# SonarSource

SonarSource (sonarsource.com): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/sonarsource
- Documents last verified: 2026-09-30
- Transparency rating: 94/100 (how much it publishes, not how secure it is)
- Cite as: SonarSource, Third Party Index, https://thirdpartyindex.com/vendors/sonarsource (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Trust center | https://www.sonarsource.com/trust-center/ | 2026-09-30 | 2026-09-30 |
| Subprocessor list | https://www.sonarsource.com/legal/sub-processors/ | 2026-09-30 | 2026-09-30 |
| Data processing addendum | https://www.sonarsource.com/legal/data-processing-addendum/ | 2026-09-30 | 2026-09-30 |
| Privacy policy | https://www.sonarsource.com/company/privacy/ | 2026-09-30 | 2026-09-30 |
| Terms | https://www.sonarsource.com/legal/website-terms-of-use/ | 2026-09-30 | 2026-09-30 |
| Security page | https://www.sonarsource.com/solutions/security/ | 2026-09-30 | 2026-09-30 |
| Status page | https://status.sonarqube.com/ | 2026-09-30 | 2026-09-30 |
| Security advisories | https://community.sonarsource.com/t/responsible-vulnerability-disclosure/9317 | 2026-09-30 | 2026-09-30 |

## Subprocessors (2)

As its own list states them.

| Subprocessor | Purpose | Location | Listed since |
|---|---|---|---|
| [Amazon Web Services](https://thirdpartyindex.com/vendors/amazon-web-services.md) | Hosting and Cloud Infrastructure | Australia; Germany; Ireland; Japan; Singapore; USA | 2026-09-30 |
| [Okta, Inc.](https://thirdpartyindex.com/vendors/okta.md) | Customer Identity and Access Management | Australia; Ireland; USA | 2026-09-30 |

Read from ([evidence](https://thirdpartyindex.com/evidence/25489)). CSV: https://thirdpartyindex.com/vendors/sonarsource/subprocessors.csv

### Its own affiliates (6)

- SonarSource Gmbh (Germany; Singapore)
- SonarSource France Sárl (France)
- SonarSource Ireland (Ireland)
- SonarSource Japan KK (Japan)
- SonarSource UK LTD (United Kingdom)
- SonarSource US, Inc. (USA)

## Listed as a subprocessor by (1)

Tracked vendors whose own subprocessor lists name it, and what they say they use it for.

- [Talent Plus](https://thirdpartyindex.com/vendors/talent-plus.md)

## Service status

Incidents it reported on its own status page.

- Last 29 days: 5 reported incidents (2 major or critical, 2 minor, 1 with no impact stated)
- Typical time to resolve: 46 min
- 2026-09-24: Investigating missing pull request results (major)
- 2026-09-17: Increased errors affecting analysis and CI (major)
- 2026-09-08: SQC EU: Automatic Analysis Degraded for Java Projects (minor)
- 2026-09-02: Regulatory Reports Download Issue — Resolved (no impact stated)
- 2026-09-02: Automatic analyses are being delayed (minor)

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api