# Semrush

Semrush declares [9 subprocessors](https://thirdpartyindex.com/vendors/semrush#subprocessors) in [its subprocessor list](https://www.semrush.com/company/legal/sub-processors/), which we last checked on 2026-11-11 ([evidence](https://thirdpartyindex.com/evidence/172086)). They include [Amazon Web Services](https://thirdpartyindex.com/vendors/amazon-web-services), [Google Cloud](https://thirdpartyindex.com/vendors/google-cloud) and [Salesforce](https://thirdpartyindex.com/vendors/salesforce). No published changes since we first read it on 2026-09-22. [7 tracked vendors](https://thirdpartyindex.com/vendors/semrush#used-by) name Semrush as a subprocessor, including [Adobe](https://thirdpartyindex.com/vendors/adobe), [Optimizely](https://thirdpartyindex.com/vendors/optimizely) and [Termly](https://thirdpartyindex.com/vendors/termly).

Semrush (semrush.com): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/semrush
- Documents last verified: 2026-11-11
- Transparency rating: 69/100 (how much it publishes, not how secure it is): Subprocessor list 30/30; Processing locations 8/8; Purposes 0/7 (partial); Data processing addendum 12/12; Trust center 0/8 (not found); Privacy policy 6/6; security.txt 0/6 (not found); Security page 5/5; Status page 0/5 (not found); Vulnerability disclosure 0/5 (not found); Pages still reachable 8/8
- Supply chain: relies on 7 tracked vendors directly, 78 within two hops, 272 within three; 7 tracked vendors rely on it directly, 59 within two hops, 201 within three
- Cite as: Semrush, Third Party Index, https://thirdpartyindex.com/vendors/semrush (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Subprocessor list | https://www.semrush.com/company/legal/sub-processors/ | 2026-11-11 | 2026-10-28 |
| Data processing addendum | https://www.semrush.com/company/legal/dpa/ | 2026-11-11 | 2026-10-28 |
| Privacy policy | https://www.semrush.com/company/legal/privacy-policy/ | 2026-11-11 | 2026-10-28 |
| Terms | https://www.semrush.com/company/legal/terms-of-service/ | 2026-11-11 | 2026-10-28 |
| Security page | https://www.semrush.com/company/security/ | 2026-11-11 | 2026-10-28 |

## Subprocessors (9)

As its own list states them.

| Subprocessor | Purpose | Location | Listed since |
|---|---|---|---|
| [Amazon Web Services](https://thirdpartyindex.com/vendors/amazon-web-services.md) | — | Ireland; USA | 2026-09-22 |
| [Amplitude](https://thirdpartyindex.com/vendors/amplitude.md) | — | USA | 2026-09-22 |
| [Equinix](https://thirdpartyindex.com/vendors/equinix.md) | — | USA | 2026-09-22 |
| [Google BigQuery](https://thirdpartyindex.com/vendors/google-cloud.md) | — | USA | 2026-09-22 |
| [Google Cloud Platform](https://thirdpartyindex.com/vendors/google-cloud.md) | — | USA | 2026-09-22 |
| [Intercom](https://thirdpartyindex.com/vendors/intercom.md) | — | USA | 2026-09-22 |
| [Salesforce](https://thirdpartyindex.com/vendors/salesforce.md) | — | USA | 2026-09-22 |
| [Salesloft](https://thirdpartyindex.com/vendors/salesloft.md) | — | USA | 2026-09-22 |
| The Vanity Project LLC | — | USA | 2026-09-22 |

Read from ([evidence](https://thirdpartyindex.com/evidence/3742)). CSV: https://thirdpartyindex.com/vendors/semrush/subprocessors.csv

## Web Technologies

Semrush's homepage made 219 requests to 40 domains, 21 services controlled by another company, and 2 domains not identified. Loaded on 2026-11-05 by a browser that accepted nothing; other visits may load more or less. What a page loads is not a list of who receives customer data.

21 third parties by category: Advertising 8 (Google Cloud, Microsoft, The Trade Desk, Inc., StackAdapt, OpenAI; reviewed: Clickagy; usually detected as Advertising: Xandr, Magnite, Inc.); Analytics 7 (TikTok, OWOX, ZoomInfo, LinkedIn, Meta, Amplitude, TikTok); Marketing automation 2 (Adobe, Rockerbox, Inc); Live chat 1 (reviewed: Intercom); Cookie compliance 1 (CookieHub); Miscellaneous 1 (reviewed: Yahoo); RUM 1 (SpeedCurve). Each company that appears controlled by another organization is counted once, under the main category of the technologies detected from it on this homepage or, when none was, the category recorded from the company's own page (marked reviewed) or else the one it is usually detected as on other published homepages (marked as such); unclassified: none of these.

### Third parties (21)

- Google Cloud: 23 requests to google.com, doubleclick.net, googletagmanager.com, fonts.googleapis.com, gstatic.com; DoubleClick Floodlight, Google Analytics, Google Tag Manager (its subprocessor list names it too)
- Microsoft: 14 requests to clarity.ms, bing.com, bing.net; Microsoft Advertising
- TikTok: 13 requests to tiktok.com; TikTok Pixel
- Adobe: 9 requests to adobedtm.com, adobe.com, marketo.net, adobedc.net, mktoresp.com; Marketo
- The Trade Desk, Inc.: 8 requests to adsrvr.org; theTradeDesk
- Clickagy: 7 requests to clickagy.com
- OWOX: 6 requests to owox.com; OWOX BI
- ZoomInfo: 6 requests to zoominfo.com, zi-scripts.com; Zoominfo
- Intercom: 5 requests to intercom.io, intercomcdn.com (its subprocessor list names it too)
- StackAdapt: 5 requests to stackadapt.com; StackAdapt
- CookieHub: 4 requests to cookiehub.net, cookiehub.eu; CookieHub
- OpenAI: 4 requests to openai.com; ChatGPT Ads Measurement Pixel
- Yahoo: 4 requests to yahoo.com, yimg.com
- LinkedIn: 3 requests to linkedin.com, licdn.com; Linkedin Insight Tag
- Meta: 3 requests to facebook.net, facebook.com; Facebook Pixel 2.9.435
- Rockerbox, Inc: 2 requests to getrockerbox.com; Rockerbox
- SpeedCurve: 2 requests to speedcurve.com; SpeedCurve 4.5.3
- Xandr: 2 requests to adnxs.com
- Amplitude: 1 request to amplitude.com; Amplitude (its subprocessor list names it too)
- Magnite, Inc.: 1 request to rubiconproject.com
- TikTok: 1 request to tiktokw.us; TikTok Pixel

### Unknown (2)

Domains not identified yet: us-east4-centering-land-727.cloudfunctions.net, micpn.com

### First party (1)

- Semrush: 88 requests to semrush.com; Adobe Experience Platform Launch, Django, Google Cloud, Google Cloud CDN, Google Font API, HSTS, HTTP/3, Intercom, Microsoft Clarity, Movable Ink, Nginx, Open Graph, PHP, PWA, Python, SEMrush, Sentry, Swiper, core-js 3.32.2

10 tracked companies loaded by the homepage are not in Semrush's subprocessor list. A website can use a service without it processing customer data.

## Subprocessor of (7)

Tracked vendors whose own subprocessor lists name it, and what they say they use it for.

- [Adobe](https://thirdpartyindex.com/vendors/adobe.md): All provide technical and customer support services depending on region of customer.
- [Cobalt](https://thirdpartyindex.com/vendors/cobalt.md): Marketing insights tool
- [EZO](https://thirdpartyindex.com/vendors/ezo.md): Marketing (optional)
- [Insites](https://thirdpartyindex.com/vendors/insites.md)
- [Optimizely](https://thirdpartyindex.com/vendors/optimizely.md)
- [Termly](https://thirdpartyindex.com/vendors/termly.md): Search Engine Optimization
- [WebFX](https://thirdpartyindex.com/vendors/webfx.md): Competitor Tracking; Used to capture data on client competitors.

## Incidents reported by Semrush's subprocessors

Incidents reported in the last 30 days on their own status pages by 3 vendors Semrush lists as subprocessors. A subprocessor list names a company, not the service an incident touched.

- 2026-11-09: [Salesloft](https://thirdpartyindex.com/vendors/salesloft#status), which Semrush lists as a subprocessor, reported Salesforce sync interruption for some customers (no impact stated)
- 2026-11-06: [Intercom](https://thirdpartyindex.com/vendors/intercom#status), which Semrush lists as a subprocessor, reported Elevated errors and latencies in the European hosting region. (major)
- 2026-11-05: [Amplitude](https://thirdpartyindex.com/vendors/amplitude#status), which Semrush lists as a subprocessor, reported Session Replay capturing more sessions than configured (minor)
- 2026-11-05: [Amplitude](https://thirdpartyindex.com/vendors/amplitude#status), which Semrush lists as a subprocessor, reported Delayed S3 export (minor)
- 2026-10-30: [Intercom](https://thirdpartyindex.com/vendors/intercom#status), which Semrush lists as a subprocessor, reported Slow Fin Procedures (minor)
- 2026-10-29: [Salesloft](https://thirdpartyindex.com/vendors/salesloft#status), which Semrush lists as a subprocessor, reported Copilot – Calls not being recorded (major)
- 2026-10-27: [Salesloft](https://thirdpartyindex.com/vendors/salesloft#status), which Semrush lists as a subprocessor, reported Groove Dialer: Calls failing for some customers (major)
- 2026-10-26: [Amplitude](https://thirdpartyindex.com/vendors/amplitude#status), which Semrush lists as a subprocessor, reported Data Ingestion Delays (minor)
- 2026-10-26: [Salesloft](https://thirdpartyindex.com/vendors/salesloft#status), which Semrush lists as a subprocessor, reported Pipeline Lag (minor)
- 2026-10-24: [Amplitude](https://thirdpartyindex.com/vendors/amplitude#status), which Semrush lists as a subprocessor, reported Delayed/Blocked Event Delivery to Amazon Kinesis Destination (no impact stated)
- 2026-10-22: [Amplitude](https://thirdpartyindex.com/vendors/amplitude#status), which Semrush lists as a subprocessor, reported Streaming to External Destinations Unavailable (no impact stated)
- 2026-10-22: [Amplitude](https://thirdpartyindex.com/vendors/amplitude#status), which Semrush lists as a subprocessor, reported Amplitude Website Outage (no impact stated)
- 2026-10-22: [Amplitude](https://thirdpartyindex.com/vendors/amplitude#status), which Semrush lists as a subprocessor, reported Notice: Amplitude not impacted by recent PHP vulnerabilities (no impact stated)
- 2026-10-20: [Amplitude](https://thirdpartyindex.com/vendors/amplitude#status), which Semrush lists as a subprocessor, reported Export API returns 500 errors across multiple organizations (minor)
- 2026-10-19: [Salesloft](https://thirdpartyindex.com/vendors/salesloft#status), which Semrush lists as a subprocessor, reported MS Teams Calls Not Being Recorded (major)
- 2026-10-17: [Amplitude](https://thirdpartyindex.com/vendors/amplitude#status), which Semrush lists as a subprocessor, reported We are actively investigating an issue with our ingestion systems lagging (minor)
- 2026-10-14: [Intercom](https://thirdpartyindex.com/vendors/intercom#status), which Semrush lists as a subprocessor, reported Customer contact details showing up as "Redacted" in the Intercom Inbox (minor)
- 2026-10-14: [Salesloft](https://thirdpartyindex.com/vendors/salesloft#status), which Semrush lists as a subprocessor, reported Certain users are unable to access Conversation Intelligence from within Salesloft/Clari (major)
- 2026-10-13: [Amplitude](https://thirdpartyindex.com/vendors/amplitude#status), which Semrush lists as a subprocessor, reported Degraded Performance- Funnel charts renders as white text on a white/near-white background in light theme (no impact stated)

The subprocessor list as we read it on any date: https://thirdpartyindex.com/labs/time-machine/semrush

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api