Noom
Noom declares 34 subprocessors in its subprocessor list, which we last checked on Nov 11, 2026 (evidence). They include Amazon Web Services, Google Cloud and OpenAI. No published changes since we first read it on Sep 21, 2026.
Not listed by any tracked vendor.
Not loaded by any published homepage.
Subprocessors CSV of Noom's subprocessors · Atom feed of Noom's subprocessors DORA draft CSV of Noom's subprocessors as declared by Noom what's this? ·
34 third parties.
| Name | Purpose | Location | Listed since |
|---|---|---|---|
| Accolade | Employer partnership and clinical services. Data elements: passthrough of all user clinical intake data: BMI, conditions, risk stratification, PHI, member ID, height, weight. | Employer health-benefits and care partner | |
| Amazon Web Services | Database and application hosting. Data elements: all end user data. | Cloud hosting | |
| Amity | Database and application hosting. Data elements: user access code and all data generated in Noom Communities (posts, comments, profile picture, etc.). | Cloud hosting | |
| Atlassian | Supports resolution of customer-facing issues. Data elements: health data, sensitive demographic data. | Operational platform | |
| Beluga Health | Provides clinical services. Data elements: passthrough of all user clinical intake data: BMI, conditions, risk stratification, PHI, member ID, height, weight. | Clinical vendor | |
| Braintree | Supports collecting payment from members. Data elements: user name, email, address, and payment information. | Payment processor | |
| Cloudflare | Network security and performance enhancement for end users. Data elements: all end user data. | Content delivery network | |
| Databricks | Transforming data. Data elements: all end user data. | Data analytics | |
| Datadog | Cloud monitoring | ||
| Decagon.ai | Automated customer support platform. Data elements: user access code, email address, and all end user communication through the platform. | Support platform | |
| eFax | Used for sending/receiving prior authorizations. Data elements: health data, sensitive demographic data. | Fax | |
| Fivetran | Extract user events and engagement from 3P platforms. Data elements: ad impressions and end user engagement. | Data analytics | |
| Formal | Secure data access tool. Data elements: all end user data. | Data security | |
| Used to optimize advertising, monitor user events and engagement. Data elements: all end user data. | Marketing, data analytics | ||
| Google Workspace | Used in operational functionality for managing customer engagement with partners. Data elements: health data, sensitive demographic data. | Operations | |
| Hex | Used to monitor and analyze user events and engagement. Data elements: all end user data. | Data analytics | |
| Hightouch | Used to analyze B2C user signups for paid acquired users. Data elements: signup date, email, user ID, user engagement data. | Data analytics | |
| IntouchCX | Supports operations for phone, email, and chat support. Data elements: all data necessary for troubleshooting and debugging (name, email, phone number, language preference, subscription, etc.) and for payments and refunds (card information, name, email, etc.). | Customer support | |
| Iterable | Supports customer email communications. Data elements: user ID, name, email, phone number, access code, conversions and add-ons, demographic and geolocation data, survey answers, in-app engagement data, device data. | Communications | |
| Looker | Used to monitor and analyze user events and engagement. Data elements: all end user data. | Data analytics | |
| MD Integrations | Provides clinical services (MDI). Data elements: passthrough of all user clinical intake data: BMI, conditions, risk stratification, PHI, member ID, height, weight. | Clinical vendor | |
| Mixpanel | Used to monitor and analyze user events and engagement. Data elements: all end user data. | Data analytics | |
| OpenAI AI | Chatbot. Data elements: message content. | Customer support | |
| OptioRx | Provides pharmacy and fulfillment services (Optio). Data elements: standard Rx details, member eligibility, routing locations; name, DOB, address, medical conditions, medication, pharmacy location. | Pharmacy vendor | |
| RippIT (MaestroQA) | Used to monitor and analyze member chat engagement and provide AI-based solutions for improvement opportunities and classifying support and coaching interactions. Data elements: user name, user email, chat conversations, user’s current application state. | Customer service | |
| Sendbird | Chatbot. Data elements: user ID, email, chat conversations. | Communications | |
| Sentry | Used by engineering to support debugging. Data elements: user ID, geolocation, engagement, failed request details and error logs, 3P cookies. | Debugging | |
| Singular | Used to monitor and analyze user events and engagement. Data elements: GAID, IDFV/IDFA, OS version, device model, IP address, geolocation data, conversions, retention, in-app engagement data. | Data analytics | |
| Slack | |||
| SteadyMD | Provides clinical services. Data elements: passthrough of all user clinical intake data: BMI, conditions, risk stratification, PHI, member ID, height, weight. | Clinical vendor | |
| Stripe | Supports collecting payment from members. Data elements: user name, email, address, and payment information. | Payment processor | |
| TMC Acquisition, LLC | Provides pharmacy and fulfillment services (TMC). Data elements: standard Rx details, member eligibility, routing locations; name, DOB, address, medical conditions, medication, pharmacy location. | Pharmacy vendor | |
| Waltz Health, Inc. | Pharmacy-benefit and fulfillment orchestration service; pharmacy hub for SmartRx (Waltz Health / Bolero Pharmacy). Data elements: standard Rx details, member eligibility, routing locations; name, DOB, address, medical conditions, medication, pharmacy location. | Pharmacy benefit / fulfillment partner | |
| Zendesk | Used for direct conversations with customers and agentic resolutions. Data elements: email address, phone number, message content, sponsor (if applicable), IP address, location, purchased products, device type, application version, promotional codes applied. | Customer support |
Web TechnologiesCSV of Noom's web technologies · Atom feed of Noom's web technologies
Noom's homepage made 126 requests to 6 domains, 3 services controlled by another company, and 1 domain not identified.
3 third parties by category: Tag managers 1Cookie compliance 1Other 1
Third parties 3 · 17 requests
Fibr Fibr 5
Unknown 1 · 3 requests
fibrcdn.com
First party 1 · 106 requests
Noom AOS Altis Amazon CloudFront Amazon Web Services HSTS HTTP/3 Lodash 4.18.1 MySQL Nginx Open Graph PHP Priority Hints RankMath SEO Splide WordPress WordPress Block Editor WordPress Site Editor jQuery 3.7.1 jQuery Migrate 3.4.1 106
1 tracked company loaded by the homepage is not in Noom's subprocessor list. A website can use a service without it processing customer data.
ComplianceCSV of Noom's compliance · Atom feed of Noom's compliance
- Certified
- Says it complies with
Certifications as Noom's trust center lists them; reports are usually shared on request (evidence)
Incidents reported by Noom's subprocessorsCSV of incidents reported by vendors Noom lists · Atom feed of incidents reported by vendors Noom lists
62 reported incidents in the last 30 days, by 8 of the vendors Noom lists as subprocessors.
A subprocessor list names a company, not the service an incident touched. This does not show that Noom was involved.
And 37 more. All of them: CSV · Who is around them.
ChangesCSV of Noom's changes · Atom feed of Noom's changes
See the list as we read it on any date: Time machine
None since tracking began.
Rating badge for Noom's site
It updates with the rating.
<a href="https://thirdpartyindex.com/vendors/noom"><img src="https://thirdpartyindex.com/badge/noom.svg" alt="Noom transparency rating on Third Party Index" height="20"></a>[](https://thirdpartyindex.com/vendors/noom)