# Second Front Systems Second Front Systems declares [9 subprocessors](https://thirdpartyindex.com/vendors/second-front-systems#subprocessors) in [its subprocessor list](https://trust.secondfront.com/?itemUid=e3fae2ca-94a9-416b-b577-5c90e382df57), which we last checked on 2026-11-11 ([evidence](https://thirdpartyindex.com/evidence/6735)). They include [Amazon Web Services](https://thirdpartyindex.com/vendors/amazon-web-services), [Google Cloud](https://thirdpartyindex.com/vendors/google-cloud) and [Slack](https://thirdpartyindex.com/vendors/slack). No published changes since we first read it on 2026-09-23. [1 tracked vendor](https://thirdpartyindex.com/vendors/second-front-systems#used-by), [JetStream Security](https://thirdpartyindex.com/vendors/jetstream-security), names Second Front Systems as a subprocessor. Second Front Systems (secondfront.com): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index. - Page: https://thirdpartyindex.com/vendors/second-front-systems - Documents last verified: 2026-11-11 - Transparency rating: 72/100 (how much it publishes, not how secure it is): Subprocessor list 30/30; Processing locations 8/8; Purposes 7/7; Data processing addendum 0/12 (not found); Trust center 8/8; Privacy policy 6/6; security.txt 0/6 (not found); Security page 0/5 (not found); Status page 0/5 (not found); Vulnerability disclosure 5/5; Pages still reachable 8/8 - Supply chain: relies on 8 tracked vendors directly, 74 within two hops, 271 within three; 1 tracked vendors rely on it directly, 1 within two hops, 1 within three - Cite as: Second Front Systems, Third Party Index, https://thirdpartyindex.com/vendors/second-front-systems (data CC BY 4.0) ## Documents | Document | URL | Last verified | Last changed | |---|---|---|---| | Trust center | https://trust.secondfront.com/ | 2026-11-11 | 2026-09-23 | | Subprocessor list | https://trust.secondfront.com/?itemUid=e3fae2ca-94a9-416b-b577-5c90e382df57 | 2026-11-11 | 2026-09-23 | | Privacy policy | https://www.secondfront.com/privacy-policy/ | 2026-11-11 | 2026-10-28 | | Terms | https://www.secondfront.com/terms-of-service/ | 2026-11-11 | 2026-10-28 | | Security advisories | https://www.secondfront.com/legal/vulnerability-disclosure-program/ | 2026-11-11 | 2026-10-28 | ## Subprocessors (9) As its own list states them. | Subprocessor | Purpose | Location | Listed since | |---|---|---|---| | [Amazon Web Services (AWS)](https://thirdpartyindex.com/vendors/amazon-web-services.md) | Secure cloud infrastructure for hosting our application and your data. | US data centers | 2026-10-01 | | [CrowdStrike](https://thirdpartyindex.com/vendors/crowdstrike.md) | Advanced endpoint threat detection and response for our corporate servers and laptops | US data centers | 2026-09-23 | | [GitLab](https://thirdpartyindex.com/vendors/gitlab.md) | A secure platform for managing our software source code and development processes | Self-hosted | 2026-09-23 | | [Google Cloud](https://thirdpartyindex.com/vendors/google-cloud.md) | Reliable cloud services for application hosting and data processing. | US data centers | 2026-10-01 | | [Google Workspace](https://thirdpartyindex.com/vendors/google-cloud.md) | Internal productivity tools (e.g., email, documents) for our employees. | US data centers | 2026-09-23 | | [Hexnode](https://thirdpartyindex.com/vendors/hexnode.md) | Management and security for our company’s endpoint devices | US data centers | 2026-09-23 | | [Jamf](https://thirdpartyindex.com/vendors/jamf.md) | Management and security for our company’s endpoint devices | US data centers | 2026-09-23 | | [Okta](https://thirdpartyindex.com/vendors/okta.md) | Identity and access management to secure employee access to our corporate systems | US data centers | 2026-09-23 | | [Slack](https://thirdpartyindex.com/vendors/slack.md) | Internal messaging and collaboration platform for our teams | US data centers | 2026-09-23 | Read from ([evidence](https://thirdpartyindex.com/evidence/6735)). CSV: https://thirdpartyindex.com/vendors/second-front-systems/subprocessors.csv ## Compliance As its trust center lists them. - Audited: SOC 2 Type II, SOC 2 Type I, ISO/IEC 27001, ISO/IEC 27017, ISO/IEC 27018, ISO 9001, FedRAMP, StateRAMP, BSI C5, Cyber Essentials Plus, Cyber Essentials ([evidence](https://thirdpartyindex.com/evidence/6730)) - FedRAMP Marketplace: High · 4 agency authorizations · since Aug 12, 2025 ## Web Technologies Second Front Systems's homepage made 218 requests to 29 domains, and 17 services controlled by another company. Loaded on 2026-11-10 by a browser that accepted nothing; other visits may load more or less. What a page loads is not a list of who receives customer data. 17 third parties by category: Analytics 7 (Google Cloud, Crazy Egg, LinkedIn, Meta, Snitcher, ZoomInfo, Cloudflare); Advertising 3 (Microsoft, Vibe Advertising Inc., Reddit, Inc.); Marketing automation 3 (OptinMonster, Adobe, Salesloft); Cookie compliance 1 (CookieYes); Security 1 (usually detected as Security: Amazon Web Services); Video players 1 (reviewed: Vimeo); Widgets 1 (ShareThis). Each company that appears controlled by another organization is counted once, under the main category of the technologies detected from it on this homepage or, when none was, the category recorded from the company's own page (marked reviewed) or else the one it is usually detected as on other published homepages (marked as such); unclassified: none of these. ### Third parties (17) - Google Cloud: 32 requests to gstatic.com, google.com, fonts.googleapis.com, googletagmanager.com, doubleclick.net; Google Analytics, Google Tag Manager, reCAPTCHA (its subprocessor list names it too) - OptinMonster: 26 requests to omappapi.com; OptinMonster - Vimeo: 22 requests to vimeocdn.com, vimeo.com - CookieYes: 11 requests to cdn-cookieyes.com, cookieyes.com; CookieYes - Crazy Egg: 4 requests to crazyegg.com; Crazy Egg - Microsoft: 4 requests to bing.com; Microsoft Advertising - ShareThis: 4 requests to sharethis.com; ShareThis - Adobe: 3 requests to marketo.net, mktoresp.com; Marketo - LinkedIn: 3 requests to linkedin.com, licdn.com; Linkedin Insight Tag - Meta: 3 requests to facebook.net, facebook.com; Facebook Pixel 2.9.439 - Salesloft: 3 requests to salesloft.com; Salesloft - Snitcher: 3 requests to snitcher.com; Snitcher - Vibe Advertising Inc.: 3 requests to vibe.co; Vibe.co - ZoomInfo: 3 requests to zi-scripts.com, zoominfo.com; Zoominfo - Reddit, Inc.: 2 requests to reddit.com, redditstatic.com; Reddit Ads - Amazon Web Services: 1 request to on.aws (its subprocessor list names it too) - Cloudflare: 1 request to cloudflareinsights.com; Cloudflare Browser Insights ### First party (1) - Second Front Systems: 90 requests to secondfront.com; Cloudflare, GSAP 3.12.5, Google Font API, HSTS, HTTP/3, Isotope, LottieFiles 5.11.0, Masonry, MySQL, Open Graph, PHP, PWA, Priority Hints, RSS, Select2, Stimulus, VideoJS 7.10.2, Vimeo, WP Engine, WordPress, WordPress Block Editor, Yoast SEO 28.8, Yoast SEO Premium 28.8, core-js 3.32.2, jQuery 3.7.1, jQuery Migrate 3.4.1 12 tracked companies loaded by the homepage are not in Second Front Systems's subprocessor list. A website can use a service without it processing customer data. ## Subprocessor of (1) Tracked vendors whose own subprocessor lists name it, and what they say they use it for. - [JetStream Security](https://thirdpartyindex.com/vendors/jetstream-security.md): Infrastructure-as-a-Service ## Incidents reported by Second Front Systems's subprocessors Incidents reported in the last 30 days on their own status pages by 1 vendor Second Front Systems lists as a subprocessor. A subprocessor list names a company, not the service an incident touched. - 2026-11-04: [Jamf](https://thirdpartyindex.com/vendors/jamf#status), which Second Front Systems lists as a subprocessor, reported Jamf Now: Some accounts deactivated unexpectedly (major) - 2026-10-26: [Jamf](https://thirdpartyindex.com/vendors/jamf#status), which Second Front Systems lists as a subprocessor, reported Jamf Pro may be experiencing slow response times. (no impact stated) - 2026-10-26: [Jamf](https://thirdpartyindex.com/vendors/jamf#status), which Second Front Systems lists as a subprocessor, reported Partial connectivity issue to some instances (major) - 2026-10-23: [Jamf](https://thirdpartyindex.com/vendors/jamf#status), which Second Front Systems lists as a subprocessor, reported Customers using VPP v2 may experience delays in new apps and licenses appearing in their Jamf environment (minor) - 2026-10-21: [Jamf](https://thirdpartyindex.com/vendors/jamf#status), which Second Front Systems lists as a subprocessor, reported Public disclosure of compromised intermediate certificate authority keys (eMudhra) affecting certificate trust across the internet (minor) - 2026-10-21: [Jamf](https://thirdpartyindex.com/vendors/jamf#status), which Second Front Systems lists as a subprocessor, reported On-Device Content Filtering test page is currently unavailable (minor) - 2026-10-21: [Jamf](https://thirdpartyindex.com/vendors/jamf#status), which Second Front Systems lists as a subprocessor, reported Jamf School Upload Functionality (major) ## Recent changes Changes to its documents and subprocessor list since monitoring began. - 2026-10-21: Changed registry listing: fedramp:FR2410866384 ([evidence](https://thirdpartyindex.com/evidence/135407)) Feed: https://thirdpartyindex.com/vendors/second-front-systems/changes.atom The subprocessor list as we read it on any date: https://thirdpartyindex.com/labs/time-machine/second-front-systems --- Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api