# SugarCRM

SugarCRM (sugarcrm.com): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/sugarcrm
- Documents last verified: 2026-09-29
- Transparency rating: 21/100 (how much it publishes, not how secure it is)
- Cite as: SugarCRM, Third Party Index, https://thirdpartyindex.com/vendors/sugarcrm (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Trust center | https://sugarai.com/legal/security-trust | 2026-09-29 | 2026-09-27 |
| Status page | https://status.cloud.sugarai.com/ | 2026-09-29 | 2026-09-28 |

## Subprocessors (0)

No subprocessor list has been found or read for this vendor.

## Listed as a subprocessor by (1)

Tracked vendors whose own subprocessor lists name it, and what they say they use it for.

- [Humanforce](https://thirdpartyindex.com/vendors/humanforce.md): - \*\*Processing Purpose\*\*: Sales automation workflow - \*\*Type of Data\*\*: Personal data for customers' primary contacts and customer metadata only. - \*\*Processing…

## Security record

CISA's Known Exploited Vulnerabilities catalog lists 1 vulnerability in its software:

- CVE-2023-22952 (Multiple Products), listed 2023-02-02: Multiple SugarCRM Products Remote Code Execution Vulnerability

## Service status

Incidents it reported on its own status page.

- Last 90 days: 19 reported incidents (19 major or critical, 0 minor, 0 with no impact stated)
- Typical time to resolve: 2 min
- 2026-09-21: Sugar Cloud Premium DE 02 is down (major)
- 2026-09-17: Sugar Market US and Sugar Market EU are down (major)
- 2026-09-01: Sugar Cloud US 13 is down (major)
- 2026-08-31: Sugar Cloud US 13 is down (major)
- 2026-08-29: Sugar Cloud US 13 is down (major)
- 2026-08-28: Sugar Cloud US 13 is down (major)
- 2026-08-10: Sugar Cloud US 04 is down (major)
- 2026-08-09: Sugar Market Mail App APAC is down (major)

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api