# PROS

PROS declares [13 subprocessors](https://thirdpartyindex.com/vendors/pros#subprocessors), plus 11 of its own affiliates, in [its subprocessor list](https://pros.com/wp-content/uploads/2026/06/Subprocessor-List-01Jul2026.pdf), which we last checked on 2026-11-11 ([evidence](https://thirdpartyindex.com/evidence/178209)). They include [Microsoft](https://thirdpartyindex.com/vendors/microsoft), [Cloudflare](https://thirdpartyindex.com/vendors/cloudflare) and [Okta](https://thirdpartyindex.com/vendors/okta). No published changes since we first read it on 2026-10-29. [1 tracked vendor](https://thirdpartyindex.com/vendors/pros#used-by), [Conga](https://thirdpartyindex.com/vendors/conga), names PROS as a subprocessor.

PROS (pros.com): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/pros
- Documents last verified: 2026-11-11
- Transparency rating: 77/100 (how much it publishes, not how secure it is): Subprocessor list 30/30; Processing locations 8/8; Purposes 6/7 (partial); Data processing addendum 0/12 (not found); Trust center 8/8; Privacy policy 6/6; security.txt 6/6; Security page 0/5 (not found); Status page 5/5; Vulnerability disclosure 0/5 (not found); Pages still reachable 8/8
- Supply chain: relies on 9 tracked vendors directly, 72 within two hops, 294 within three; 1 tracked vendors rely on it directly, 10 within two hops, 704 within three
- Cite as: PROS, Third Party Index, https://thirdpartyindex.com/vendors/pros (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Trust center | https://pros.com/trust-security/ | 2026-11-11 | 2026-10-13 |
| Subprocessor list | https://pros.com/wp-content/uploads/2026/06/Subprocessor-List-01Jul2026.pdf | 2026-11-11 | 2026-10-29 |
| Privacy policy | https://pros.com/privacy-notice/ | 2026-11-11 | 2026-10-13 |
| security.txt | https://pros.com/.well-known/security.txt | 2026-11-11 | 2026-09-23 |
| Status page | https://status.pros.com/ | 2026-11-11 | 2026-11-11 |

## Subprocessors (13)

As its own list states them.

| Subprocessor | Purpose | Location | Listed since |
|---|---|---|---|
| [37signals LLC](https://thirdpartyindex.com/vendors/37signals.md) | Basecamp project and communication management | United States | 2026-10-29 |
| Amazon Web Services, Inc. IBM | Hosting and cloud infrastructure Hosting and cloud infrastructure | United States | 2026-10-29 |
| Americas Region PROS, Inc. | — | United States | 2026-10-29 |
| [Appcues, Inc.](https://thirdpartyindex.com/vendors/appcues.md) | User onboarding, adoption, engagement, and feedback | United States | 2026-10-29 |
| [Cloudflare, Inc.](https://thirdpartyindex.com/vendors/cloudflare.md) | CDN and Firewall provider | United States | 2026-10-29 |
| [Confluent, Inc.](https://thirdpartyindex.com/vendors/confluent.md) | Kafka data streaming services used by the PROS Platform | United States | 2026-10-29 |
| [Crowdstrike, Inc.](https://thirdpartyindex.com/vendors/crowdstrike.md) | Managed SOC, SIEM, EDR including Threat Intelligence and Exposure Management | United States | 2026-10-29 |
| Malmur Consulting & Services d.b.a. Technologias de Information | Implementation and development services | Mexico | 2026-10-29 |
| Malmur S.A de C.V. VCB & Company, LLC Other Sub-processors | Consulting, implementation, and maintenance services | United States | 2026-10-29 |
| [MessageBird USA Inc,(dba SparkPost)](https://thirdpartyindex.com/vendors/bird.md) | Communications technology provider for Customer notifications | United States | 2026-10-29 |
| [Microsoft Corporation](https://thirdpartyindex.com/vendors/microsoft.md) (AI model provider: Azure OpenAI) | Generative AI processing utilizing large language models via Azure OpenAI Service APIs Power BI for Customer reporting on User interactions; Hosting, cloud infrastructure, and, if requested by Customer, credential authentication | United States | 2026-10-29 |
| [MongoDB, Inc.](https://thirdpartyindex.com/vendors/mongodb.md) | Managed database services | United States | 2026-10-29 |
| [Okta, Inc](https://thirdpartyindex.com/vendors/okta.md) | Authentication Provider Identity governance (Datamart and | United States | 2026-10-29 |

Read from ([evidence](https://thirdpartyindex.com/evidence/178209)). CSV: https://thirdpartyindex.com/vendors/pros/subprocessors.csv

AI model providers (or a cloud provider's AI model service) among these entries: 1. All vendors that list one: https://thirdpartyindex.com/ai

### Its own affiliates (11)

- PROS Affiliate (Sub-processors)
- PROS Canada Operations, Ltd. (Canada)
- PROS Ecuador S.A.S Europe and Middle East Region (Ecuador)
- PROS Europe Limited (England)
- PROS Florida, LLC (Hong Kong branch) (Hong Kong)
- PROS International Technology Limited (Ireland)
- PROS International Technology Ltd. Zweigniederlassung (Germany)
- PROS Middle East Technology Systems L.L.C. Asia-Pacific Region (United Arab Emirates)
- PROS Technology (SG) Pte. Ltd (Singapore)
- PROS Technology Australia Pty. Ltd. (Australia)
- PROS Travel Bulgaria EOOD (Bulgaria)

## Web Technologies

PROS's homepage made 145 requests to 27 domains, and 15 services controlled by another company. Loaded on 2026-10-14 by a browser that accepted nothing; other visits may load more or less. What a page loads is not a list of who receives customer data.

15 third parties by category: Advertising 5 (Google Cloud, Metadata; reviewed: Index Exchange Inc.; usually detected as Advertising: Magnite, Inc., PubMatic); Analytics 5 (Crazy Egg, Demandbase, G2.com, LinkedIn, Meta); Marketing automation 1 (Adobe); Cookie compliance 1 (OneTrust); Customer data platform 1 (reviewed: LiveRamp); Geolocation 1 (ipify); JavaScript libraries 1 (Pagely, Inc.). Each company that appears controlled by another organization is counted once, under the main category of the technologies detected from it on this homepage or, when none was, the category recorded from the company's own page (marked reviewed) or else the one it is usually detected as on other published homepages (marked as such); unclassified: none of these.

### Third parties (15)

- Pagely, Inc.: 80 requests to pcdn.co; Elementor, WordPress, jQuery 3.7.1, jQuery Migrate 3.4.1
- Google Cloud: 16 requests to google.com, doubleclick.net, googletagmanager.com; DoubleClick Floodlight, Google Analytics, Google Tag Manager
- OneTrust: 11 requests to cookielaw.org, onetrust.com; OneTrust
- Adobe: 7 requests to adoberesources.net, marketo.net, adobe.io, mktoresp.com; Marketo
- Crazy Egg: 5 requests to crazyegg.com; Crazy Egg
- Demandbase: 4 requests to company-target.com, demandbase.com; Demandbase 11.8.0
- Metadata: 4 requests to metadata.io; Metadata.io
- G2.com: 3 requests to g2.com, g2crowd.com; G2 Track Your Prospects
- LinkedIn: 3 requests to linkedin.com, licdn.com; Linkedin Insight Tag
- Meta: 3 requests to facebook.net, facebook.com; Facebook Pixel 2.9.419
- Magnite, Inc.: 2 requests to rubiconproject.com, tremorhub.com
- Index Exchange Inc.: 1 request to casalemedia.com
- LiveRamp: 1 request to rlcdn.com
- PubMatic: 1 request to pubmatic.com
- ipify: 1 request to ipify.org; ipify

### First party (1)

- PROS: 3 requests to pros.com; Amazon Web Services, GSAP 3.15.0, HSTS, Hello Elementor 7.1.3, Lenis 1.3.26, Linkedin Ads, MySQL, Open Graph, PHP, Pagely, Priority Hints, Speculative Loading 1.7.0, Twitter Emoji (Twemoji), Yoast SEO 28.6, Yoast SEO Premium 27.5, core-js 3.46.0, jQuery UI 1.14.2, lit-element 3.3.2, lit-html 2.7.4

10 tracked companies loaded by the homepage are not in PROS's subprocessor list. A website can use a service without it processing customer data.

## Subprocessor of (1)

Tracked vendors whose own subprocessor lists name it, and what they say they use it for.

- [Conga](https://thirdpartyindex.com/vendors/conga.md): Hosting Services

## Service status

Incidents it reported on its own status page.

- Last 90 days: 0 reported incidents (0 major or critical, 0 minor, 0 with no impact stated)
- Status page last read: 2026-11-12
- No incidents reported in the last 12 months
- 2026-06-30: Data Platform - Databricks - Degraded Performance in Subrealms (no impact stated)
- 2026-05-22: SPO degraded service for training Neural Network analyses (no impact stated)
- 2026-05-13: Partial outage for smartCPQ in our EU1 cloud region (no impact stated)
- 2026-05-13: RTPE EU1 Outage (no impact stated)
- 2026-05-07: Production | Degraded performance | May 07, 2026 (no impact stated)
- 2026-05-07: Production | Degraded performance | May 07, 2026 (no impact stated)
- 2026-05-05: Degraded performances for smartCPQ in our EU1 cloud region (no impact stated)
- 2026-03-04: RTPE Degraded Performance US1 POD (no impact stated)

## Incidents reported by PROS's subprocessors

Incidents reported in the last 30 days on their own status pages by 4 vendors PROS lists as subprocessors. A subprocessor list names a company, not the service an incident touched.

- 2026-11-05: [Confluent](https://thirdpartyindex.com/vendors/confluent#status), which PROS lists as a subprocessor, reported Kafka - Increased latency and connectivity issues - Azure - brazilsouth (minor)
- 2026-10-30: [Appcues](https://thirdpartyindex.com/vendors/appcues#status), which PROS lists as a subprocessor, reported Appcues SDK performance degredation (minor)
- 2026-10-23: [Bird](https://thirdpartyindex.com/vendors/bird#status), which PROS lists as a subprocessor, reported Whatsapp sending is degraded (minor)
- 2026-10-20: [Confluent](https://thirdpartyindex.com/vendors/confluent#status), which PROS lists as a subprocessor, reported Multiple Confluent Cloud services are in a degraded state - GCP EU-West2 (major)
- 2026-10-20: [MongoDB](https://thirdpartyindex.com/vendors/mongodb#status), which PROS lists as a subprocessor, reported GCP Availability Zone europe-west2-b connectivity issues (minor)
- 2026-10-16: [Confluent](https://thirdpartyindex.com/vendors/confluent#status), which PROS lists as a subprocessor, reported Delay in Kafka cluster provisioning (minor)
- 2026-10-15: [Confluent](https://thirdpartyindex.com/vendors/confluent#status), which PROS lists as a subprocessor, reported Confluent Cloud Console (UI) degraded functionality (no impact stated)

The subprocessor list as we read it on any date: https://thirdpartyindex.com/labs/time-machine/pros

## Security contact

From its security.txt (https://pros.com/.well-known/security.txt) ([evidence](https://thirdpartyindex.com/evidence/7555)):

- Contact: mailto:security@pros.com
- Languages: en
- Expired 2026-02-01

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api
