# Reddit

Reddit declares [6 subprocessors](https://thirdpartyindex.com/vendors/reddit#subprocessors) in [its subprocessor list](https://business.reddithelp.com/s/article/Reddit-Ads-Subprocessors), which we last checked on 2026-10-25 ([evidence](https://thirdpartyindex.com/evidence/108259)). They include [Amazon Web Services](https://thirdpartyindex.com/vendors/amazon-web-services), [Google Cloud](https://thirdpartyindex.com/vendors/google-cloud) and [Salesforce](https://thirdpartyindex.com/vendors/salesforce). No published changes since we first read it on 2026-10-13. [11 tracked vendors](https://thirdpartyindex.com/vendors/reddit#used-by) name Reddit as a subprocessor, including [ZeroBounce](https://thirdpartyindex.com/vendors/zerobounce), [Digicert](https://thirdpartyindex.com/vendors/digicert) and [InMotion Hosting](https://thirdpartyindex.com/vendors/inmotion-hosting).

Reddit (redditinc.com): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/reddit
- Documents last verified: 2026-10-25
- Transparency rating: 71/100 (how much it publishes, not how secure it is): Subprocessor list 30/30; Processing locations 8/8; Purposes 7/7; Data processing addendum 12/12; Trust center 0/8 (not found); Privacy policy 6/6; security.txt 0/6 (not found); Security page 0/5 (not found); Status page 0/5 (not found); Vulnerability disclosure 0/5 (not found); Pages still reachable 8/8
- Supply chain: relies on 6 tracked vendors directly, 81 within two hops, 299 within three; 11 tracked vendors rely on it directly, 34 within two hops, 105 within three
- Cite as: Reddit, Third Party Index, https://thirdpartyindex.com/vendors/reddit (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Subprocessor list | https://business.reddithelp.com/s/article/Reddit-Ads-Subprocessors | 2026-10-25 | 2026-10-16 |
| Data processing addendum | https://business.reddithelp.com/s/article/Reddit-Advertising-Data-Processing-Agreement | 2026-10-25 | 2026-10-16 |
| Privacy policy | https://redditinc.com/privacy | 2026-10-25 | 2026-10-11 |

## Subprocessors (6)

As its own list states them.

| Subprocessor | Purpose | Location | Listed since |
|---|---|---|---|
| [Amazon Web Services, Inc.](https://thirdpartyindex.com/vendors/amazon-web-services.md) | Data hosting and storage | Global (more information) | 2026-10-13 |
| [Atlassian, Inc.](https://thirdpartyindex.com/vendors/atlassian.md) | Business support, CRM data | United States | 2026-10-13 |
| [Google Cloud Platform](https://thirdpartyindex.com/vendors/google-cloud.md) | Data hosting and storage | Global (more information) | 2026-10-13 |
| [LiveRamp, Inc.](https://thirdpartyindex.com/vendors/liveramp.md) | Advertising services support | United States | 2026-10-13 |
| [Salesforce.com, Inc.](https://thirdpartyindex.com/vendors/salesforce.md) | Business support, CRM data | United States (more information) | 2026-10-13 |
| [Zendesk, Inc.](https://thirdpartyindex.com/vendors/zendesk.md) | Business support, CRM data | United States | 2026-10-13 |

Read from ([evidence](https://thirdpartyindex.com/evidence/92841)). CSV: https://thirdpartyindex.com/vendors/reddit/subprocessors.csv

## Security program

What Reddit, Inc.'s Form 10-K for fiscal 2025, filed Feb 6, 2026 (Item 1C) says, in its words (https://www.sec.gov/Archives/edgar/data/1713445/000171344526000022/0001713445-26-000022-index.htm).

- Led by: Chief Information Security Officer
- Board oversight: Audit Committee
- Frameworks named: NIST CSF, SOC 2
- Practices named: Incident response plan, Penetration testing, Bug bounty, Threat intelligence, Security training
- Engages outside assessors or consultants
- Reviews its suppliers' security
- Says no cybersecurity incident has materially affected it

## Web Technologies

Reddit's homepage made 132 requests to 23 domains, 8 services controlled by another company, and 1 domain not identified. Loaded on 2026-10-13 by a browser that accepted nothing; other visits may load more or less. What a page loads is not a list of who receives customer data.

8 third parties by category: Analytics 3 (HubSpot, Meta, ZoomInfo); Advertising 1 (Google Cloud); Tag managers 1 (Ensighten); Cookie compliance 1 (OneTrust); Issue trackers 1 (Sentry); Video players 1 (Wistia). Each company that appears controlled by another organization is counted once, under the main category of the technologies detected from it on this homepage or, when none was, the category recorded from the company's own page (marked reviewed) or else the one it is usually detected as on other published homepages (marked as such); unclassified: none of these.

### Third parties (8)

- HubSpot: 31 requests to hubspotusercontent-na1.net, hscollectedforms.net, hubspot.com, hs-banner.com, hs-analytics.net, hs-scripts.com, hsadspixel.net, hsforms.com, hubapi.com; HubSpot, HubSpot Analytics
- Google Cloud: 15 requests to googletagmanager.com, google.com, doubleclick.net, google-analytics.com; DoubleClick Floodlight, Google Analytics, Google Tag Manager (its subprocessor list names it too)
- Wistia: 12 requests to wistia.com; Wistia
- OneTrust: 11 requests to cookielaw.org, onetrust.com; OneTrust
- Ensighten: 3 requests to ensighten.com; Ensighten
- Meta: 3 requests to facebook.net, facebook.com; Facebook Pixel 2.9.419
- Sentry: 1 request to sentry-cdn.com; Sentry 9.6.1
- ZoomInfo: 1 request to zoominfo.com; Zoominfo

### Unknown (1)

Domains not identified yet: mpc-prod-21-1053047382554.us-central1.run.app

### First party (1)

- Reddit: 54 requests to redditinc.com; Cloudflare, HSTS, HTTP/3, HubSpot CMS Hub, Microsoft Clarity, Open Graph, jQuery 4.0.0

5 tracked companies loaded by the homepage are not in Reddit's subprocessor list. A website can use a service without it processing customer data.

## Subprocessor of (11)

Tracked vendors whose own subprocessor lists name it, and what they say they use it for.

- [AWeber](https://thirdpartyindex.com/vendors/aweber.md): Business Analytics; Reddit Privacy
- [Digicert](https://thirdpartyindex.com/vendors/digicert.md): Provide advertising services
- [Encore Digital Media](https://thirdpartyindex.com/vendors/encore-digital-media.md)
- [Funnel](https://thirdpartyindex.com/vendors/funnel.md): Ad targeting, content customization, cross website tracking
- [Hubstaff](https://thirdpartyindex.com/vendors/hubstaff.md): Advertising platform for paid campaigns, audience targeting, and conversion measurement on Reddit.
- [InMotion Hosting](https://thirdpartyindex.com/vendors/inmotion-hosting.md): Targeted advertising and user analytics
- [Leadjourney](https://thirdpartyindex.com/vendors/leadjourney.md): Reddit Ads pixel and Conversions API: ad performance measurement. A demo request is reported with a hashed email address and phone number, the IP address and th…
- [OpenMetal IaaS](https://thirdpartyindex.com/vendors/openmetal-iaas.md): Targeted advertising and user analytics
- [UltraDNS](https://thirdpartyindex.com/vendors/ultradns.md): Provide advertising services
- [Zeplin](https://thirdpartyindex.com/vendors/zeplin.md): Zeplin uses Reddit cookies to collect user information to engage in marketing efforts.
- [ZeroBounce](https://thirdpartyindex.com/vendors/zerobounce.md): Ad placement

## Incidents reported by Reddit's subprocessors

Incidents reported in the last 30 days on their own status pages by 1 vendor Reddit lists as a subprocessor. A subprocessor list names a company, not the service an incident touched.

- 2026-10-25: [LiveRamp](https://thirdpartyindex.com/vendors/liveramp#status), which Reddit lists as a subprocessor, reported Incident Resolved for Analytics Environment (EU) - Reporting (EU) via Grafana (major)
- 2026-10-21: [LiveRamp](https://thirdpartyindex.com/vendors/liveramp#status), which Reddit lists as a subprocessor, reported Intermittent issues impacting Connect UI (major)
- 2026-10-21: [LiveRamp](https://thirdpartyindex.com/vendors/liveramp#status), which Reddit lists as a subprocessor, reported Intermittent issues impacting Connect UI (major)
- 2026-10-21: [LiveRamp](https://thirdpartyindex.com/vendors/liveramp#status), which Reddit lists as a subprocessor, reported Intermittent issues impacting Connect UI (major)
- 2026-10-17: [LiveRamp](https://thirdpartyindex.com/vendors/liveramp#status), which Reddit lists as a subprocessor, reported Intermittent issues impacting Connect UI (major)
- 2026-10-14: [LiveRamp](https://thirdpartyindex.com/vendors/liveramp#status), which Reddit lists as a subprocessor, reported Intermittent issues impacting Connect UI (major)
- 2026-10-13: [LiveRamp](https://thirdpartyindex.com/vendors/liveramp#status), which Reddit lists as a subprocessor, reported Incident Resolved for Connect UI - Connect UI Website via Grafana (major)
- 2026-10-12: [LiveRamp](https://thirdpartyindex.com/vendors/liveramp#status), which Reddit lists as a subprocessor, reported Intermittent issues impacting Connect UI (major)
- 2026-09-29: [LiveRamp](https://thirdpartyindex.com/vendors/liveramp#status), which Reddit lists as a subprocessor, reported Incident Resolved for Public API - Activation API via Grafana (major)
- 2026-09-27: [LiveRamp](https://thirdpartyindex.com/vendors/liveramp#status), which Reddit lists as a subprocessor, reported Incident Resolved for Analytics Environment (EU) - Reporting (EU) via Grafana (major)

The subprocessor list as we read it on any date: https://thirdpartyindex.com/labs/time-machine/reddit

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api