# Noom

Noom declares [34 subprocessors](https://thirdpartyindex.com/vendors/noom#subprocessors) in [its subprocessor list](https://trust.noom.com/subprocessors), which we last checked on 2026-11-11 ([evidence](https://thirdpartyindex.com/evidence/250197)). They include [Amazon Web Services](https://thirdpartyindex.com/vendors/amazon-web-services), [Google Cloud](https://thirdpartyindex.com/vendors/google-cloud) and [OpenAI](https://thirdpartyindex.com/vendors/openai). No published changes since we first read it on 2026-09-21.

Noom (noom.com): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/noom
- Documents last verified: 2026-11-11
- Transparency rating: 67/100 (how much it publishes, not how secure it is): Subprocessor list 30/30; Processing locations 8/8; Purposes 7/7; Data processing addendum 0/12 (not found); Trust center 8/8; Privacy policy 6/6; security.txt 0/6 (not found); Security page 0/5 (not found); Status page 0/5 (not found); Vulnerability disclosure 0/5 (not found); Pages still reachable 8/8
- Supply chain: relies on 22 tracked vendors directly, 150 within two hops, 498 within three; 0 tracked vendors rely on it directly, 0 within two hops, 0 within three
- Cite as: Noom, Third Party Index, https://thirdpartyindex.com/vendors/noom (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Trust center | https://trust.noom.com/ | 2026-11-11 | 2026-11-10 |
| Subprocessor list | https://trust.noom.com/subprocessors | 2026-11-11 | 2026-11-10 |
| Privacy policy | https://www.noom.com/noom-privacy-policy/ | 2026-11-11 | 2026-10-21 |
| Terms | https://www.noom.com/terms-and-conditions-of-use/ | 2026-11-11 | 2026-09-21 |

## Subprocessors (34)

As its own list states them.

| Subprocessor | Purpose | Location | Listed since |
|---|---|---|---|
| Accolade | Employer partnership and clinical services. Data elements: passthrough of all user clinical intake data: BMI, conditions, risk stratification, PHI, member ID, height, weight. | Employer health-benefits and care partner | 2026-11-10 |
| [Amazon Web Services](https://thirdpartyindex.com/vendors/amazon-web-services.md) | Database and application hosting. Data elements: all end user data. | Cloud hosting | 2026-11-10 |
| Amity | Database and application hosting. Data elements: user access code and all data generated in Noom Communities (posts, comments, profile picture, etc.). | Cloud hosting | 2026-11-10 |
| [Atlassian](https://thirdpartyindex.com/vendors/atlassian.md) | Supports resolution of customer-facing issues. Data elements: health data, sensitive demographic data. | Operational platform | 2026-11-10 |
| Beluga Health | Provides clinical services. Data elements: passthrough of all user clinical intake data: BMI, conditions, risk stratification, PHI, member ID, height, weight. | Clinical vendor | 2026-11-10 |
| [Braintree](https://thirdpartyindex.com/vendors/paypal-us.md) | Supports collecting payment from members. Data elements: user name, email, address, and payment information. | Payment processor | 2026-11-10 |
| [Cloudflare](https://thirdpartyindex.com/vendors/cloudflare.md) | Network security and performance enhancement for end users. Data elements: all end user data. | Content delivery network | 2026-11-10 |
| [Databricks](https://thirdpartyindex.com/vendors/databricks.md) | Transforming data. Data elements: all end user data. | Data analytics | 2026-11-10 |
| [Datadog](https://thirdpartyindex.com/vendors/datadog.md) | — | Cloud monitoring | 2026-10-01 |
| [Decagon.ai](https://thirdpartyindex.com/vendors/decagon.md) | Automated customer support platform. Data elements: user access code, email address, and all end user communication through the platform. | Support platform | 2026-11-10 |
| [eFax](https://thirdpartyindex.com/vendors/efax.md) | Used for sending/receiving prior authorizations. Data elements: health data, sensitive demographic data. | Fax | 2026-11-10 |
| [Fivetran](https://thirdpartyindex.com/vendors/fivetran.md) | Extract user events and engagement from 3P platforms. Data elements: ad impressions and end user engagement. | Data analytics | 2026-11-10 |
| Formal | Secure data access tool. Data elements: all end user data. | Data security | 2026-11-10 |
| [Google](https://thirdpartyindex.com/vendors/google-cloud.md) | Used to optimize advertising, monitor user events and engagement. Data elements: all end user data. | Marketing, data analytics | 2026-11-10 |
| [Google Workspace](https://thirdpartyindex.com/vendors/google-cloud.md) | Used in operational functionality for managing customer engagement with partners. Data elements: health data, sensitive demographic data. | Operations | 2026-11-10 |
| [Hex](https://thirdpartyindex.com/vendors/hex.md) | Used to monitor and analyze user events and engagement. Data elements: all end user data. | Data analytics | 2026-11-10 |
| [Hightouch](https://thirdpartyindex.com/vendors/hightouch.md) | Used to analyze B2C user signups for paid acquired users. Data elements: signup date, email, user ID, user engagement data. | Data analytics | 2026-11-10 |
| [IntouchCX](https://thirdpartyindex.com/vendors/intouchcx.md) | Supports operations for phone, email, and chat support. Data elements: all data necessary for troubleshooting and debugging (name, email, phone number, language preference, subscription, etc.) and for payments and refunds (card information, name, email, etc.). | Customer support | 2026-11-10 |
| [Iterable](https://thirdpartyindex.com/vendors/iterable.md) | Supports customer email communications. Data elements: user ID, name, email, phone number, access code, conversions and add-ons, demographic and geolocation data, survey answers, in-app engagement data, device data. | Communications | 2026-11-10 |
| [Looker](https://thirdpartyindex.com/vendors/google-cloud.md) | Used to monitor and analyze user events and engagement. Data elements: all end user data. | Data analytics | 2026-11-10 |
| MD Integrations | Provides clinical services (MDI). Data elements: passthrough of all user clinical intake data: BMI, conditions, risk stratification, PHI, member ID, height, weight. | Clinical vendor | 2026-11-10 |
| [Mixpanel](https://thirdpartyindex.com/vendors/mixpanel.md) | Used to monitor and analyze user events and engagement. Data elements: all end user data. | Data analytics | 2026-11-10 |
| [OpenAI](https://thirdpartyindex.com/vendors/openai.md) (AI model provider: OpenAI) | Chatbot. Data elements: message content. | Customer support | 2026-11-10 |
| OptioRx | Provides pharmacy and fulfillment services (Optio). Data elements: standard Rx details, member eligibility, routing locations; name, DOB, address, medical conditions, medication, pharmacy location. | Pharmacy vendor | 2026-11-10 |
| [RippIT (MaestroQA)](https://thirdpartyindex.com/vendors/maestroqa.md) | Used to monitor and analyze member chat engagement and provide AI-based solutions for improvement opportunities and classifying support and coaching interactions. Data elements: user name, user email, chat conversations, user’s current application state. | Customer service | 2026-11-10 |
| [Sendbird](https://thirdpartyindex.com/vendors/sendbird.md) | Chatbot. Data elements: user ID, email, chat conversations. | Communications | 2026-11-10 |
| [Sentry](https://thirdpartyindex.com/vendors/sentry.md) | Used by engineering to support debugging. Data elements: user ID, geolocation, engagement, failed request details and error logs, 3P cookies. | Debugging | 2026-11-10 |
| Singular | Used to monitor and analyze user events and engagement. Data elements: GAID, IDFV/IDFA, OS version, device model, IP address, geolocation data, conversions, retention, in-app engagement data. | Data analytics | 2026-11-10 |
| [Slack](https://thirdpartyindex.com/vendors/slack.md) | — | — | 2026-10-01 |
| SteadyMD | Provides clinical services. Data elements: passthrough of all user clinical intake data: BMI, conditions, risk stratification, PHI, member ID, height, weight. | Clinical vendor | 2026-11-10 |
| [Stripe](https://thirdpartyindex.com/vendors/stripe.md) | Supports collecting payment from members. Data elements: user name, email, address, and payment information. | Payment processor | 2026-11-10 |
| TMC Acquisition, LLC | Provides pharmacy and fulfillment services (TMC). Data elements: standard Rx details, member eligibility, routing locations; name, DOB, address, medical conditions, medication, pharmacy location. | Pharmacy vendor | 2026-11-10 |
| Waltz Health, Inc. | Pharmacy-benefit and fulfillment orchestration service; pharmacy hub for SmartRx (Waltz Health / Bolero Pharmacy). Data elements: standard Rx details, member eligibility, routing locations; name, DOB, address, medical conditions, medication, pharmacy location. | Pharmacy benefit / fulfillment partner | 2026-11-10 |
| [Zendesk](https://thirdpartyindex.com/vendors/zendesk.md) | Used for direct conversations with customers and agentic resolutions. Data elements: email address, phone number, message content, sponsor (if applicable), IP address, location, purchased products, device type, application version, promotional codes applied. | Customer support | 2026-11-10 |

Read from ([evidence](https://thirdpartyindex.com/evidence/250197)). CSV: https://thirdpartyindex.com/vendors/noom/subprocessors.csv

AI model providers (or a cloud provider's AI model service) among these entries: 1. All vendors that list one: https://thirdpartyindex.com/ai

## Compliance

As its trust center lists them.

- Audited: SOC 2, HITRUST CSF ([evidence](https://thirdpartyindex.com/evidence/13907))
- Claimed: SOC 2 Type II, HIPAA ([evidence](https://thirdpartyindex.com/evidence/89040))

## Web Technologies

Noom's homepage made 126 requests to 6 domains, 3 services controlled by another company, and 1 domain not identified. Loaded on 2026-11-04 by a browser that accepted nothing; other visits may load more or less. What a page loads is not a list of who receives customer data.

3 third parties by category: Tag managers 1 (Google Cloud); Cookie compliance 1 (OneTrust); Personalisation 1 (Fibr). Each company that appears controlled by another organization is counted once, under the main category of the technologies detected from it on this homepage or, when none was, the category recorded from the company's own page (marked reviewed) or else the one it is usually detected as on other published homepages (marked as such); unclassified: none of these.

### Third parties (3)

- OneTrust: 11 requests to cookielaw.org, onetrust.com; OneTrust
- Fibr: 5 requests to fibr.ai; Fibr
- Google Cloud: 1 request to googletagmanager.com; Google Tag Manager (its subprocessor list names it too)

### Unknown (1)

Domains not identified yet: fibrcdn.com

### First party (1)

- Noom: 106 requests to noom.com; AOS, Altis, Amazon CloudFront, Amazon Web Services, HSTS, HTTP/3, Lodash 4.18.1, MySQL, Nginx, Open Graph, PHP, Priority Hints, RankMath SEO, Splide, WordPress, WordPress Block Editor, WordPress Site Editor, jQuery 3.7.1, jQuery Migrate 3.4.1

1 tracked company loaded by the homepage is not in Noom's subprocessor list. A website can use a service without it processing customer data.

## Subprocessor of (0)

No tracked vendor lists it.

## Incidents reported by Noom's subprocessors

Incidents reported in the last 30 days on their own status pages by 8 vendors Noom lists as subprocessors. A subprocessor list names a company, not the service an incident touched.

- 2026-11-11: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Noom lists as a subprocessor, reported Unable to start new Workspace Agent runs (critical)
- 2026-11-11: [Decagon](https://thirdpartyindex.com/vendors/decagon#status), which Noom lists as a subprocessor, reported Investigating Issue with Voice Conversation Closure (minor)
- 2026-11-11: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Noom lists as a subprocessor, reported Elevated errors affecting logins, sign-ups, and ChatGPT features (minor)
- 2026-11-11: [Sentry](https://thirdpartyindex.com/vendors/sentry#status), which Noom lists as a subprocessor, reported US issues feed throwing intermittent errors (minor)
- 2026-11-11: [Sentry](https://thirdpartyindex.com/vendors/sentry#status), which Noom lists as a subprocessor, reported Account emails not being delivered (major)
- 2026-11-10: [Sentry](https://thirdpartyindex.com/vendors/sentry#status), which Noom lists as a subprocessor, reported EU region replay ingestion latency (minor)
- 2026-11-10: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Noom lists as a subprocessor, reported Incorrect cost data in Costs API exports (no impact stated)
- 2026-11-09: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Noom lists as a subprocessor, reported Elevated Errors On API (minor)
- 2026-11-09: [Decagon](https://thirdpartyindex.com/vendors/decagon#status), which Noom lists as a subprocessor, reported API Instability — Resolved (no impact stated)
- 2026-11-09: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Noom lists as a subprocessor, reported Elevated ChatGPT Conversation Errors (minor)
- 2026-11-08: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Noom lists as a subprocessor, reported Elevated errors with image generation (minor)
- 2026-11-06: [Hightouch](https://thirdpartyindex.com/vendors/hightouch#status), which Noom lists as a subprocessor, reported Processing delay for subset of Events (no impact stated)
- 2026-11-06: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Noom lists as a subprocessor, reported Elevated error rates with some U.S. business Mastercards (no impact stated)
- 2026-11-05: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Noom lists as a subprocessor, reported ChatGPT Work and Dots Errors (minor)
- 2026-11-05: [Mixpanel](https://thirdpartyindex.com/vendors/mixpanel#status), which Noom lists as a subprocessor, reported Duplicate charges on a subset of customer accounts (no impact stated)
- 2026-11-04: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Noom lists as a subprocessor, reported Elevated error rates across paid ChatGPT plans (minor)
- 2026-11-04: [Sentry](https://thirdpartyindex.com/vendors/sentry#status), which Noom lists as a subprocessor, reported Ingestion delays across all data (minor)
- 2026-11-03: [Sentry](https://thirdpartyindex.com/vendors/sentry#status), which Noom lists as a subprocessor, reported Delays in spans and transactions processing (major)
- 2026-11-03: [Sentry](https://thirdpartyindex.com/vendors/sentry#status), which Noom lists as a subprocessor, reported Sentry.io dashboard and API is down (critical)
- 2026-11-03: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Noom lists as a subprocessor, reported File upload errors in ChatGPT (minor)
- 2026-11-02: [Sentry](https://thirdpartyindex.com/vendors/sentry#status), which Noom lists as a subprocessor, reported Sentry dashboard is down (critical)
- 2026-11-01: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Noom lists as a subprocessor, reported Elevated Instant Payouts failures (no impact stated)
- 2026-10-30: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Noom lists as a subprocessor, reported Elevated errors with search in Dots, ChatGPT Work, and certain ChatGPT thinking experiences (minor)
- 2026-10-30: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Noom lists as a subprocessor, reported Elevated errors for GPT Image 2 API image edits (minor)
- 2026-10-28: [Iterable](https://thirdpartyindex.com/vendors/iterable#status), which Noom lists as a subprocessor, reported Some customers using Sparkpost (US hosted) for email may be seeing delayed or slow sends (minor)
- 2026-10-28: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Noom lists as a subprocessor, reported Elevated Issuing errors from 17:13 - 20:41 UTC (minor)
- 2026-10-28: [Datadog](https://thirdpartyindex.com/vendors/datadog#status), which Noom lists as a subprocessor, reported Metrics query are disrupted (major)
- 2026-10-27: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Noom lists as a subprocessor, reported 6.1 Sol Degraded Model Performance (minor)
- 2026-10-27: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Noom lists as a subprocessor, reported Elevated error rates for most hosted Code Reviews and Security Reviews on private GitHub repositories (no impact stated)
- 2026-10-26: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Noom lists as a subprocessor, reported Elevated error rates for Ads POST requests (minor)
- 2026-10-26: [Datadog](https://thirdpartyindex.com/vendors/datadog#status), which Noom lists as a subprocessor, reported Elevated Error Rates for Workflow Automation, App Builder, Bits Code, Bits Agent Builder (major)
- 2026-10-24: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Noom lists as a subprocessor, reported Elevated Blik errors (no impact stated)
- 2026-10-23: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Noom lists as a subprocessor, reported Degraded experience with ChatGPT app connections using CIMD (minor)
- 2026-10-23: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Noom lists as a subprocessor, reported Help Center Chat Support Degraded (no impact stated)
- 2026-10-23: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Noom lists as a subprocessor, reported Delays in customer support responses (no impact stated)
- 2026-10-22: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Noom lists as a subprocessor, reported Elevated Bancontact errors (no impact stated)
- 2026-10-22: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Noom lists as a subprocessor, reported New Ad Accounts failing to provision admins (minor)
- 2026-10-22: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Noom lists as a subprocessor, reported Degraded Performance of Dots on Enterprise (minor)
- 2026-10-22: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Noom lists as a subprocessor, reported Elevated Bancontact errors (no impact stated)
- 2026-10-22: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Noom lists as a subprocessor, reported Elevated ChatGPT conversation and Responses API errors (minor)
- 2026-10-21: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Noom lists as a subprocessor, reported Authentication errors for some users (major)
- 2026-10-21: [Mixpanel](https://thirdpartyindex.com/vendors/mixpanel#status), which Noom lists as a subprocessor, reported Degraded Service for Requests to decide.mixpanel.com (no impact stated)
- 2026-10-21: [Mixpanel](https://thirdpartyindex.com/vendors/mixpanel#status), which Noom lists as a subprocessor, reported Degraded Service for Requests to decide.mixpanel.com (no impact stated)
- 2026-10-21: [Sentry](https://thirdpartyindex.com/vendors/sentry#status), which Noom lists as a subprocessor, reported Increased latency processing integration webhooks (minor)
- 2026-10-21: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Noom lists as a subprocessor, reported Elevated error rates for gpt-5.6-luna API requests (minor)
- 2026-10-21: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Noom lists as a subprocessor, reported Elevated FedRAMP API error rates for Astra and Sol (minor)
- 2026-10-21: [Sentry](https://thirdpartyindex.com/vendors/sentry#status), which Noom lists as a subprocessor, reported Sentry.io not loading in US region (critical)
- 2026-10-21: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Noom lists as a subprocessor, reported Degraded performance in ChatGPT, Codex, and APIs (minor)
- 2026-10-20: [Sentry](https://thirdpartyindex.com/vendors/sentry#status), which Noom lists as a subprocessor, reported Sentry.io not loading (major)
- 2026-10-20: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Noom lists as a subprocessor, reported Spike in cancellations and expired errors with PayByBank payments (no impact stated)
- 2026-10-20: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Noom lists as a subprocessor, reported Elevated Revolut Pay errors (no impact stated)
- 2026-10-19: [Sentry](https://thirdpartyindex.com/vendors/sentry#status), which Noom lists as a subprocessor, reported Sentry is down (critical)
- 2026-10-19: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Noom lists as a subprocessor, reported File Download errors (minor)
- 2026-10-15: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Noom lists as a subprocessor, reported Elevated declines on Mastercard (no impact stated)
- 2026-10-15: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Noom lists as a subprocessor, reported Elevated declines on Visa (no impact stated)
- 2026-10-15: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Noom lists as a subprocessor, reported Widespread feature degradation (major)
- 2026-10-15: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Noom lists as a subprocessor, reported Elevated Amazon Pay errors (no impact stated)
- 2026-10-14: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Noom lists as a subprocessor, reported Delayed Costs data in the Compliance API (minor)
- 2026-10-14: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Noom lists as a subprocessor, reported Limited availability on gpt-image-2.5-flare and gpt-image-2.5-sunburst (minor)
- 2026-10-14: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Noom lists as a subprocessor, reported Degraded performance in Codex and ChatGPT Work (minor)
- 2026-10-14: [Sentry](https://thirdpartyindex.com/vendors/sentry#status), which Noom lists as a subprocessor, reported Ingestion Halted for EAP data in EU (major)

The subprocessor list as we read it on any date: https://thirdpartyindex.com/labs/time-machine/noom

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api