# Sovrn Sovrn declares [11 subprocessors](https://thirdpartyindex.com/vendors/sovrn#subprocessors), plus 2 of its own affiliates, in [its subprocessor list](https://www.sovrn.com/legal/subprocessors/), which we last checked on 2026-11-11 ([evidence](https://thirdpartyindex.com/evidence/3531)). They include [Amazon Web Services](https://thirdpartyindex.com/vendors/amazon-web-services), [Google Cloud](https://thirdpartyindex.com/vendors/google-cloud) and [Datadog](https://thirdpartyindex.com/vendors/datadog). No published changes since we first read it on 2026-09-22. [3 tracked vendors](https://thirdpartyindex.com/vendors/sovrn#used-by) name Sovrn as a subprocessor, including [Delivr.ai](https://thirdpartyindex.com/vendors/delivr-ai), [Eyeota](https://thirdpartyindex.com/vendors/eyeota) and [Next Millennium Media](https://thirdpartyindex.com/vendors/next-millennium-media). Sovrn (sovrn.com): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index. - Page: https://thirdpartyindex.com/vendors/sovrn - Documents last verified: 2026-11-11 - Transparency rating: 95/100 (how much it publishes, not how secure it is): Subprocessor list 30/30; Processing locations 8/8; Purposes 7/7; Data processing addendum 12/12; Trust center 8/8; Privacy policy 6/6; security.txt 6/6; Security page 5/5; Status page 5/5; Vulnerability disclosure 0/5 (not found); Pages still reachable 8/8 - Supply chain: relies on 10 tracked vendors directly, 71 within two hops, 277 within three; 3 tracked vendors rely on it directly, 3 within two hops, 3 within three - Cite as: Sovrn, Third Party Index, https://thirdpartyindex.com/vendors/sovrn (data CC BY 4.0) ## Documents | Document | URL | Last verified | Last changed | |---|---|---|---| | Trust center | https://www.sovrn.com/trust-center/ | 2026-11-11 | 2026-09-22 | | Subprocessor list | https://www.sovrn.com/legal/subprocessors/ | 2026-11-11 | 2026-09-22 | | Data processing addendum | https://www.sovrn.com/legal/controller-controller/ | 2026-11-11 | 2026-09-22 | | Privacy policy | https://www.sovrn.com/privacy-policy/privacy-policy/ | 2026-11-11 | 2026-09-22 | | Terms | https://www.sovrn.com/legal/referral-program-terms-conditions/ | 2026-11-11 | 2026-09-22 | | Security page | https://www.sovrn.com/about-sovrn/security/ | 2026-11-11 | 2026-09-22 | | security.txt | https://www.sovrn.com/.well-known/security.txt | 2026-11-11 | 2026-09-22 | | Status page | https://status.sovrn.com/ | 2026-11-11 | 2026-11-06 | ## Subprocessors (11) As its own list states them. | Subprocessor | Purpose | Location | Listed since | |---|---|---|---| | [Amazon Web Services, Inc.](https://thirdpartyindex.com/vendors/amazon-web-services.md) | Data center (cloud hosting and storage) | AWS EAST – OH; AWS EAST – VA; AWS Europe (Ireland); AWS WEST – WA (Seattle) | 2026-09-22 | | Aqfer, Inc. | Data infrastructure | United States | 2026-09-22 | | [Atlassian, Inc. (JIRA)](https://thirdpartyindex.com/vendors/atlassian.md) | DSR ticketing system | United States | 2026-09-22 | | [Databricks](https://thirdpartyindex.com/vendors/databricks.md) | Data Intelligence Platform | United States | 2026-09-22 | | [Datadog, Inc.](https://thirdpartyindex.com/vendors/datadog.md) | Application performance monitoring | United States | 2026-09-22 | | [Google, LLC (Google Cloud Platform)](https://thirdpartyindex.com/vendors/google-cloud.md) | Data center; Internal business operations | United States; us-central1-f (Iowa); us-east4 (Northern Virginia); us-west1-a (Dalles, OR) | 2026-09-22 | | [Grafana Labs](https://thirdpartyindex.com/vendors/grafana.md) | Product metrics monitoring | United States | 2026-09-22 | | [HUMAN, Inc. (Human Security)](https://thirdpartyindex.com/vendors/human-security.md) | IVT detection & Fraud Prevention | United States | 2026-09-22 | | [Looker Data Sciences, Inc. (Google, LLC)](https://thirdpartyindex.com/vendors/looker.md) | Business Intelligence tool | United States | 2026-09-22 | | [Redpanda Data, Inc.](https://thirdpartyindex.com/vendors/redpanda.md) | Cloud hosting | United States | 2026-09-22 | | [Tipalti, Inc.](https://thirdpartyindex.com/vendors/tipalti.md) | Accounts Payable Automation, Global Payments, and Procurement | Germany; Israel; United Kingdom; United States | 2026-09-22 | Read from ([evidence](https://thirdpartyindex.com/evidence/3531)). CSV: https://thirdpartyindex.com/vendors/sovrn/subprocessors.csv ### Its own affiliates (2) - Sovrn (Switzerland) SA (Switzerland) - Sovrn UK Holdings Limited (United Kingdom) ## Compliance As its trust center lists them. - IAB Europe TCF Global Vendor List: registered as Sovrn, Inc. (vendor 13 · consent for 7 purposes) ([evidence](https://thirdpartyindex.com/evidence/31004)) - Device storage: Cookies kept up to 12 months - Purposes, with consent: Store and/or access information on a device; Use limited data to select advertising; Create profiles for personalised advertising; Create profiles to personalise content; Measure advertising performance; Understand audiences through statistics or combinations of data from different sources; Develop and improve services ## Web Technologies Sovrn's homepage made 107 requests to 13 domains, and 8 services controlled by another company. Loaded on 2026-11-05 by a browser that accepted nothing; other visits may load more or less. What a page loads is not a list of who receives customer data. 8 third parties by category: CDN 3 (Cloudflare, jQuery; usually detected as CDN: jsDelivr); Advertising 1 (OneTag Limited); Analytics 1 (Google Cloud); Cookie compliance 1 (usually detected as Cookie compliance: CookieYes); Font scripts 1 (usually detected as Font scripts: Font Awesome); Geolocation 1 (Kloudend, Inc.). Each company that appears controlled by another organization is counted once, under the main category of the technologies detected from it on this homepage or, when none was, the category recorded from the company's own page (marked reviewed) or else the one it is usually detected as on other published homepages (marked as such); unclassified: none of these. ### Third parties (8) - Google Cloud: 7 requests to googletagmanager.com, doubleclick.net, fonts.googleapis.com, google.com, gstatic.com; Google Analytics, Google Tag Manager (its subprocessor list names it too) - Cloudflare: 3 requests to cloudflare.com; Slick 1.9.0, cdnjs - Font Awesome: 3 requests to fontawesome.com - OneTag Limited: 3 requests to s-onetag.com; OneTag - CookieYes: 1 request to cookieyes.com - Kloudend, Inc.: 1 request to ipapi.co; ipapi.co - jQuery: 1 request to jquery.com; jQuery 3.3.1, jQuery CDN - jsDelivr: 1 request to jsdelivr.net ### First party (1) - Sovrn: 87 requests to sovrn.com; Bootstrap 4.2.1, Cloudflare, Google Tag Manager for WordPress 2.0.6, HSTS, HTTP/3, MonsterInsights 11.3.0, MySQL, OWL Carousel, Open Graph, PHP, Prebid, Priority Hints, Sassy Social Share 3.3.79, Skrollr 0.5.8, Twitter Emoji (Twemoji), WP Engine, WordPress, WordPress Block Editor, Yoast SEO 28.8, core-js 3.48.0, jsDelivr 3 tracked companies loaded by the homepage are not in Sovrn's subprocessor list. A website can use a service without it processing customer data. ## Subprocessor of (3) Tracked vendors whose own subprocessor lists name it, and what they say they use it for. - [Delivr.ai](https://thirdpartyindex.com/vendors/delivr-ai.md): Cookie synchronization within the Delivr Pixel; Identity partner for cookie synchronization within the Delivr Pixel, exchanging pseudonymous identifiers, IP add… - [Eyeota](https://thirdpartyindex.com/vendors/eyeota.md): Server-to-server data sharing - [Next Millennium Media](https://thirdpartyindex.com/vendors/next-millennium-media.md) ## Service status Incidents it reported on its own status page. - Last 90 days: 1 reported incidents (0 major or critical, 0 minor, 1 with no impact stated) - Typical time to resolve: 31 min - Status page last read: 2026-11-12 - 2026-11-05: Sovrn Platform Currently Inaccessible (no impact stated) - 2026-06-25: Data Delay for the Sovrn Ad Exchange (no impact stated) - 2026-04-28: Errors with Sovrn Platform Advertising Reporting Emails (no impact stated) - 2026-03-17: Report links in emails not working (no impact stated) - 2026-03-12: Management Actions Temporarily Unavailable (no impact stated) - 2026-02-05: Data Delay for the Sovrn Ad Exchange (no impact stated) - 2026-02-01: Data Delay for Sovrn Commerce (no impact stated) - 2026-01-14: Sign In/Sign Up Errors for the Sovrn Platform (no impact stated) ## Incidents reported by Sovrn's subprocessors Incidents reported in the last 30 days on their own status pages by 3 vendors Sovrn lists as subprocessors. A subprocessor list names a company, not the service an incident touched. - 2026-11-11: [Grafana](https://thirdpartyindex.com/vendors/grafana#status), which Sovrn lists as a subprocessor, reported Degraded performance for Grafana Cloud Metrics in prod-us-central-7 (major) - 2026-11-11: [Grafana](https://thirdpartyindex.com/vendors/grafana#status), which Sovrn lists as a subprocessor, reported Elevated query errors for Grafana Cloud Metrics in prod-us-east-3 (minor) - 2026-11-10: [Grafana](https://thirdpartyindex.com/vendors/grafana#status), which Sovrn lists as a subprocessor, reported Cloud Logs writes - Elevated latency and error rates in prod-eu-central-0 (no impact stated) - 2026-11-10: [Grafana](https://thirdpartyindex.com/vendors/grafana#status), which Sovrn lists as a subprocessor, reported Mimir query unexpected response with status code 500 (minor) - 2026-11-06: [Grafana](https://thirdpartyindex.com/vendors/grafana#status), which Sovrn lists as a subprocessor, reported Synthetic Monitoring — Jakarta Public Probe Degradation (no impact stated) - 2026-11-05: [Redpanda](https://thirdpartyindex.com/vendors/redpanda#status), which Sovrn lists as a subprocessor, reported Redpanda Engineering investigating SSHHole vulnerability. (no impact stated) - 2026-11-04: [Grafana](https://thirdpartyindex.com/vendors/grafana#status), which Sovrn lists as a subprocessor, reported GitHub returning 403 for all Git Sync repositories (minor) - 2026-11-03: [Grafana](https://thirdpartyindex.com/vendors/grafana#status), which Sovrn lists as a subprocessor, reported October usage report visualization issue (minor) - 2026-11-03: [Grafana](https://thirdpartyindex.com/vendors/grafana#status), which Sovrn lists as a subprocessor, reported Increased query latency for Logs in GCP US Central (prod-us-central-0) (minor) - 2026-11-03: [Grafana](https://thirdpartyindex.com/vendors/grafana#status), which Sovrn lists as a subprocessor, reported Elevated Request Errors for Grafana Across Multiple Regions (minor) - 2026-11-02: [Grafana](https://thirdpartyindex.com/vendors/grafana#status), which Sovrn lists as a subprocessor, reported Grafana Cloud: k6 timeouts (no impact stated) - 2026-11-02: [Grafana](https://thirdpartyindex.com/vendors/grafana#status), which Sovrn lists as a subprocessor, reported Metrics Alert Rule Evaluation Failures in AWS Australia (prod-au-southeast-1) (minor) - 2026-11-02: [Grafana](https://thirdpartyindex.com/vendors/grafana#status), which Sovrn lists as a subprocessor, reported Missing Metrics for Some Synthetic Monitoring Checks using the Montreal, North Virginia, and North California public probes (no impact stated) - 2026-11-02: [Grafana](https://thirdpartyindex.com/vendors/grafana#status), which Sovrn lists as a subprocessor, reported IRM Unable to Voice Call Brazil Numbers (major) - 2026-10-29: [Redpanda](https://thirdpartyindex.com/vendors/redpanda#status), which Sovrn lists as a subprocessor, reported CVE-2026-98432 Investigation (no impact stated) - 2026-10-28: [Datadog](https://thirdpartyindex.com/vendors/datadog#status), which Sovrn lists as a subprocessor, reported Metrics query are disrupted (major) - 2026-10-27: [Grafana](https://thirdpartyindex.com/vendors/grafana#status), which Sovrn lists as a subprocessor, reported Frontend Observability Outage in prod-eu-west-2 (critical) - 2026-10-27: [Grafana](https://thirdpartyindex.com/vendors/grafana#status), which Sovrn lists as a subprocessor, reported Degraded Cloud Integrations (minor) - 2026-10-26: [Datadog](https://thirdpartyindex.com/vendors/datadog#status), which Sovrn lists as a subprocessor, reported Elevated Error Rates for Workflow Automation, App Builder, Bits Code, Bits Agent Builder (major) - 2026-10-26: [Grafana](https://thirdpartyindex.com/vendors/grafana#status), which Sovrn lists as a subprocessor, reported ingestion errors in mimir-prod-66 (no impact stated) - 2026-10-23: [Grafana](https://thirdpartyindex.com/vendors/grafana#status), which Sovrn lists as a subprocessor, reported Some Grafana Instances Experiencing Issues Coming Online after Restart (minor) - 2026-10-23: [Grafana](https://thirdpartyindex.com/vendors/grafana#status), which Sovrn lists as a subprocessor, reported Elevated Trace Ingestion Latency and Errors for Grafana Cloud Traces in AWS Germany (major) - 2026-10-22: [Redpanda](https://thirdpartyindex.com/vendors/redpanda#status), which Sovrn lists as a subprocessor, reported CVE-2026-111943 (emudhra) Response (no impact stated) - 2026-10-21: [Grafana](https://thirdpartyindex.com/vendors/grafana#status), which Sovrn lists as a subprocessor, reported Some GCK6 App Project Pages are Failing to Load (major) - 2026-10-21: [Grafana](https://thirdpartyindex.com/vendors/grafana#status), which Sovrn lists as a subprocessor, reported Increased timeout errors in alert rule evaluations (AWS Germany, prod-eu-west-2) (minor) - 2026-10-21: [Grafana](https://thirdpartyindex.com/vendors/grafana#status), which Sovrn lists as a subprocessor, reported Possible incorrect evaluation of Synthetic Monitoring alert rules in cluster prod-us-east-3 (no impact stated) - 2026-10-20: [Grafana](https://thirdpartyindex.com/vendors/grafana#status), which Sovrn lists as a subprocessor, reported DB issues in prod-sa-east-1 (no impact stated) - 2026-10-20: [Grafana](https://thirdpartyindex.com/vendors/grafana#status), which Sovrn lists as a subprocessor, reported Some GCK6 App Project Pages are Failing to Load (major) - 2026-10-20: [Grafana](https://thirdpartyindex.com/vendors/grafana#status), which Sovrn lists as a subprocessor, reported IRM outage in the region prod-gb-south-0 and prod-eu-west-0 (no impact stated) - 2026-10-20: [Grafana](https://thirdpartyindex.com/vendors/grafana#status), which Sovrn lists as a subprocessor, reported Grafana Cloud unavailibity in the prod-gb-south-0 region (minor) - 2026-10-19: [Grafana](https://thirdpartyindex.com/vendors/grafana#status), which Sovrn lists as a subprocessor, reported Metrics: Evelvated Read and Ruler Errors. (major) - 2026-10-16: [Grafana](https://thirdpartyindex.com/vendors/grafana#status), which Sovrn lists as a subprocessor, reported Metric reads and rule evaluations are degraded in mimir-prod-66 (minor) - 2026-10-15: [Grafana](https://thirdpartyindex.com/vendors/grafana#status), which Sovrn lists as a subprocessor, reported Tempo Write Failures in prod-us-central-0 (major) - 2026-10-15: [Grafana](https://thirdpartyindex.com/vendors/grafana#status), which Sovrn lists as a subprocessor, reported Tempo: High Latency in prod-eu-west-2 (minor) - 2026-10-14: [Grafana](https://thirdpartyindex.com/vendors/grafana#status), which Sovrn lists as a subprocessor, reported Authentication errors in prod-us-west-0 (minor) - 2026-10-13: [Grafana](https://thirdpartyindex.com/vendors/grafana#status), which Sovrn lists as a subprocessor, reported Errors when querying Prometheus datasource (minor) - 2026-10-13: [Grafana](https://thirdpartyindex.com/vendors/grafana#status), which Sovrn lists as a subprocessor, reported Phone call notifications to numbers in Russia and Kazakhstan are blocked (minor) The subprocessor list as we read it on any date: https://thirdpartyindex.com/labs/time-machine/sovrn ## Security contact From its security.txt (https://www.sovrn.com/.well-known/security.txt) ([evidence](https://thirdpartyindex.com/evidence/3532)): - Contact: mailto:security@sovrn.com - Disclosure policy: https://www.sovrn.com/responsible-disclosure-policy/ - Languages: en - Expired 2025-10-14 --- Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api