# NinjaOne

We monitor the [subprocessor list NinjaOne publishes](https://trustpage.ninjaone.com/subprocessors/), which we last checked on 2026-11-11, but have not read any entries from it. [2 tracked vendors](https://thirdpartyindex.com/vendors/ninjaone#used-by) name NinjaOne as a subprocessor, including [Secureframe](https://thirdpartyindex.com/vendors/secureframe) and [OPSWAT](https://thirdpartyindex.com/vendors/opswat).

NinjaOne (ninjaone.com): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/ninjaone
- Documents last verified: 2026-11-11
- Transparency rating: 50/100 (how much it publishes, not how secure it is): Subprocessor list 0/30 (published; no entries could be read); Processing locations 0/8 (no list); Purposes 0/7 (no list); Data processing addendum 12/12; Trust center 8/8; Privacy policy 6/6; security.txt 6/6; Security page 5/5; Status page 5/5; Vulnerability disclosure 0/5 (not found); Pages still reachable 8/8
- Supply chain: relies on 0 tracked vendors directly, 0 within two hops, 0 within three; 2 tracked vendors rely on it directly, 5 within two hops, 5 within three
- Cite as: NinjaOne, Third Party Index, https://thirdpartyindex.com/vendors/ninjaone (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Trust center | https://trustpage.ninjaone.com/ | 2026-11-11 | 2026-11-11 |
| Subprocessor list | https://trustpage.ninjaone.com/subprocessors/ | 2026-11-11 | 2026-09-21 |
| Data processing addendum | https://www.ninjaone.com/data-processing-agreements/ | 2026-11-11 | 2026-09-21 |
| Privacy policy | https://www.ninjaone.com/privacy-policy/ | 2026-11-11 | 2026-09-27 |
| Terms | https://www.ninjaone.com/terms-of-use/ | 2026-11-11 | 2026-09-21 |
| Security page | https://www.ninjaone.com/enterprise-it-management/security/ | 2026-11-11 | 2026-10-28 |
| security.txt | https://www.ninjaone.com/.well-known/security.txt | 2026-11-11 | 2026-09-21 |
| Status page | https://status.ninjaone.com/ | 2026-11-11 | 2026-11-11 |

## Subprocessors (0)

No subprocessor list has been found or read for this vendor.

## Compliance

As its trust center lists them.

- FedRAMP Marketplace: Moderate · 3 agency authorizations · since Sep 10, 2025
- FedRAMP Marketplace: High

## Web Technologies

NinjaOne's homepage made 331 requests to 42 domains, 28 services controlled by another company, and 2 domains not identified. Loaded on 2026-11-03 by a browser that accepted nothing; other visits may load more or less. What a page loads is not a list of who receives customer data.

28 third parties by category: Advertising 11 (Google Cloud, Microsoft, Amazon, Roku, Inc., StackAdapt, MNTN, Inc., Capterra Inc., OpenAI, Reddit, Inc., Spotify AB; usually detected as Advertising: Xandr); Analytics 3 (LinkedIn, Meta, Cloudflare); Marketing automation 3 (6Sense Insights, Inc., PathFactory, Salesloft); Live chat 2 (Qualified.com, Inc.; usually detected as Live chat: Salesforce); CDN 2 (jsDelivr, UNPKG); A/B Testing 1 (Optimizely); Cookie compliance 1 (OneTrust); Affiliate programs 1 (Impact Radius); Appointment scheduling 1 (Chili Piper); Issue trackers 1 (usually detected as Issue trackers: Sentry); Referral marketing 1 (reviewed: SaaSquatch); Security 1 (usually detected as Security: Amazon Web Services). Each company that appears controlled by another organization is counted once, under the main category of the technologies detected from it on this homepage or, when none was, the category recorded from the company's own page (marked reviewed) or else the one it is usually detected as on other published homepages (marked as such); unclassified: none of these.

### Third parties (28)

- Qualified.com, Inc.: 37 requests to qualified.com; Qualified
- 6Sense Insights, Inc.: 20 requests to 6sc.co, 6sense.com; 6sense
- PathFactory: 16 requests to pathfactory.com; PathFactory
- Google Cloud: 12 requests to google.com, doubleclick.net, googletagmanager.com, google-analytics.com; DoubleClick Floodlight, Google Analytics, Google Tag Manager
- Microsoft: 9 requests to clarity.ms, bing.com; Microsoft Advertising
- OneTrust: 7 requests to cookielaw.org, onetrust.com; OneTrust
- jsDelivr: 6 requests to jsdelivr.net; jsDelivr
- Amazon: 5 requests to amazon-adsystem.com; Amazon Advertising
- Roku, Inc.: 5 requests to ravm.tv, w55c.net; Roku Pixel
- StackAdapt: 5 requests to stackadapt.com; StackAdapt
- MNTN, Inc.: 4 requests to mountain.com; Mountain
- Optimizely: 4 requests to optimizely.com; Optimizely
- Capterra Inc.: 3 requests to capterra.com; Capterra
- LinkedIn: 3 requests to linkedin.com, licdn.com; Linkedin Insight Tag
- Meta: 3 requests to facebook.net, facebook.com; Facebook Pixel 2.9.435
- OpenAI: 3 requests to openai.com; ChatGPT Ads Measurement Pixel
- Reddit, Inc.: 3 requests to reddit.com, redditstatic.com; Reddit Ads
- Salesloft: 3 requests to salesloft.com; Salesloft
- Spotify AB: 3 requests to spotify.com, byspotify.com; Spotify Pixel
- Cloudflare: 2 requests to cloudflareinsights.com; Cloudflare Browser Insights
- UNPKG: 2 requests to unpkg.com; Unpkg, web-vitals 4
- Amazon Web Services: 1 request to on.aws
- Chili Piper: 1 request to chilipiper.com; Chili Piper
- Impact Radius: 1 request to impactcdn.com; Impact
- SaaSquatch: 1 request to ssqt.io
- Salesforce: 1 request to pardot.com
- Sentry: 1 request to sentry.io
- Xandr: 1 request to adnxs.com

### Unknown (2)

Domains not identified yet: 44.238.122.172, d2o9p5vky89u4e.cloudfront.net

### First party (1)

- NinjaOne: 167 requests to ninjaone.com; Cloudflare, Dynamic Conditions 1.7.5, Elementor, HSTS, HTTP/3, Lightbox, Linkedin Ads, Microsoft Clarity, MySQL, Open Graph, PHP, Priority Hints, RSS, RankMath SEO, React, Salesforce Marketing Cloud Account Engagement, Sentry, Swiper, WPML 4.9.7, WordPress, core-js 3.46.0, jQuery 3.7.1, jQuery UI 1.14.2, styled-components 5.3.11

19 tracked companies loaded by the homepage are not in NinjaOne's subprocessor list. A website can use a service without it processing customer data.

## Subprocessor of (2)

Tracked vendors whose own subprocessor lists name it, and what they say they use it for.

- [OPSWAT](https://thirdpartyindex.com/vendors/opswat.md): NinjaOne provides the hosted tool used to manage OPSWAT devices for the purposes of providing managed services as requested by the customer.
- [Secureframe](https://thirdpartyindex.com/vendors/secureframe.md): Customer Support and Account Management

## Service status

Incidents it reported on its own status page.

- Last 90 days: 12 reported incidents (2 major or critical, 9 minor, 1 with no impact stated)
- Typical time to resolve: 1 h 33 min
- Status page last read: 2026-11-12
- 2026-11-11: Some NinjaOne Agents Reporting Offline - OC (major)
- 2026-11-06: Microsoft Edge and WebView2 errors (minor)
- 2026-11-05: NinjaOne Remote issues (minor)
- 2026-10-01: Issue with scheduled tasks and scheduled reports in North America (no impact stated)
- 2026-10-01: SMS Service issues in Austria (minor)
- 2026-09-22: Service Issue - Performance Degraded (minor)
- 2026-09-22: Network Discovery – Discovered devices not appearing (EU) (minor)
- 2026-09-17: EU – Apple APNs Certificate Creation and Renewal Issues (minor)

## Recent changes

Changes to its documents and subprocessor list since monitoring began.

- 2026-10-22: Changed registry listing: fedramp:FR2430847803 ([evidence](https://thirdpartyindex.com/evidence/141337))

Feed: https://thirdpartyindex.com/vendors/ninjaone/changes.atom

## Security contact

From its security.txt (https://www.ninjaone.com/.well-known/security.txt) ([evidence](https://thirdpartyindex.com/evidence/1154)):

- Contact: mailto:privacyteam@ninjarmm.com
- Security jobs: https://my.hirehive.io/ninjarmm-llc/jobs/74277/red-team-security-engineer
- No expiry date
- Signed

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api
