optional) Data processing activities.; Data storage and processing.; Hosts platform data.; Hosts platform data. Archives security logs for security incident monitoring and detection.; Hosts platform data. Medallia CX Journeys; Hosts platform data. Medallia Speech / Voci; Hosts platform data. or; LLM hosting and data processing for Medallia Generative AI Features, if included in subscription purchased by the Customer.; Renders front-end html and reports.USA; USA and EU; USA, Canada, Ireland, Australia (Customer’s choice); USA, EU or UK (Customer’s choice); USA, EU, Canada, Singapore (Customer’s choice); USA, EU, or UK (Customer’s choice); USA​ EU Canada Australia
Atlassian Pty Ltd. Support issue tracking tool and service status monitoring.USA, Germany, Ireland, Singapore, and Australia
Cantab Research Limited (Speechmatics) Software-based speech recognition (speech-to-text).UK
Cloudinary Ltd. Storage for user uploads. Concierge (formerly Zingle); User image providerUSA; USA Medallia
Company Success Plans for DXA, if purchased by the Customer; Success Plans, if purchased by the Customer.
Effective Teleservices Pvt Ltd (Parent Company Etech Global Services, LLC) Implementation, servicing and technical support.India
Elasticsearch AS Search and analytics.USA
Engage Hub Ltd. (Optional) Provides SMS routing and delivery services for SMS Message-Based surveys, if enabledUK
Excers Inc. Implementation and servicing.USA
Google LLC (Optional) Data storage and processing for MMS message attachments.; Data storage and processing.; Google Analytics is used to gather information about product use.; Software-based object recognition.; Translates feedback text, if enabled.USA
Infinit-O Philippines, Inc. (Parent Company Infinit-O Global Limited) Technical support.Philippines
Intercom R&D Unlimited Application Connector for Support; Used for live chat support in Premier and SignatureEU; Ireland
International Business Watson natural language processing for sentimentUSA
Joincube, Inc. (aka. “Beamer”) In-app notifications in MXO.USA
Localize Corporation Translation provider Analytics (DXA) (formerly Decibel)USA Digital Experience
Machines Corporation (IBM Corp.) analysis.
MessageBird B.V. (Optional) Message Gateway (only SMS telephone and text messages). (MXO) (formerly Thunderhead)Netherlands Medallia Experience Orchestration
Microsoft Corporation Hosting for reporting application, software-based machine translation and facial blurring.USA
Microsoft Azure MXO operates its Services from Microsoft Azure. Data stored in Azure is held within MXO’s Azure subscriptions across multiple geographic regions.USA, Europe, Australia
Mode Analytics, Inc. Provides in-product analytics.USA
Omega3c S.r.l. Implementation and servicing.Italy
Oracle Inc. (Optional) Hosting of platform data.; Hosting of platform data. Sense360; Regional hosting in certain locations.; Regional hosting in certain locations. StrikedeckRegional
Participatory Culture Foundation (Amara) Human transcription and translation services.USA
Postmark (Wildbit, LLC) Provides email routing and delivery services.USA
Redis Labs Ltd. Redis for Caching service maintains state for cookies.USA
Rev.com Inc. Human transcription services.USA
Rocket Science Group LLC d/b/a Mailchimp Email service providerUSA
Rollbar, Inc. Manages system logs for diagnosis and resolution of technical issues.USA
Segment.io, Inc. Tracks Concierge product usage.USA
SM Technologies Limited Implementation and servicing.Brazil
Twilio Inc. (Optional) Provides SMS routing and delivery services for SMS Message-Based surveys, if enabled.; Sendgrid service used for platform generated emails.; Sendgrid service used for platform generated emails. Mindful Callback; Twilio operates a collection of DNS-addressable network edges around the world, called Edge Locations. Edge Locations allow Mindful to control the geographic location where our application’s network traffic enters and exits Twilio’s platform.USA
Twilio, Inc. or Bandwidth Inc. Provides SMS routing and delivery services. Customer and Medallia shall mutually agree on the provider(s) of choice.USA and Canada
Usersnap GmbH (Optional) Screen capture functionality, if enabled.Austria
Zendesk Inc. (Optional) Provides mobile SDK message routing and delivery services.USA

Federal contracts

By funding agency. UEI ZDLMRUM7QP65 failing

None found.

Prime awards and subawards reported by prime contractors. Purchases through a reseller name the reseller, not the vendor.

Changes

None since tracking began.