# Statsig [15 tracked vendors](https://thirdpartyindex.com/vendors/statsig#used-by) name Statsig as a subprocessor, including [Sigma](https://thirdpartyindex.com/vendors/sigma), [Webflow](https://thirdpartyindex.com/vendors/webflow) and [Klaviyo](https://thirdpartyindex.com/vendors/klaviyo). Statsig is part of [OpenAI](https://thirdpartyindex.com/vendors/openai), whose subprocessor list declares [21 subprocessors](https://thirdpartyindex.com/vendors/openai#subprocessors), which we last checked on 2026-11-11. We have not found a separate list published by Statsig. Statsig (statsig.com): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index. - Page: https://thirdpartyindex.com/vendors/statsig - Documents last verified: 2026-11-11 - Transparency rating: 25/100 (how much it publishes, not how secure it is): Subprocessor list 0/30 (not found); Processing locations 0/8 (no list); Purposes 0/7 (no list); Data processing addendum 12/12; Trust center 0/8 (not found); Privacy policy 0/6 (not found); security.txt 0/6 (not found); Security page 0/5 (not found); Status page 5/5; Vulnerability disclosure 0/5 (not found); Pages still reachable 8/8 - Part of: [OpenAI](https://thirdpartyindex.com/vendors/openai) - Supply chain: relies on 0 tracked vendors directly, 0 within two hops, 0 within three; 15 tracked vendors rely on it directly, 102 within two hops, 548 within three - Cite as: Statsig, Third Party Index, https://thirdpartyindex.com/vendors/statsig (data CC BY 4.0) ## Documents | Document | URL | Last verified | Last changed | |---|---|---|---| | Data processing addendum | https://statsig.com/legal/dpa | 2026-11-11 | 2026-11-11 | | Terms | https://statsig.com/terms | 2026-11-11 | 2026-10-23 | | Status page | https://status.statsig.com/ | 2026-11-11 | 2026-11-11 | | Trust center (parent company's) | https://trust.openai.com/ | 2026-11-11 | 2026-11-05 | | Subprocessor list (parent company's) | https://openai.com/policies/sub-processor-list/ | 2026-11-11 | 2026-10-14 | | Privacy policy (parent company's) | https://openai.com/policies/privacy-policy/ | 2026-11-11 | 2026-10-09 | | Security page (parent company's) | https://openai.com/security-and-privacy/ | 2026-11-11 | 2026-10-08 | | security.txt (parent company's) | https://openai.com/.well-known/security.txt | 2026-11-11 | 2026-09-21 | ## Subprocessors (0) It publishes no list of its own; its parent company OpenAI lists 21: https://thirdpartyindex.com/vendors/openai.md ## Web Technologies Statsig's homepage made 217 requests to 22 domains, 9 services controlled by another company, and 1 domain not identified. Loaded on 2026-11-04 by a browser that accepted nothing; other visits may load more or less. What a page loads is not a list of who receives customer data. 9 third parties by category: Analytics 3 (Amplitude, Meta, LinkedIn); Advertising 2 (Google Cloud, Influ2, Inc.); Marketing automation 2 (6Sense Insights, Inc., Adobe); Cookie compliance 1 (Civic Computing (CIVIC)); Security 1 (usually detected as Security: Amazon Web Services). Each company that appears controlled by another organization is counted once, under the main category of the technologies detected from it on this homepage or, when none was, the category recorded from the company's own page (marked reviewed) or else the one it is usually detected as on other published homepages (marked as such); unclassified: none of these. ### Third parties (9) - Amplitude: 31 requests to amplitude.com; Amplitude - 6Sense Insights, Inc.: 18 requests to 6sc.co; 6sense - Google Cloud: 12 requests to google.com, doubleclick.net, googletagmanager.com; DoubleClick Floodlight, Google Analytics, Google Tag Manager - Adobe: 7 requests to adoberesources.net, marketo.net, adobe.io, mktoresp.com; Marketo - Influ2, Inc.: 4 requests to influ2.com; Influ2 - Meta: 4 requests to facebook.net, capi-automation.s3.us-east-2.amazonaws.com, facebook.com; Facebook Pixel 2.9.435 - LinkedIn: 3 requests to linkedin.com, licdn.com; Linkedin Insight Tag - Civic Computing (CIVIC): 2 requests to civiccomputing.com; CIVIC, Cookie Control - Amazon Web Services: 1 request to on.aws ### Affiliates (1) - OpenAI: 3 requests to openai.com; ChatGPT Ads Measurement Pixel ### Unknown (1) Domains not identified yet: usbrowserspeed.com ### First party (1) - Statsig: 131 requests to statsig.com, prodregistryv2.org, featureassets.org; Google Cloud, Google Cloud CDN, HSTS, HTTP/3, Open Graph, Statsig 3.32.0, core-js 3.46.0 6 tracked companies loaded by the homepage are not in Statsig's subprocessor list. A website can use a service without it processing customer data. ## Subprocessor of (15) Tracked vendors whose own subprocessor lists name it, and what they say they use it for. - [Ema](https://thirdpartyindex.com/vendors/ema.md): Monitoring and Analytics - [Hubstaff](https://thirdpartyindex.com/vendors/hubstaff.md): Experimentation platform for A/B testing, feature gates, and product measurement.; Product Analytics - [Klaviyo](https://thirdpartyindex.com/vendors/klaviyo.md): Product Feature Management - [Knowde](https://thirdpartyindex.com/vendors/knowde.md): Features Management - [Koah Labs](https://thirdpartyindex.com/vendors/koah-labs.md): Feature flags and A/B testing - [Luma AI](https://thirdpartyindex.com/vendors/luma-ai.md): Feature flagging and experimentation - [ModernLoop](https://thirdpartyindex.com/vendors/modernloop.md): Product Analytics. Applicable to ModernLoop's AI products only. - [Pax](https://thirdpartyindex.com/vendors/pax.md) - [Qumulo](https://thirdpartyindex.com/vendors/qumulo.md): Feature flags, A/B testing, and product analytics.; Product - [Read AI](https://thirdpartyindex.com/vendors/read-ai.md): Data analytics - [Sigma](https://thirdpartyindex.com/vendors/sigma.md): Feature Flagging Tool - [Town](https://thirdpartyindex.com/vendors/town.md): Product analytics, experimentation, and feature flag delivery. - [Unstructured](https://thirdpartyindex.com/vendors/unstructured.md): Feature flags & user analytics - [Webflow](https://thirdpartyindex.com/vendors/webflow.md): Product feature management - [Yoodli](https://thirdpartyindex.com/vendors/yoodli.md): Feature flag management ## Service status Incidents it reported on its own status page. - Last 90 days: 3 reported incidents (0 major or critical, 1 minor, 2 with no impact stated) - Typical time to resolve: 2 days - Status page last read: 2026-11-12 - 2026-11-11: Delayed Config Propagation in Europe and Asia Regions (no impact stated) - 2026-08-28: Aug 26 Incident Follow-up: Feature Gate Exposure Data Delayed for Some Warehouse-Native (WHN) Customers (minor) - 2026-08-26: Delayed Experiment & Feature Gate Results for Warehouse-Native (WHN) Customers (no impact stated) - 2026-08-07: Warehouse Native accounts may be experiencing export delays for data from Aug 6 (minor) - 2026-07-09: Feature Flag Evaluation Errors (Statsig) (major) - 2026-06-20: Data ingestion delayed (minor) - 2026-06-11: Warehouse Native Pulse results delayed for customers with IP allowlists configured (minor) - 2026-05-26: Statsig Console temporarily down (critical) ## Security contact From its security.txt (https://openai.com/.well-known/security.txt) ([evidence](https://thirdpartyindex.com/evidence/127)): - Contact: https://bugcrowd.com/openai - Contact: mailto:disclosure@openai.com - Disclosure policy: https://openai.com/policies/coordinated-vulnerability-disclosure-policy - Encryption key: https://cdn.openai.com/security/disclosure.asc.pub - Acknowledgments: https://bugcrowd.com/engagements/openai/hall_of_fames - Security jobs: https://openai.com/careers/search?c=security - No expiry date - Signed - The parent company's file --- Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api