Udemy
Transparency
Breakdown
| Subprocessor list | 30 / 30 | |
| Processing locations | partial | 0 / 8 |
| Purposes | 7 / 7 | |
| Data processing addendum | unreachable | 0 / 12 |
| Trust center | unreachable | 0 / 8 |
| Privacy policy | not found | 0 / 6 |
| security.txt | not found | 0 / 6 |
| Security page | not found | 0 / 5 |
| Status page | 5 / 5 | |
| Vulnerability disclosure | not found | 0 / 5 |
| Pages still reachable | some unreachable this week | 0 / 8 |
| Total | 42 / 100 |
Only documents we can retrieve count: a page behind a login or a broken link scores nothing.
Badge
For Udemy's own site; it updates with the rating.
<a href="https://thirdpartyindex.com/vendors/udemy"><img src="https://thirdpartyindex.com/badge/udemy.svg" alt="Udemy transparency rating on Third Party Index" height="20"></a>[](https://thirdpartyindex.com/vendors/udemy)Not listed by any tracked vendor.
Documents
| Document | Verified | Changed | Evidence |
|---|---|---|---|
| Trust center safebase failing | snapshot | ||
| Subprocessor list | snapshot | ||
| Data processing addendum safebase failing | snapshot | ||
| Status page statuspage | snapshot |
Subprocessors
41 third parties, 3 affiliates. CSV · Atom
| Name | Purpose | Location | Listed since |
|---|---|---|---|
| Accredible | Digital badge and certificate provider | ||
| Aha! Labs Inc. | Platform for the course request board | ||
| Alchemer | In-course survey and feedback tool | ||
| Amazon Web Services | Cloud computing, data storage, and disaster recovery | ||
| Amplitude | In-service messaging tool for administration and guidance. | ||
| Box | Cloud-based file storage | ||
| Branch Metrics | Mobile app usage data platform | ||
| Braze | Email service provider | ||
| Carry Technologies, Inc. (dba Hightouch) | Intersystem data pipeline | ||
| Credly Inc. | Certificate provider for Google AI courses | ||
| Darwinium | Account and service security | ||
| Databricks | Data infrastructure provider | ||
| Datadog | Service monitoring and debugging tool | ||
| DeepL SE | Translation services (UB custom courses) | ||
| Dyspatch | Email service provider | ||
| ElevenLabs | Text-to-speech processing | ||
| Emtrain | Compliance training provider | ||
| Fivetran | Systems integration provider | ||
| Gainsight | Customer success management platform and email service provider | ||
| Gear, Inc. | User support services | ||
| Office productivity tools | |||
| Harbinger Systems Private Limited | ALM API integration connector | ||
| HeyGen Technology Inc. | Interactive avatar service provider | ||
| Mailgun.com | Email service provider | ||
| Ontraport | Outbound email provider for platform updates | ||
| Open AI | Generative artificial intelligence processor powering GenAI features | ||
| OpenAI | Summarizing and presenting cohort discussion themes | ||
| Partnerhero | User support services | ||
| Ping Identity | Single Sign-On (SSO) provider | ||
| Postman | API integration testing | ||
| Sendgrid | Email tool for account administration messages | ||
| Sentry | Product error monitoring tool | ||
| Slack | Elective UB integration with the office communication tool | ||
| Smartsheet | Spreadsheet and collaboration platform with project management functionality | ||
| Stripe | Online payment processor | ||
| Tableau | Visualization tool for reporting data | ||
| Tray.io | API integration tool | ||
| Unbabel | Translation services for support tickets | ||
| Vocareum | Computing environments for Udemy Pro | ||
| Zendesk | User support ticketing and live chat system | ||
| Zoom | Live event conferencing provider |
Security record
What public security catalogs list for Udemy, in their words.
Data breaches
- Udemy 1,401,259 accounts Email addresses; Employers; Job titles; Names; Payment methods; Phone numbers; Physical addresses
In April 2026, online training company Udemy was the victim of a “pay or leak” extortion attempt perpetrated by the ShinyHunters group. The data was subsequently leaked publicly and contained 1.4M unique email addresses belonging to customers and instructors. The data also included names, physical addresses, phone numbers, employer information and instructor payout methods including PayPal, cheque and bank transfer.
Have I Been Pwned · evidence
Breach data from Have I Been Pwned (CC BY 4.0), which calls every entry a breach, including data scraped from public pages.
Federal contracts
By funding agency. UEI QYJ5V7ENK5W7 · checked Sep 27, 2026 · snapshot
| Agency | Prime awards | Obligated | Subawards | Subaward total | Years |
|---|---|---|---|---|---|
| Department of the Air Force Department of Defense | 26 | $4.8M | — | — | 2019–2025 |
| Department of the Navy Department of Defense | 3 | $129.7K | 1 | $69.6K | 2020–2023 |
| National Institutes of Health Department of Health and Human Services | 7 | $192.6K | — | — | 2021–2023 |
| District of Columbia Courts | 3 | $136.0K | — | — | 2023–2026 |
| Defense Finance and Accounting Service Department of Defense | 2 | $98.2K | — | — | 2023–2024 |
| Defense Logistics Agency Department of Defense | 2 | $88.7K | — | — | 2023–2024 |
| Bureau of Indian Affairs and Bureau of Indian Education Department of the Interior | 1 | $15.9K | — | — | 2021 |
| Department of State | 1 | $15.2K | — | — | 2020 |
| Washington Headquarters Services Department of Defense | 1 | $12.3K | — | — | 2023 |
| National Oceanic and Atmospheric Administration Department of Commerce | 1 | $11.6K | — | — | 2021 |
| Defense Information Systems Agency Department of Defense | 1 | $4.9K | — | — | 2022 |
| Immediate Office of the Secretary of Defense Department of Defense | 1 | $3.1K | — | — | 2023 |
| Food Safety and Inspection Service Department of Agriculture | 1 | — | — | — | 2020 |
Prime awards and subawards reported by prime contractors. Purchases through a reseller name the reseller, not the vendor.
Changes
None since tracking began.