# TikTok

TikTok (tiktok.com): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/tiktok
- Documents last verified: 2026-10-02
- Transparency rating: 71/100 (how much it publishes, not how secure it is): Subprocessor list 30/30; Processing locations 8/8; Purposes 7/7; Data processing addendum 12/12; Trust center 0/8 (not found); Privacy policy 6/6; security.txt 0/6 (not found); Security page 0/5 (not found); Status page 0/5 (not found); Vulnerability disclosure 0/5 (not found); Pages still reachable 8/8
- Supply chain: relies on 2 tracked vendors directly, 16 within two hops, 36 within three; 6 tracked vendors rely on it directly, 7 within two hops, 7 within three
- Cite as: TikTok, Third Party Index, https://thirdpartyindex.com/vendors/tiktok (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Subprocessor list | https://ads.tiktok.com/i18n/official/article?aid=30242040634959695 | 2026-10-02 | 2026-10-02 |
| Data processing addendum | https://ads.tiktok.com/i18n/official/policy/data-processing-terms | 2026-10-02 | 2026-10-02 |
| Privacy policy | https://ads.tiktok.com/i18n/official/policy/privacy | 2026-10-02 | 2026-10-02 |

## Subprocessors (2)

As its own list states them.

| Subprocessor | Purpose | Location | Listed since |
|---|---|---|---|
| [Google LLC](https://thirdpartyindex.com/vendors/google-cloud.md) | Cloud storage | USA | 2026-10-02 |
| [Oracle America, Inc.](https://thirdpartyindex.com/vendors/oracle.md) | Cloud storage | USA | 2026-10-02 |

Read from ([evidence](https://thirdpartyindex.com/evidence/35159)). CSV: https://thirdpartyindex.com/vendors/tiktok/subprocessors.csv

### Its own affiliates (1)

- TikTok USDS Joint Venture LLC (USA)

## Subprocessor of (6)

Tracked vendors whose own subprocessor lists name it, and what they say they use it for.

- [8fit](https://thirdpartyindex.com/vendors/8fit.md)
- [Eyeota](https://thirdpartyindex.com/vendors/eyeota.md): Providing Global entertainment platform to its users (as controller)
- [Funnel](https://thirdpartyindex.com/vendors/funnel.md): Ad targeting, Analytics/Measurement, Content Customization
- [oapps](https://thirdpartyindex.com/vendors/oapps.md)
- [Withings](https://thirdpartyindex.com/vendors/withings.md)
- [Zeplin](https://thirdpartyindex.com/vendors/zeplin.md): Zeplin uses TikTok cookies to collect user information to engage in marketing efforts.

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api
