Sonos

sonos.com

We have not found a subprocessor list published by Sonos. We monitor 6 of its documents, which we last checked on Nov 11, 2026.

Subprocessors

None extracted.

Web TechnologiesCSV · Atom

Sonos's homepage made 293 requests to 37 domains, 25 services controlled by another company, and 5 domains not identified.

Advertising (12): Google Cloud, The Trade Desk, Inc., Pinterest, Microsoft, Spotify AB, Pinterest, Snap Inc., Neustar, Inc. (TransUnion); reviewed: Tapad, Inc.; usually detected as Advertising: Snap, Xandr, Magnite, Inc.Analytics (2): TikTok, TikTokMarketing automation (2): Braze, PostieA/B Testing (1): usually detected as A/B Testing: OptimizelyCookie compliance (1): OneTrustCDN (1): UNPKGOther (4): reviewed as Customer data platform: LiveRamp; Email: LiveIntent; usually detected as Font scripts: Font Awesome; Fulfilment: ExtendUnclassified (2): no technology detected from them: Sabio Holdings Inc. (AppScience), Sabio London Limited

25 third parties by category: Advertising 12Analytics 2Marketing automation 2A/B Testing 1Cookie compliance 1CDN 1Other 4Unclassified 2

Third parties 25 · 127 requests
Google Cloud DoubleClick Floodlight Google Tag Manager 18% of the page's requests 54
OneTrust OneTrust 3% of the page's requests 10
Snap snapchat.com 3% of the page's requests 8
The Trade Desk, Inc. theTradeDesk 3% of the page's requests 8
TikTok TikTok Pixel 2% of the page's requests 6
LiveIntent LiveIntent 2% of the page's requests 5
Pinterest Pinterest Ads 2% of the page's requests 5
Microsoft Microsoft Advertising 1% of the page's requests 3
Optimizely optimizely.com 1% of the page's requests 3
Spotify AB Spotify Pixel 1% of the page's requests 3
Braze Braze 6.8 <1% of the page's requests 2
Font Awesome fontawesome.com <1% of the page's requests 2
Pinterest Pinterest Ads <1% of the page's requests 2
Snap Inc. Snap Pixel <1% of the page's requests 2
Tapad, Inc. tapad.com <1% of the page's requests 2
UNPKG Unpkg web-vitals 6.2.3 <1% of the page's requests 2
Xandr adnxs.com <1% of the page's requests 2
Extend Extend 1 <1% of the page's requests 1
LiveRamp rlcdn.com <1% of the page's requests 1
Magnite, Inc. rubiconproject.com <1% of the page's requests 1
Neustar, Inc. (TransUnion) Neustar Marketing Solutions <1% of the page's requests 1
Postie Postie <1% of the page's requests 1
Sabio Holdings Inc. (AppScience) appsci.io <1% of the page's requests 1
Sabio London Limited sabio.us <1% of the page's requests 1
TikTok TikTok Pixel <1% of the page's requests 1
Unknown 5 · 16 requests

cleera.appiperceptions.comvisitor-speed.comgetletterpress.comusbrowserspeed.com

First party 1 · 150 requests
Sonos Framer Motion Google Analytics HSTS Next.js 16.3.4 Next.js App Router Open Graph Optimizely Pinterest Conversion Tag Priority Hints React Snowplow Analytics Vercel Vercel Analytics Vercel Speed Insights 1.3.1 Webpack core-js 3.50.0 51% of the page's requests 150

9 tracked companies loaded by the homepage are not in Sonos's subprocessor list. A website can use a service without it processing customer data.

ComplianceCSV · Atom

Security program

How Sonos says it manages cybersecurity risk, in its annual report to the SEC.

Led by
Head of Security · 25+ years of experience
quote Our enterprise-wide cybersecurity program is managed by a dedicated information security team, led by our Head of Cybersecurity, Risk & Trust (“Head of Cybersecurity”).Our Head of Cybersecurity has over 25 years of cybersecurity, information governance, and IT experience in the technology industry.
Board oversight
Audit Committee
quote cybersecurity program to the Audit Committee.
Outside review
Engages outside assessors or consultants
quote This approach utilizes both internal and external resources and includes regular risk assessments (for example, penetration testing and annual self-assessments), ongoing employee training, proactive monitoring of our IT systems, encryption of certain types of information, and certain controls governing access to our facilities and systems.
Its own suppliers
Reviews their security
quote We have processes in place designed to identify and mitigate risks from third-party vendors, including, as appropriate, pre-contractual security assessments and review of contractual terms addressing cybersecurity and data protection.
Practices named
  • Incident response plan
  • Penetration testing
Material incidents
None so far, it says
quote To date, we are not aware of cybersecurity threats, including as a result of any previous cybersecurity incidents, that have materially affected or are reasonably likely to materially affect us, including our business strategy, results of operations or financial condition.
Read Item 1C in full

Cybersecurity risk management and strategy

We have developed and implemented an enterprise-wide cybersecurity program, which is part of our overall risk management system and is designed to provide cybersecurity risk management and governance. Our cybersecurity program prioritizes, among other things, proactive detection and mitigation of threats; protection of customer and internal confidential information; minimization of the impact of incidents; and identification, assessment, and management of material risks from cybersecurity threats.

We use a variety of strategies and techniques designed to identify cybersecurity risks and reduce the risk of unauthorized access to internal and customer confidential information and critical business systems and platforms. This approach utilizes both internal and external resources and includes regular risk assessments (for example, penetration testing and annual self-assessments), ongoing employee training, proactive monitoring of our IT systems, encryption of certain types of information, and certain controls governing access to our facilities and systems.

We maintain a detailed incident response plan to manage cybersecurity incidents when detected. The response plan includes procedures for identifying, containing, and responding to cybersecurity incidents. Our ability to respond to cybersecurity incidents is tested on a recurring basis.

We use third-party service providers to assist us from time to time to identify, assess, and manage material risks from cybersecurity threats, including professional services firms, cybersecurity software providers, and certain testing firms.

We have processes in place designed to identify and mitigate risks from third-party vendors, including, as appropriate, pre-contractual security assessments and review of contractual terms addressing cybersecurity and data protection.

To date, we are not aware of cybersecurity threats, including as a result of any previous cybersecurity incidents, that have materially affected or are reasonably likely to materially affect us, including our business strategy, results of operations or financial condition. Despite our security measures, however, there can be no assurance that we, or third parties with which we interact, will not experience a cybersecurity incident in the future that will materially affect us. For a discussion regarding risks related to cybersecurity threats, refer to Item 1A. “Risk Factors” of this Form 10-K.

Cybersecurity governance

Our Board of Directors oversees the management of risks inherent in the operation of our business, with a focus on the most significant risks that we face, including those related to cybersecurity. The Board of Directors has delegated oversight of our

cybersecurity program to the Audit Committee. In connection with that oversight responsibility, senior members of our information security team meet with the Audit Committee on a regular basis (but no less than semi-annually) and provide information and updates on our cybersecurity program and related topics. This includes existing and new cybersecurity risks, status on how management is identifying, assessing, managing and/or mitigating those risks, cybersecurity and data privacy incidents (if any), status on key information security initiatives, and developments in the cybersecurity space and evolving standards.

Our enterprise-wide cybersecurity program is managed by a dedicated information security team, led by our Head of Cybersecurity, Risk & Trust (“Head of Cybersecurity”). Our Head of Cybersecurity has over 25 years of cybersecurity, information governance, and IT experience in the technology industry.

Security program from Sonos Inc's Form 10-K for fiscal 2025, filed Nov 14, 2025, Item 1C, in its words (evidence)

Service statusCSV · Atom

Aug 15: 1 incident (1 no impact stated)Aug 16: no incident reportedAug 17: no incident reportedAug 18: no incident reportedAug 19: no incident reportedAug 20: no incident reportedAug 21: 1 incident (1 critical)Aug 22: no incident reportedAug 23: no incident reportedAug 24: no incident reportedAug 25: no incident reportedAug 26: no incident reportedAug 27: no incident reportedAug 28: no incident reportedAug 29: no incident reportedAug 30: no incident reportedAug 31: no incident reportedSep 1: no incident reportedSep 2: no incident reportedSep 3: no incident reportedSep 4: no incident reportedSep 5: no incident reportedSep 6: no incident reportedSep 7: no incident reportedSep 8: no incident reportedSep 9: no incident reportedSep 10: no incident reportedSep 11: no incident reportedSep 12: no incident reportedSep 13: no incident reportedSep 14: no incident reportedSep 15: 1 incident (1 major)Sep 16: no incident reportedSep 17: no incident reportedSep 18: no incident reportedSep 19: no incident reportedSep 20: no incident reportedSep 21: no incident reportedSep 22: no incident reportedSep 23: no incident reportedSep 24: no incident reportedSep 25: 1 incident (1 major)Sep 26: no incident reportedSep 27: 2 incidents (2 major)Sep 28: no incident reportedSep 29: no incident reportedSep 30: no incident reportedOct 1: no incident reportedOct 2: no incident reportedOct 3: no incident reportedOct 4: no incident reportedOct 5: no incident reportedOct 6: 1 incident (1 major)Oct 7: no incident reportedOct 8: no incident reportedOct 9: no incident reportedOct 10: no incident reportedOct 11: no incident reportedOct 12: no incident reportedOct 13: no incident reportedOct 14: no incident reportedOct 15: no incident reportedOct 16: no incident reportedOct 17: no incident reportedOct 18: no incident reportedOct 19: no incident reportedOct 20: no incident reportedOct 21: no incident reportedOct 22: no incident reportedOct 23: 1 incident (1 major)Oct 24: no incident reportedOct 25: no incident reportedOct 26: no incident reportedOct 27: no incident reportedOct 28: no incident reportedOct 29: no incident reportedOct 30: no incident reportedOct 31: no incident reportedNov 1: no incident reportedNov 2: no incident reportedNov 3: no incident reportedNov 4: no incident reportedNov 5: no incident reportedNov 6: no incident reportedNov 7: no incident reportedNov 8: no incident reportedNov 9: no incident reportedNov 10: no incident reportedNov 11: no incident reportedNov 12: no incident reported

90 days agotoday

  • 8 incidents in 90 days
  • 7 major or critical
  • 4 h 22 min typical time to resolve
  • 7 days longest major
BeganIncidentImpactLasted
Apple Music - Adding Account on Android Controller Partial Outagemajor7 days
Sonos account - Adding Account Failuremajor44 min
Apple Music - Adding Account Issuesmajorongoing
Spotify - Adding Account Issuemajor2 days
Alexa Setup Outagemajor1 h 24 min
Alexa Voice Control - Add Account - Partial failuremajor23 h 45 min
Storytel - Browse Issuescritical4 h 22 min
Pandora - Playback Issuesno impact stated1 h 5 min

Incidents per month

0 3 6 Dec 2025: 2 incidents (1 critical, 1 no impact stated) · typical time to resolve 21 h 3 min Jan 2026: 4 incidents (4 critical) · typical time to resolve 2 h 2 min Feb 2026: 0 incidents Mar 2026: 1 incident (1 critical) · typical time to resolve 20 h 56 min Apr 2026: 4 incidents (2 critical, 2 major) · typical time to resolve 7 h 55 min May 2026: 5 incidents (3 critical, 1 major, 1 minor) · typical time to resolve 4 h Jun 2026: 0 incidents Jul 2026: 3 incidents (2 critical, 1 major) · typical time to resolve 4 h 59 min Aug 2026: 5 incidents (2 critical, 1 major, 1 minor, 1 no impact stated) · typical time to resolve 4 h 22 min Sep 2026: 4 incidents (4 major) · typical time to resolve 23 h 45 min Oct 2026: 2 incidents (2 major) · typical time to resolve 7 days Nov 2026: 0 incidents Dec 2025Jan 2026Feb Mar Apr May Jun Jul Aug Sep Oct Nov

critical major minor no impact stated

Components affected

ComponentIncidents
Alexa Voice Control2
Apple Music2
Pandora1
Sonos Account1
Spotify1
Storytel1

As Sonos's status page reports its own incidents (scheduled maintenance left out), read every few hours since (evidence)

ChangesCSV · Atom

None since tracking began.

Rating badge for Sonos's site

Sonos transparency rating

It updates with the rating.

<a href="https://thirdpartyindex.com/vendors/sonos"><img src="https://thirdpartyindex.com/badge/sonos.svg" alt="Sonos transparency rating on Third Party Index" height="20"></a>
[![Sonos transparency rating on Third Party Index](https://thirdpartyindex.com/badge/sonos.svg)](https://thirdpartyindex.com/vendors/sonos)