Meta
Transparency
Breakdown
| Subprocessor list | not found | 0 / 30 |
| Processing locations | no list | 0 / 8 |
| Purposes | no list | 0 / 7 |
| Data processing addendum | not found | 0 / 12 |
| Trust center | not found | 0 / 8 |
| Privacy policy | 6 / 6 | |
| security.txt | not found | 0 / 6 |
| Security page | not found | 0 / 5 |
| Status page | not found | 0 / 5 |
| Vulnerability disclosure | not found | 0 / 5 |
| Pages still reachable | 8 / 8 | |
| Total | 14 / 100 |
Only documents we can retrieve count: a page behind a login or a broken link scores nothing.
Badge
For Meta's own site; it updates with the rating.
<a href="https://thirdpartyindex.com/vendors/meta"><img src="https://thirdpartyindex.com/badge/meta.svg" alt="Meta transparency rating on Third Party Index" height="20"></a>[](https://thirdpartyindex.com/vendors/meta)No tracked subprocessors.
Documents
| Document | Verified | Changed | Evidence |
|---|---|---|---|
| Privacy policy | snapshot |
Subprocessors
None extracted.
Listed as a subprocessor by (21)
Purposes as each company states them.
Amazon Web Services aws.amazon.com WhatsApp messaging; ———————————————
Bullhorn bullhorn.com WhatsApp business API
Cursor cursor.com Inference Provider; Provider of proprietary AI models via API. See [here](https://cursor.com/docs/models/muse-spark-1-3) for more information.
Deepgram deepgram.com Website analytics and advertising attribution via Meta Pixel on public-facing pages.
HubSpot hubspot.com Conversation Functionality
InMotion Hosting inmotionhosting.com Targeted advertising and user analytics
JFrog jfrog.com
Klaviyo klaviyo.com WhatsApp Messaging
Mailgun mailgun.com Delivery of messages
Plivo plivo.com WhatsApp Cloud API provider
Posit posit.co
Segment segment.com Meta Routes, transmits and delivers messages for specific Twilio Products and Services
SendGrid sendgrid.com Meta Routes, transmits and delivers messages for specific Twilio Products and Services
Sinch sinch.com Delivery of messages
Spond spond.com
Twilio twilio.com Meta Routes, transmits and delivers messages for specific Twilio Products and Services
Vonage vonage.com Message and Call Detail Record (CDR) processing.; Processing and sending of messages, including phone numbers and message content.; Processing of phone numbers for authentication purposes.; Provision, operation, and maintenance of services, including business account management and authentication through Business Manager; customer communications and engagement; technical support and platform infrastructure maintenance.; Security monitoring, fraud prevention, and abuse detection.; Transmission, routing, and delivery of messages.; Usage of Meta’s API to configure Meta business manager.
WeTravel wetravel.com User sign-ins and analytics.
WebFX webfx.com Digital Marketing; Used for digital marketing.
Zapier zapier.com Artificial intelligence provider
Zeplin zeplin.io Zeplin uses Facebook cookies to collect user information to engage in marketing efforts.
Security record
What public security catalogs list for Meta, in their words.
Known exploited vulnerabilities
4 vulnerabilities in Meta's software that CISA lists as exploited in the wild.
| CVE | Product | Vulnerability | Listed |
|---|---|---|---|
| CVE-2025-55182 | React Server Components | Meta React Server Components Remote Code Execution Vulnerability used by ransomware | evidence |
| CVE-2025-55177 | Meta Platforms WhatsApp Incorrect Authorization Vulnerability | evidence | |
| CVE-2019-18426 | WhatsApp Cross-Site Scripting Vulnerability | evidence | |
| CVE-2019-3568 | WhatsApp VOIP Stack Buffer Overflow Vulnerability | evidence |
Changes
None since tracking began.