# Ubiquiti We have not found a subprocessor list published by Ubiquiti. We monitor 6 of its documents, which we last checked on 2026-11-11. Ubiquiti (ui.com): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index. - Page: https://thirdpartyindex.com/vendors/ubiquiti - Documents last verified: 2026-11-11 - Transparency rating: 38/100 (how much it publishes, not how secure it is): Subprocessor list 0/30 (not found); Processing locations 0/8 (no list); Purposes 0/7 (no list); Data processing addendum 0/12 (not found); Trust center 8/8; Privacy policy 6/6; security.txt 6/6; Security page 5/5; Status page 5/5; Vulnerability disclosure 0/5 (not found); Pages still reachable 8/8 - Supply chain: relies on 0 tracked vendors directly, 0 within two hops, 0 within three; 0 tracked vendors rely on it directly, 0 within two hops, 0 within three - Cite as: Ubiquiti, Third Party Index, https://thirdpartyindex.com/vendors/ubiquiti (data CC BY 4.0) ## Documents | Document | URL | Last verified | Last changed | |---|---|---|---| | Trust center | https://ui.com/us/en/trust-center?s=us&l=en | 2026-11-11 | 2026-11-11 | | Privacy policy | https://www.ui.com/legal/privacypolicy/ | 2026-11-11 | 2026-09-23 | | Terms | https://www.ui.com/legal/termsofservice/ | 2026-11-11 | 2026-09-23 | | Security page | https://www.ui.com/support/security-rewards/about/ | 2026-11-11 | 2026-09-23 | | security.txt | https://ui.com/.well-known/security.txt | 2026-11-11 | 2026-09-23 | | Status page | https://status.ui.com/ | 2026-11-11 | 2026-11-11 | ## Subprocessors (0) No subprocessor list has been found or read for this vendor. ## Security program What Ubiquiti Inc.'s Form 10-K for fiscal 2026, filed Aug 21, 2026 (Item 1C) says, in its words (https://www.sec.gov/Archives/edgar/data/1511737/000151173726000056/0001511737-26-000056-index.htm). - Board oversight: Board of Directors - Practices named: Bug bounty, Security training - Engages outside assessors or consultants - Says no cybersecurity incident has materially affected it ## Web Technologies Ubiquiti's homepage made 193 requests to 8 domains, and 4 services controlled by another company. Loaded on 2026-10-14 by a browser that accepted nothing; other visits may load more or less. What a page loads is not a list of who receives customer data. 4 third parties by category: Analytics 2 (Google Cloud; usually detected as Analytics: Wingify); Advertising 1 (Reddit, Inc.); Cookie compliance 1 (OneTrust). Each company that appears controlled by another organization is counted once, under the main category of the technologies detected from it on this homepage or, when none was, the category recorded from the company's own page (marked reviewed) or else the one it is usually detected as on other published homepages (marked as such); unclassified: none of these. ### Third parties (4) - OneTrust: 12 requests to cookielaw.org, onetrust.com; OneTrust - Reddit, Inc.: 3 requests to reddit.com, redditstatic.com; Reddit Ads - Google Cloud: 2 requests to google-analytics.com, googletagmanager.com; Google Analytics, Google Tag Manager - Wingify: 1 request to visualwebsiteoptimizer.com ### First party (1) - Ubiquiti: 175 requests to ui.com; Amazon ALB, Amazon CloudFront, Amazon S3, Amazon Web Services, GSAP, HSTS, HTTP/3, Open Graph, PWA, Priority Hints, React, React Router 7.18.4, styled-components 6.5.3 3 tracked companies loaded by the homepage are not in Ubiquiti's subprocessor list. A website can use a service without it processing customer data. ## Subprocessor of (0) No tracked vendor lists it. ## Security record CISA's Known Exploited Vulnerabilities catalog lists 4 vulnerabilities in its software: - CVE-2026-34908 (UniFi OS), listed 2026-06-23: Ubiquiti UniFi OS Improper Access Control Vulnerability - CVE-2026-34909 (UniFi OS), listed 2026-06-23: Ubiquiti UniFi OS Path Traversal Vulnerability - CVE-2026-34910 (UniFi OS), listed 2026-06-23: Ubiquiti UniFi OS Improper Input Validation Vulnerability - CVE-2010-5330 (AirOS), listed 2022-04-15: Ubiquiti AirOS Command Injection Vulnerability ## Service status Incidents it reported on its own status page. - Last 90 days: 2 reported incidents (2 major or critical, 0 minor, 0 with no impact stated) - Typical time to resolve: 3 h 26 min - Status page last read: 2026-11-12 - 2026-11-04: Live Chat Service Outage (critical) - 2026-10-26: UniFi Talk – Degraded Call Service (major) - 2026-07-24: Multiple Services: Degraded Performance (major) - 2026-07-16: Increased CloudFront 5xx Errors (no impact stated) - 2026-02-26: Intermittent Connectivity in EU Region (no impact stated) ## Security contact From its security.txt (https://ui.com/.well-known/security.txt) ([evidence](https://thirdpartyindex.com/evidence/6977)): - Contact: mailto:security@ui.com - Disclosure policy: https://ui.com/security/ - Encryption key: https://ui.com/security/pgp-key - No expiry date --- Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api