# Similarweb

[3 tracked vendors](https://thirdpartyindex.com/vendors/similarweb#used-by) name Similarweb as a subprocessor, including [ClickUp™](https://thirdpartyindex.com/vendors/clickuptm), [HUMAN Security](https://thirdpartyindex.com/vendors/human-security) and [WebFX](https://thirdpartyindex.com/vendors/webfx). We have not found a subprocessor list published by Similarweb. We monitor 4 of its documents, which we last checked on 2026-11-11.

Similarweb (similarweb.com): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/similarweb
- Documents last verified: 2026-11-11
- Transparency rating: 27/100 (how much it publishes, not how secure it is): Subprocessor list 0/30 (not found); Processing locations 0/8 (no list); Purposes 0/7 (no list); Data processing addendum 0/12 (not found); Trust center 8/8; Privacy policy 6/6; security.txt 0/6 (not found); Security page 5/5; Status page 0/5 (not found); Vulnerability disclosure 0/5 (not found); Pages still reachable 8/8
- Supply chain: relies on 0 tracked vendors directly, 0 within two hops, 0 within three; 3 tracked vendors rely on it directly, 29 within two hops, 46 within three
- Cite as: Similarweb, Third Party Index, https://thirdpartyindex.com/vendors/similarweb (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Trust center | https://trustcenter.similarweb.com/ | 2026-11-11 | 2026-10-29 |
| Privacy policy | https://www.similarweb.com/corp/legal/privacy-policy/ | 2026-11-11 | 2026-10-08 |
| Terms | https://www.similarweb.com/corp/legal/terms/ | 2026-11-11 | 2026-10-08 |
| Security page | https://www.similarweb.com/corp/privacy-security/ | 2026-11-11 | 2026-10-08 |

## Subprocessors (0)

No subprocessor list has been found or read for this vendor.

## Compliance

As its trust center lists them.

- Audited: SOC 2 Type II, SOC 3, ISO/IEC 27001 ([evidence](https://thirdpartyindex.com/evidence/2732))
- Claimed: CCPA/CPRA ([evidence](https://thirdpartyindex.com/evidence/2732))

## Security program

What SIMILARWEB LTD.'s Form 20-F for fiscal 2025, filed Mar 2, 2026 (Item 16K) says, in its words (https://www.sec.gov/Archives/edgar/data/1842731/000184273126000018/0001842731-26-000018-index.htm).

- Led by: Chief Information Security Officer
- Leader's experience: 20+ years
- Board oversight: Audit Committee
- Frameworks named: NIST CSF, ISO 27001, SOC 2
- Practices named: Incident response plan, Tabletop exercises, Penetration testing, Bug bounty, Threat intelligence, Security training, Phishing simulations
- Engages outside assessors or consultants
- Reviews its suppliers' security
- Says no cybersecurity incident has materially affected it

## Web Technologies

Similarweb's homepage made 234 requests to 33 domains, 21 services controlled by another company, and 1 domain not identified. Loaded on 2026-11-04 by a browser that accepted nothing; other visits may load more or less. What a page loads is not a list of who receives customer data.

21 third parties by category: Analytics 10 (Knock Connection Inc., TikTok, Limy AI, LinkedIn, Meta, Baidu, Cloudflare, TikTok; reviewed: Mixpanel; usually detected as Analytics: G2.com); Advertising 3 (Google Cloud, Microsoft, OpenAI); Live chat 1 (Qualified.com, Inc.); A/B Testing 1 (GrowthBook); Cookie compliance 1 (Cookiebot); CDN 1 (jsDelivr); Accessibility 1 (Userway); Appointment scheduling 1 (Chili Piper); Issue trackers 1 (usually detected as Issue trackers: Sentry); Security 1 (Amazon Web Services). Each company that appears controlled by another organization is counted once, under the main category of the technologies detected from it on this homepage or, when none was, the category recorded from the company's own page (marked reviewed) or else the one it is usually detected as on other published homepages (marked as such); unclassified: none of these.

### Third parties (21)

- Google Cloud: 53 requests to google.com, doubleclick.net, googletagmanager.com, gstatic.com, fonts.googleapis.com; DoubleClick Floodlight, Google Analytics, Google Sign-in, Google Tag Manager
- Qualified.com, Inc.: 26 requests to qualified.com; Qualified
- Userway: 13 requests to userway.org; UserWay
- Microsoft: 11 requests to clarity.ms, bing.com; Microsoft Advertising
- Amazon Web Services: 8 requests to awswaf.com, s3.us-east-1.amazonaws.com; AWS WAF Bot Control
- Knock Connection Inc.: 8 requests to knock-ai.com; Knock AI
- TikTok: 7 requests to tiktok.com; TikTok Pixel
- Mixpanel: 5 requests to mixpanel.com
- Cookiebot: 4 requests to cookiebot.com; Cookiebot 1
- OpenAI: 4 requests to openai.com; ChatGPT Ads Measurement Pixel
- Limy AI: 3 requests to getlimy.ai; Limy
- LinkedIn: 3 requests to linkedin.com, licdn.com; Linkedin Insight Tag
- Meta: 3 requests to facebook.net, facebook.com; Facebook Pixel 2.9.435
- G2.com: 2 requests to g2.com
- GrowthBook: 2 requests to growthbook.io; GrowthBook
- Baidu: 1 request to baidu.com; Baidu Analytics (百度统计)
- Chili Piper: 1 request to chilipiper.com; Chili Piper
- Cloudflare: 1 request to cloudflareinsights.com; Cloudflare Browser Insights
- Sentry: 1 request to sentry.io
- TikTok: 1 request to tiktokw.us; TikTok Pixel
- jsDelivr: 1 request to jsdelivr.net; FingerprintJS 2.1.4, jsDelivr

### Unknown (1)

Domains not identified yet: d2c7xlmseob604.cloudfront.net

### First party (1)

- Similarweb: 72 requests to similarcdn.com, similarweb.com, similarweb.io; Amazon CloudFront, Amazon Web Services, Cybot, Google Font API, HSTS, Kestrel, Loadable-Components, Matomo Analytics, Microsoft ASP.NET, Microsoft Clarity, Open Graph, Priority Hints, React 17.0.2, Sentry, Swiper, core-js 3.32.2

16 tracked companies loaded by the homepage are not in Similarweb's subprocessor list. A website can use a service without it processing customer data.

## Subprocessor of (3)

Tracked vendors whose own subprocessor lists name it, and what they say they use it for.

- [ClickUp™](https://thirdpartyindex.com/vendors/clickuptm.md): Business Intelligence (BI) Analytics
- [HUMAN Security](https://thirdpartyindex.com/vendors/human-security.md): Logging and Monitoring
- [WebFX](https://thirdpartyindex.com/vendors/webfx.md): Competitor Tracking; Used to provide data on client competitors.

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api