# Splunk

[42 tracked vendors](https://thirdpartyindex.com/vendors/splunk#used-by) name Splunk as a subprocessor, including [Okta](https://thirdpartyindex.com/vendors/okta), [Notion](https://thirdpartyindex.com/vendors/notion-com) and [PayPal US](https://thirdpartyindex.com/vendors/paypal-us). We have not found a subprocessor list published by Splunk. We monitor 6 of its documents, which we last checked on 2026-11-11.

Splunk (splunk.com): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/splunk
- Documents last verified: 2026-11-11
- Transparency rating: 38/100 (how much it publishes, not how secure it is): Subprocessor list 0/30 (not found); Processing locations 0/8 (no list); Purposes 0/7 (no list); Data processing addendum 0/12 (not found); Trust center 8/8; Privacy policy 6/6; security.txt 6/6; Security page 5/5; Status page 5/5; Vulnerability disclosure 0/5 (not found); Pages still reachable 8/8
- Part of: [Cisco](https://thirdpartyindex.com/vendors/cisco)
- Supply chain: relies on 0 tracked vendors directly, 0 within two hops, 0 within three; 42 tracked vendors rely on it directly, 697 within two hops, 2341 within three
- Cite as: Splunk, Third Party Index, https://thirdpartyindex.com/vendors/splunk (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Trust center | https://community.splunk.com/t5/SplunkTrust/ct-p/splunk-trust | 2026-11-11 | 2026-09-24 |
| Privacy policy | https://www.cisco.com/site/us/en/about/legal/privacy.html | 2026-11-11 | 2026-10-23 |
| Terms | https://www.splunk.com/en\_us/legal/terms/terms-of-use.html | 2026-11-11 | 2026-10-23 |
| Security page | https://www.splunk.com/en\_us/products/cyber-security.html | 2026-11-11 | 2026-10-23 |
| security.txt | https://www.splunk.com/.well-known/security.txt | 2026-11-11 | 2026-09-21 |
| Status page | https://www.splunk.com/en\_us/products/system-status.html | 2026-11-11 | 2026-10-23 |

## Subprocessors (0)

No subprocessor list has been found or read for this vendor.

## Compliance

As its trust center lists them.

- FedRAMP Marketplace: High · 8 agency authorizations · since Sep 13, 2024
- FedRAMP Marketplace: Moderate · 20 agency authorizations · since Oct 11, 2019

## Web Technologies

Splunk's homepage made 203 requests to 15 domains, and 6 services controlled by another company. Loaded on 2026-11-04 by a browser that accepted nothing; other visits may load more or less. What a page loads is not a list of who receives customer data.

6 third parties by category: Analytics 1 (Google Cloud); Cookie compliance 1 (OneTrust); CDN 1 (UNPKG); Geolocation 1 (ipify); RUM 1 (Akamai); Video players 1 (usually detected as Video players: Vidyard). Each company that appears controlled by another organization is counted once, under the main category of the technologies detected from it on this homepage or, when none was, the category recorded from the company's own page (marked reviewed) or else the one it is usually detected as on other published homepages (marked as such); unclassified: none of these.

### Third parties (6)

- Google Cloud: 17 requests to googletagmanager.com, googlesyndication.com, google-analytics.com; Google Analytics, Google Tag Manager
- Akamai: 5 requests to go-mpulse.net, akstat.io, trial-eum-clientnsv4-s.akamaihd.net, trial-eum-clienttons-s.akamaihd.net; Akamai mPulse
- OneTrust: 3 requests to cookielaw.org, onetrust.com; OneTrust
- UNPKG: 3 requests to unpkg.com; Unpkg
- Vidyard: 1 request to vidyard.com
- ipify: 1 request to ipify.org; ipify

### Affiliates (1)

- Cisco: 4 requests to cisco.com

### First party (1)

- Splunk: 169 requests to splunk.com, signalfx.com; Adobe Experience Manager, Akamai, Boomerang, Bootstrap, GSAP 3.13.0, HSTS, Java, Lozad.js, Open Graph, core-js 3.47.0, jQuery 3.7.1

3 tracked companies loaded by the homepage are not in Splunk's subprocessor list. A website can use a service without it processing customer data.

## Subprocessor of (42)

Tracked vendors whose own subprocessor lists name it, and what they say they use it for.

- [Adobe](https://thirdpartyindex.com/vendors/adobe.md): Splunk assists with security event logging and monitoring via the collection of system data. Logs are generated through Adobe’s software applications and are …
- [Airwallex US](https://thirdpartyindex.com/vendors/airwallex-us.md): Platform Analytics/Monitoring; Platform analytics, outage detection, and security monitoring
- [APIANT](https://thirdpartyindex.com/vendors/apiant.md): Platform performance monitoring and logging
- [Apica](https://thirdpartyindex.com/vendors/apica.md): Integration for alerting
- [Arkose Labs](https://thirdpartyindex.com/vendors/arkose-labs.md): Cloud Platform Analytics and Log Management Tools
- [Avalara](https://thirdpartyindex.com/vendors/avalara.md): Real-time cloud monitoring service
- [Blackbaud](https://thirdpartyindex.com/vendors/blackbaud.md)
- [Blackboard](https://thirdpartyindex.com/vendors/blackboard.md): Application/server logs
- [Bloomreach](https://thirdpartyindex.com/vendors/bloomreach.md)
- [C3 AI](https://thirdpartyindex.com/vendors/c3-ai.md): Logging Pipeline for Security Log, Storage, and Search
- [CirrusMD](https://thirdpartyindex.com/vendors/cirrusmd.md): SIEM and Application Logging.
- [Claroty](https://thirdpartyindex.com/vendors/claroty.md)
- [Coalfire](https://thirdpartyindex.com/vendors/coalfire.md): Security monitoring /SIEM
- [Culture Amp](https://thirdpartyindex.com/vendors/culture-amp.md): All PII fields collected by Culture Amp may be captured and processed by Splunk for the purposes of security monitoring, threat detection, investigation, incide…
- [Digicert](https://thirdpartyindex.com/vendors/digicert.md): Support security logging, monitoring, and compliance
- [EAB](https://thirdpartyindex.com/vendors/eab.md): Audit logging
- [FICO](https://thirdpartyindex.com/vendors/fico.md): System logs and analysis for clients globally
- [Frontify](https://thirdpartyindex.com/vendors/frontify.md): Security Information and Event Management tool (SIEM)
- [Genetec](https://thirdpartyindex.com/vendors/genetec.md): Splunk is used for monitoring and to gather infrastructure status data. It indexes and correlates information. It allows us to generate alerts and reports
- [HireVue](https://thirdpartyindex.com/vendors/hirevue.md): Application performance monitoring and logs.
- [IDEXX](https://thirdpartyindex.com/vendors/idexx.md): Instrument telemetry data exploration
- [Intralinks](https://thirdpartyindex.com/vendors/intralinks.md)
- [Ivanti](https://thirdpartyindex.com/vendors/ivanti.md): Logging used for trouble shooting
- [Jasper AI](https://thirdpartyindex.com/vendors/jasper-ai.md): Logging
- [Kasten](https://thirdpartyindex.com/vendors/kasten.md): Security and observability of Veeam cloud services
- [Klaviyo](https://thirdpartyindex.com/vendors/klaviyo.md): Logging Tool
- [Lattice](https://thirdpartyindex.com/vendors/lattice.md): Monitoring and to gather infrastructure status data
- [Lucid Software](https://thirdpartyindex.com/vendors/lucid-software.md): Logging solution
- [Notion](https://thirdpartyindex.com/vendors/notion-com.md): Security and application logging
- [Okta](https://thirdpartyindex.com/vendors/okta.md): Business analytics
- [PayPal US](https://thirdpartyindex.com/vendors/paypal-us.md): Application logging and performance monitoring
- [Perceptyx](https://thirdpartyindex.com/vendors/perceptyx.md): Security monitoring, logging and analytics
- [Ping Identity](https://thirdpartyindex.com/vendors/ping-identity.md): Customer data is logged for event monitoring and troubleshooting purposes and is retained in the region of residency; Operational logs and business analytics.
- [Pluralsight](https://thirdpartyindex.com/vendors/pluralsight.md): Security Management Tool
- [Rackspace](https://thirdpartyindex.com/vendors/rackspace.md): Products & Services – Security
- [Salesloft](https://thirdpartyindex.com/vendors/salesloft.md): Analyzes telemetry data to increase product availability, performance and reliability; Service provider
- [SMART Technologies](https://thirdpartyindex.com/vendors/smart-technologies.md): Required metadata including system logs and performance.; Splunk GDPR; Splunk Privacy
- [Sublime Security](https://thirdpartyindex.com/vendors/sublime-security.md): Analyze malicious links and attachments; Engineering
- [Tungsten Automation](https://thirdpartyindex.com/vendors/tungsten-automation.md): Security monitoring, logging and analytics; Tungsten Products or Service(s): Tungsten
- [UKG](https://thirdpartyindex.com/vendors/ukg.md)
- [UltraDNS](https://thirdpartyindex.com/vendors/ultradns.md): Support security logging, monitoring, and compliance
- [Veeam Software](https://thirdpartyindex.com/vendors/veeam-software.md): Security and observability of Veeam cloud services

## Security record

CISA's Known Exploited Vulnerabilities catalog lists 1 vulnerability in its software:

- CVE-2026-20253 (Enterprise), listed 2026-06-18: Splunk Enterprise Missing Authentication for Critical Function Vulnerability

## Recent changes

Changes to its documents and subprocessor list since monitoring began.

- 2026-10-24: Changed registry listing: fedramp:F1607197917 ([evidence](https://thirdpartyindex.com/evidence/151994))
- 2026-10-08: Changed registry listing: fedramp:F1607197917 ([evidence](https://thirdpartyindex.com/evidence/67847))
- 2026-09-30: Changed registry listing: fedramp:F1607197917 ([evidence](https://thirdpartyindex.com/evidence/25653))

Feed: https://thirdpartyindex.com/vendors/splunk/changes.atom

## Security contact

From its security.txt (https://www.splunk.com/.well-known/security.txt) ([evidence](https://thirdpartyindex.com/evidence/1644)):

- Contact: https://advisory.splunk.com/report
- Contact: mailto:prodsec@splunk.com
- Disclosure policy: https://advisory.splunk.com/report
- Encryption key: https://advisory.splunk.com/assets/Splunk_PSIRT.asc
- Security jobs: https://www.splunk.com/en_us/careers.html
- Languages: en
- Valid until 2027-03-01
- Signed

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api