Medallia
Medallia declares 48 subprocessors in its subprocessor list, which we last checked on Nov 11, 2026 (evidence). They include Amazon Web Services, Google Cloud and Microsoft. No published changes since we first read it on Sep 23, 2026.
Not listed by any tracked vendor.
Subprocessors CSV of Medallia's subprocessors · Atom feed of Medallia's subprocessors DORA draft CSV of Medallia's subprocessors as declared by Medallia what's this? ·
48 third parties.
| Name | Purpose | Location | Listed since |
|---|---|---|---|
| Accenture International Ltd. | Implementation and servicing. | Ireland | |
| Aerialink Inc. | Aerialink provides mobile connection services through SMS (Short Message Service) functionality. | USA | |
| Affectiva, Inc. | Software-based recognition of facial emotions. | USA | |
| Amazon Comprehend | Sentiment analysis | US; Canada; EU; Australia | |
| Amazon Transcribe (Optional) | Transcription for additional languages. | USA; UK; Germany; Singapore | |
| Amazon Web Service | Hosts platform data: Telephone numbers, Callback requests, meta data sent with telephone calls.; Hosts platform data: Telephone numbers, Email addresses, Survey invitations, survey responses. | USA | |
| Amazon Web Services, Inc. (Optional) | Data processing activities.; Data storage and processing.; Hosts platform data (Govcloud only).; Hosts platform data.; Hosts platform data. Archives security logs for security incident monitoring and detection.; Hosts platform data. or; LLM hosting and data processing for Medallia Generative AI Features, if included in subscription purchased by the Customer.; Renders front-end html and reports. | USA; USA EU Canada Australia; USA and EU; USA, Canada, Ireland, Australia (Customer’s choice); USA, EU or UK (Customer’s choice); USA, EU, Canada, Singapore (Customer’s choice); USA, EU, or UK (Customer’s choice) | |
| Atlassian Pty Ltd. | Support issue tracking tool and service status monitoring. | USA, Germany, Ireland, Singapore, and Australia | |
| Cantab Research Limited (Speechmatics) AI | Software-based speech recognition (speech-to-text). | UK | |
| Cloudinary Ltd. | Storage for user uploads.; User image provider | USA | |
| Company | Success Plans for DXA, if purchased by the Customer; Success Plans, if purchased by the Customer. | ||
| Cyclr Systems Limited | Integration Platform as a Service. Enables data to flow between Mindful and other client platforms. | UK | |
| Datadog Inc. | Application logging and observability. | USA | |
| Effective Teleservices Pvt Ltd (Parent Company Etech Global Services, LLC) | Implementation, servicing and technical support. | India | |
| Elasticsearch AS | Search and analytics. | USA | |
| Engage Hub Ltd. (Optional) | Provides SMS routing and delivery services for SMS Message-Based surveys, if enabled | UK | |
| Excers Inc. | Implementation and servicing. | USA | |
| Google LLC (Optional) | Data storage and processing for MMS message attachments.; Data storage and processing.; Google Analytics is used to gather information about product use.; Modeled, anonymized application data for business intelligence and reporting.; Software-based object recognition.; Translates feedback text, if enabled. | USA | |
| Google Inc (Google Cloud) USA | Voice to text transcription of survey responses. | ||
| Infinit-O Philippines, Inc. (Parent Company Infinit-O Global Limited) | Technical support. | Philippines | |
| Intercom R&D Unlimited | Application Connector for Support; Used for live chat support in Premier and Signature | EU; Ireland | |
| International Business Machines Corporation (IBM Corp.) | Watson natural language processing for sentiment analysis. | USA | |
| Joincube, Inc. (aka. “Beamer”) | In-app notifications in MXO. | USA | |
| Localize Corporation | Translation provider | USA | |
| MessageBird B.V. (Optional) | Message Gateway (only SMS telephone and text messages). | Netherlands | |
| Microsoft Corporation | Hosting for reporting application, software-based machine translation and facial blurring. | USA | |
| Microsoft Azure | MXO operates its Services from Microsoft Azure. Data stored in Azure is held within MXO’s Azure subscriptions across multiple geographic regions. | USA; Europe; Australia | |
| Mode Analytics, Inc. | Provides in-product analytics. | USA | |
| Okta Inc | Identity and access management (for Mindful Gov instance only). | USA | |
| Omega3c S.r.l. | Implementation and servicing. | Italy | |
| Oracle Inc. (Optional) | Hosting of platform data.; Regional hosting in certain locations. | Regional | |
| Participatory Culture Foundation (Amara) | Human transcription and translation services. | USA | |
| Pendo io, Inc. | Mindful application usage and in-app messaging. | USA | |
| Postmark (Wildbit, LLC) | Provides email routing and delivery services. | USA | |
| Redis Labs Ltd. | Redis for Caching service maintains state for cookies. | USA | |
| Rev.com Inc. | Human transcription services. | USA | |
| Rocket Science Group LLC d/b/a Mailchimp | Email service provider | USA | |
| Rollbar, Inc. | Manages system logs for diagnosis and resolution of technical issues. | USA | |
| Segment.io, Inc. | Tracks Concierge product usage. | USA | |
| SM Technologies Limited | Implementation and servicing. | Brazil | |
| Snowflake Inc. | Callbacks, messages, platform data for business intelligence and reporting.; Survey invitations, survey responses, messages, platform data for business intelligence and reporting. | USA | |
| Summa Linguae Technologies S.A. | Transcription for Custom Model Tuning. | EU | |
| Twilio Inc. (Optional) | Provides SMS routing and delivery services for SMS Message-Based surveys, if enabled.; Sendgrid service used for platform generated emails.; Twilio operates a collection of DNS-addressable network edges around the world, called Edge Locations. Edge Locations allow Mindful to control the geographic location where our application’s network traffic enters and exits Twilio’s platform Telephone numbers, Callback requests, meta data sent with telephone calls.; Twilio operates a collection of DNS-addressable network edges around the world, called Edge Locations. Edge Locations allow Mindful to control the geographic location where our application’s network traffic enters and exits Twilio’s platform. Telephone numbers, Survey invitations (via SMS), survey responses (via SMS and telephone calls), meta data sent with telephone calls. | USA | |
| Twilio, Inc. or Bandwidth Inc. | Provides SMS routing and delivery services. Customer and Medallia shall mutually agree on the provider(s) of choice. | USA and Canada | |
| Usersnap GmbH (Optional) | Screen capture functionality, if enabled. | Austria | |
| Way With Words Limited | Transcription for Custom Model Tuning. | UK; South Africa | |
| Xelex Inc. | Transcription for Custom Model Tuning. | USA | |
| Zendesk Inc. (Optional) | Provides mobile SDK message routing and delivery services. | USA |
Web TechnologiesCSV of Medallia's web technologies · Atom feed of Medallia's web technologies
Medallia's homepage made 265 requests to 35 domains, and 17 services controlled by another company.
17 third parties by category: Analytics 6Advertising 4Live chat 1Cookie compliance 1CDN 1Other 4
Third parties 17 · 147 requests
Qualified.com, Inc. Qualified 41
Vidyard Vidyard 31
Weglot Weglot 10
Magnite, Inc. rubiconproject.com, tremorhub.com 2
Index Exchange Inc. casalemedia.com 1
First party 1 · 118 requests
Medallia Adobe Analytics Adobe Audience Manager Adobe Client Data Layer 2.0.2 Adobe Experience Platform Launch Alpine.js 3.14.1 Amazon S3 Amazon Web Services Cloudflare Decibel GSAP 3.12.5 HSTS HTTP/3 Medallia MySQL Open Graph PHP Priority Hints Sentry Swiper Thunderhead ONE Twitter Emoji (Twemoji) WP Engine WordPress core-js 3.32.2 118
11 tracked companies loaded by the homepage are not in Medallia's subprocessor list. A website can use a service without it processing customer data.
ComplianceCSV of Medallia's compliance · Atom feed of Medallia's compliance
- Says it complies with
FedRAMP Marketplace
| Offering | Status | Impact | Agencies | Since |
|---|---|---|---|---|
| Medallia GovCloud | Authorized | High | 11 | |
| Mindful by Medallia | Authorized | Moderate | 1 |
Certifications as Medallia's trust center lists them; reports are usually shared on request (evidence) FedRAMP status from the FedRAMP Marketplace (evidence)
Incidents reported by Medallia's subprocessorsCSV of incidents reported by vendors Medallia lists · Atom feed of incidents reported by vendors Medallia lists
217 reported incidents in the last 30 days, by 12 of the vendors Medallia lists as subprocessors.
A subprocessor list names a company, not the service an incident touched. This does not show that Medallia was involved.
And 192 more. All of them: CSV · Who is around them.
Federal contractsCSV of Medallia's federal contracts · Atom feed of Medallia's federal contracts
By funding agency. UEI ZDLMRUM7QP65 · checked Nov 10, 2026 · snapshot
| Agency | Prime awards | Obligated | Subawards | Subaward total | Years |
|---|---|---|---|---|---|
| Department of Veterans Affairs | — | — | 9 | $37.0M | 2016–2025 |
| U.S. Patent and Trademark Office Department of Commerce | 1 | $624.4K | — | — | 2024–2026 |
| Departmental Offices Department of the Interior | — | — | 2 | $515.0K | 2024 |
| Office of the Chief Information Officer Department of Agriculture | — | — | 1 | $40.0K | 2020 |
Prime awards and subawards reported by prime contractors. Purchases through a reseller name the reseller, not the vendor.
ChangesCSV of Medallia's changes · Atom feed of Medallia's changes
See the list as we read it on any date: Time machine
- Added certification: CSA STAR evidence: certification: CSA STAR
- Added certification: FedRAMP evidence: certification: FedRAMP
- Added certification: HITRUST CSF evidence: certification: HITRUST CSF
- Added certification: ISO/IEC 42001 evidence: certification: ISO/IEC 42001
- Added certification: PCI DSS evidence: certification: PCI DSS
- Added certification: SOC 2 evidence: certification: SOC 2
- Removed certification: SOC 2 Type II evidence: certification: SOC 2 Type II
Rating badge for Medallia's site
It updates with the rating.
<a href="https://thirdpartyindex.com/vendors/medallia"><img src="https://thirdpartyindex.com/badge/medallia.svg" alt="Medallia transparency rating on Third Party Index" height="20"></a>[](https://thirdpartyindex.com/vendors/medallia)