Third Party Index

Sitecore

sitecore.net

Transparency

Strong

Breakdown
Subprocessor list30 / 30
Processing locations8 / 8
Purposes7 / 7
Data processing addendum12 / 12
Trust center8 / 8
Privacy policy6 / 6
security.txtnot found0 / 6
Security page5 / 5
Status pagenot found0 / 5
Vulnerability disclosurenot found0 / 5
Pages still reachable8 / 8
Total84 / 100

Only documents we can retrieve count: a page behind a login or a broken link scores nothing.

Badge

Sitecore transparency rating

For Sitecore's own site; it updates with the rating.

<a href="https://thirdpartyindex.com/vendors/sitecore"><img src="https://thirdpartyindex.com/badge/sitecore.svg" alt="Sitecore transparency rating on Third Party Index" height="20"></a>
[![Sitecore transparency rating on Third Party Index](https://thirdpartyindex.com/badge/sitecore.svg)](https://thirdpartyindex.com/vendors/sitecore)

Documents

DocumentVerifiedChangedEvidence
Trust center vanta snapshot
Subprocessor list snapshot
Data processing addendum snapshot
Privacy policy snapshot
Terms snapshot
Security page snapshot

Subprocessors

22 third parties. CSV · Atom

NamePurposeLocationListed since
Americaneagle.com Operational support servicesChicago, Illinois, USA
Auth0 Authentication ToolSeattle, Washington
AWS Cloud Service ProviderSeattle, Washington
Cloudflare Web Performance and Security Services; Web performance and security servicesSan Francisco, California
Confluent Real-time Data ManagementMountain View, California
Confluent Kafka Cloud Service ProviderMountain View, California
Constant Contact Digital and Email Marketing PlatformWaltham, Massachusetts
Datadog Monitoring, and log management servicesNew York City, New York, USA
Elastic Observability / security monitoring; Observability and Security ServicesSan Francisco CA USA; San Francisco, California
HTMLtoImage Thumbnail RenditionLeeds, England
Imgix Image ManagementSan Francisco, California
Liveblocks User Engagement and CollaborationWilmington, Delaware
Message Systems (Sparkpost) Email Delivery ServicesColumbia, Maryland
Microsoft (Azure Open AI / Azure AI Foundry) Cloud Service Provider; Generative AI Services; Microsoft Azure Cloud Service Provider; Microsoft Azure ServicesRedmond, Washington
MongoDB Atlas Cloud Service Provider; Database servicesNew York NY US; New York, New York
Redis Caching and session managementMountain View, California
SearchStax Search ServicesManhattan Beach, California
SendGrid Email Delivery ServicesDenver, Colorado
Snowflake Data Warehouse; Data warehouse servicesBozeman MT USA; Bozeman, Montana
Uploadcare File Upload ManagementWilmington, Delaware
Vercel Cloud platform; Frontend Cloud PlatformSan Francisco, California
Workato Integration and workflow automationSan Francisco, California

Security record

What public security catalogs list for Sitecore, in their words.

Known exploited vulnerabilities

4 vulnerabilities in Sitecore's software that CISA lists as exploited in the wild.

CVEProductVulnerabilityListed
CVE-2025-53690Multiple ProductsSitecore Multiple Products Deserialization of Untrusted Data Vulnerability evidence
CVE-2019-9874CMS and Experience Platform (XP)Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability evidence
CVE-2019-9875CMS and Experience Platform (XP)Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability evidence
CVE-2021-42237XPSitecore XP Remote Command Execution Vulnerability used by ransomware evidence

Source: CISA Known Exploited Vulnerabilities catalog.

Changes

None since tracking began.