# Referral Rock

Referral Rock (referralrock.com): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/referral-rock
- Documents last verified: 2026-10-06
- Transparency rating: 80/100 (how much it publishes, not how secure it is): Subprocessor list 30/30; Processing locations 8/8; Purposes 0/7 (partial); Data processing addendum 12/12; Trust center 0/8 (not found); Privacy policy 6/6; security.txt 6/6; Security page 5/5; Status page 5/5; Vulnerability disclosure 0/5 (not found); Pages still reachable 8/8
- Supply chain: relies on 10 tracked vendors directly, 87 within two hops, 332 within three; 0 tracked vendors rely on it directly, 0 within two hops, 0 within three
- Cite as: Referral Rock, Third Party Index, https://thirdpartyindex.com/vendors/referral-rock (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Subprocessor list | https://referralrock.com/third-party | 2026-10-06 | 2026-10-06 |
| Data processing addendum | https://referralrock.com/dpa/ | 2026-10-06 | 2026-10-06 |
| Privacy policy | https://referralrock.com/privacy/ | 2026-10-06 | 2026-10-06 |
| Terms | https://referralrock.com/tos/ | 2026-10-06 | 2026-10-06 |
| Security page | https://referralrock.com/security/ | 2026-10-06 | 2026-10-06 |
| security.txt | https://referralrock.com/.well-known/security.txt | 2026-10-06 | 2026-10-06 |
| Status page | https://status.referralrock.com/ | 2026-10-06 | 2026-10-06 |

## Subprocessors (14)

As its own list states them.

| Subprocessor | Purpose | Location | Listed since |
|---|---|---|---|
| \*CSVBox | — | USA | 2026-10-06 |
| [Elastic Search](https://thirdpartyindex.com/vendors/elasticsearch.md) | — | USA | 2026-10-06 |
| [Google Analytics](https://thirdpartyindex.com/vendors/google-cloud.md) | — | Google’s Global Servers | 2026-10-06 |
| [Hubspot](https://thirdpartyindex.com/vendors/hubspot.md) | — | USA | 2026-10-06 |
| [Intercom](https://thirdpartyindex.com/vendors/intercom.md) | — | USA | 2026-10-06 |
| [Microsoft Azure](https://thirdpartyindex.com/vendors/microsoft.md) | — | USA | 2026-10-06 |
| [\*PayPal](https://thirdpartyindex.com/vendors/paypal-us.md) | — | USA | 2026-10-06 |
| [Segment](https://thirdpartyindex.com/vendors/segment.md) | — | USA | 2026-10-06 |
| Send Grid | — | USA | 2026-10-06 |
| [Sentry](https://thirdpartyindex.com/vendors/sentry.md) | — | USA | 2026-10-06 |
| [Sparkpost](https://thirdpartyindex.com/vendors/sparkpost.md) | — | USA | 2026-10-06 |
| \*Tango Card | — | USA | 2026-10-06 |
| [Vitally](https://thirdpartyindex.com/vendors/vitally.md) | — | USA | 2026-10-06 |
| \*Wise | — | United Kingdom | 2026-10-06 |

Read from ([evidence](https://thirdpartyindex.com/evidence/52929)). CSV: https://thirdpartyindex.com/vendors/referral-rock/subprocessors.csv

## Subprocessor of (0)

No tracked vendor lists it.

## Service status

Incidents it reported on its own status page.

- Last 90 days: 2 reported incidents (2 major or critical, 0 minor, 0 with no impact stated)
- Typical time to resolve: 2 min
- Status page last read: 2026-10-06
- 2026-10-01: "Customer Custom Domain (Legacy)" is Down (major)
- 2026-09-01: "API" is Down (major)
- 2026-05-10: "Customer Custom Domain (Legacy)" is Down (major)
- 2026-04-29: "Customer Custom Domain (Legacy)" is Down (major)
- 2026-01-29: Component "Customer Custom Domain (V2)" and a few other components are Down (major)
- 2026-01-29: "Customer Custom Domain (V2)" is Down (major)
- 2026-01-09: Component "Customer Custom Domain (V2)" and a few other components are Down (major)
- 2025-12-22: Component "Customer Custom Domain (V2)" and a few other components are Down (major)

## Security contact

From its security.txt (https://referralrock.com/.well-known/security.txt) ([evidence](https://thirdpartyindex.com/evidence/52448)):

- Contact: mailto:security@refrralrock.com
- Languages: en
- Valid until 2027-09-23

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api