# Veeam Software Veeam Software declares [6 subprocessors](https://thirdpartyindex.com/vendors/veeam-software#subprocessors) in [its subprocessor list](https://www.veeam.com/legal/approved-subprocessors.html), which we last checked on 2026-11-11 ([evidence](https://thirdpartyindex.com/evidence/134945)). They include [Amazon Web Services](https://thirdpartyindex.com/vendors/amazon-web-services), [Microsoft](https://thirdpartyindex.com/vendors/microsoft) and [Elasticsearch](https://thirdpartyindex.com/vendors/elasticsearch). No published changes since we first read it on 2026-09-27. [5 tracked vendors](https://thirdpartyindex.com/vendors/veeam-software#used-by) name Veeam Software as a subprocessor, including [ConnectWise](https://thirdpartyindex.com/vendors/connectwise), [Arvato Systems](https://thirdpartyindex.com/vendors/arvato-systems) and [Lightedge](https://thirdpartyindex.com/vendors/lightedge). Veeam Software (veeam.com): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index. - Page: https://thirdpartyindex.com/vendors/veeam-software - Documents last verified: 2026-11-11 - Transparency rating: 90/100 (how much it publishes, not how secure it is): Subprocessor list 30/30; Processing locations 8/8; Purposes 7/7; Data processing addendum 12/12; Trust center 8/8; Privacy policy 6/6; security.txt 6/6; Security page 5/5; Status page 0/5 (not found); Vulnerability disclosure 0/5 (not found); Pages still reachable 8/8 - Supply chain: relies on 6 tracked vendors directly, 52 within two hops, 228 within three; 5 tracked vendors rely on it directly, 9 within two hops, 9 within three - Cite as: Veeam Software, Third Party Index, https://thirdpartyindex.com/vendors/veeam-software (data CC BY 4.0) ## Documents | Document | URL | Last verified | Last changed | |---|---|---|---| | Trust center | https://www.veeam.com/company/trust-center.html?ad=footer | 2026-11-11 | 2026-09-27 | | Subprocessor list | https://www.veeam.com/legal/approved-subprocessors.html | 2026-11-11 | 2026-10-21 | | Data processing addendum | https://www.veeam.com/legal/data-processing-addendum.html | 2026-11-11 | 2026-10-14 | | Privacy policy | https://www.veeam.com/legal/privacy-notice.html?ad=footer | 2026-11-11 | 2026-09-27 | | Terms | https://www.veeam.com/legal/ai-terms-of-use.html | 2026-11-11 | 2026-09-27 | | Security page | https://www.veeam.com/vulnerability-disclosure.html | 2026-11-11 | 2026-10-13 | | security.txt | https://www.veeam.com/.well-known/security.txt | 2026-11-11 | 2026-09-27 | ## Subprocessors (6) As its own list states them. | Subprocessor | Purpose | Location | Listed since | |---|---|---|---| | [Amazon Web Services (AWS)](https://thirdpartyindex.com/vendors/amazon-web-services.md) | AWS is used to host logs and infrastructure used for Veeam cloud services | UK, Australia, USA | 2026-10-21 | | [Elastic, Inc.](https://thirdpartyindex.com/vendors/elasticsearch.md) | Provides search and analytics engine used for log analysis and data indexing | APJ, EMEA, USA | 2026-10-21 | | [Microsoft Corporation](https://thirdpartyindex.com/vendors/microsoft.md) | Provides Microsoft Azure Services and infrastructure used for Veeam cloud services | USA, EU, UK, APJ | 2026-10-21 | | [Perplexity AI, Inc.](https://thirdpartyindex.com/vendors/perplexity-ai.md) (AI model provider: Perplexity AI) | Provides search engine used for AI-powered information retrieval and question answering | USA | 2026-10-21 | | [Raintank, Inc. d/b/a Grafana Labs](https://thirdpartyindex.com/vendors/grafana.md) | Provides observability platform used for storage and analysis of service logs, metrics and traces of Veeam cloud services | Hosting location: Netherlands | 2026-10-21 | | [Splunk Inc.](https://thirdpartyindex.com/vendors/splunk.md) | Security and observability of Veeam cloud services | USA | 2026-10-21 | Read from ([evidence](https://thirdpartyindex.com/evidence/134945)). CSV: https://thirdpartyindex.com/vendors/veeam-software/subprocessors.csv AI model providers (or a cloud provider's AI model service) among these entries: 1. All vendors that list one: https://thirdpartyindex.com/ai ## Web Technologies Veeam Software's homepage made 179 requests to 18 domains, and 10 services controlled by another company. Loaded on 2026-11-10 by a browser that accepted nothing; other visits may load more or less. What a page loads is not a list of who receives customer data. 10 third parties by category: CDN 2 (UNPKG, jsDelivr); Tag managers 1 (Google Cloud); Marketing automation 1 (Adobe); Live chat 1 (Qualified.com, Inc.); Cookie compliance 1 (CookieScript); Font scripts 1 (Font Awesome); Issue trackers 1 (Sentry); Security 1 (hCaptcha); Video players 1 (Wistia). Each company that appears controlled by another organization is counted once, under the main category of the technologies detected from it on this homepage or, when none was, the category recorded from the company's own page (marked reviewed) or else the one it is usually detected as on other published homepages (marked as such); unclassified: none of these. ### Third parties (10) - Font Awesome: 39 requests to fontawesome.com; Font Awesome - Google Cloud: 13 requests to google.com, adtrafficquality.google, googlesyndication.com, googletagmanager.com; Google Tag Manager - hCaptcha: 7 requests to hcaptcha.com; hCaptcha 1 - Adobe: 5 requests to demdex.net, adobedtm.com, everesttech.net, marketo.net; Marketo - CookieScript: 4 requests to cookie-script.com; Cookie Script - Qualified.com, Inc.: 4 requests to qualified.com; Qualified - UNPKG: 4 requests to unpkg.com; Unpkg - Wistia: 4 requests to wistia.com; Wistia - Sentry: 3 requests to sentry-cdn.com, sentry.io; Sentry 10.78.0 - jsDelivr: 1 request to jsdelivr.net; jsDelivr ### First party (1) - Veeam Software: 95 requests to veeam.com; Adobe Audience Manager, Adobe Client Data Layer 2.0.2, Adobe Experience Manager, Adobe Experience Platform Identity Service, Adobe Experience Platform Launch, Adobe Target 1.8.3, GSAP 3.12.2, HSTS, Java, OWL Carousel, Open Graph, jQuery 3.7.1, lit-element 4.2.0, lit-html 3.3.0 5 tracked companies loaded by the homepage are not in Veeam Software's subprocessor list. A website can use a service without it processing customer data. ## Subprocessor of (5) Tracked vendors whose own subprocessor lists name it, and what they say they use it for. - [Arvato Systems](https://thirdpartyindex.com/vendors/arvato-systems.md) - [ConnectWise](https://thirdpartyindex.com/vendors/connectwise.md): Backup and Data Management solutions; Data backup, recovery, and data management solutions - [Lightedge](https://thirdpartyindex.com/vendors/lightedge.md) - [Lumify Work](https://thirdpartyindex.com/vendors/lumify-work.md): Data centre backup software - [Precisely Software](https://thirdpartyindex.com/vendors/precisely-software.md): Security Monitoring / IT ## Security record CISA's Known Exploited Vulnerabilities catalog lists 4 vulnerabilities in its software: - CVE-2024-40711 (Backup & Replication), listed 2024-10-17: Veeam Backup and Replication Deserialization Vulnerability (known ransomware use) - CVE-2023-27532 (Backup & Replication), listed 2023-08-22: Veeam Backup & Replication Cloud Connect Missing Authentication for Critical Function Vulnerability (known ransomware use) - CVE-2022-26500 (Backup & Replication), listed 2022-12-13: Veeam Backup & Replication Remote Code Execution Vulnerability (known ransomware use) - CVE-2022-26501 (Backup & Replication), listed 2022-12-13: Veeam Backup & Replication Remote Code Execution Vulnerability (known ransomware use) ## Incidents reported by Veeam Software's subprocessors Incidents reported in the last 30 days on their own status pages by 2 vendors Veeam Software lists as subprocessors. A subprocessor list names a company, not the service an incident touched. - 2026-11-11: [Grafana](https://thirdpartyindex.com/vendors/grafana#status), which Veeam Software lists as a subprocessor, reported Degraded performance for Grafana Cloud Metrics in prod-us-central-7 (major) - 2026-11-11: [Grafana](https://thirdpartyindex.com/vendors/grafana#status), which Veeam Software lists as a subprocessor, reported Elevated query errors for Grafana Cloud Metrics in prod-us-east-3 (minor) - 2026-11-10: [Grafana](https://thirdpartyindex.com/vendors/grafana#status), which Veeam Software lists as a subprocessor, reported Cloud Logs writes - Elevated latency and error rates in prod-eu-central-0 (no impact stated) - 2026-11-10: [Grafana](https://thirdpartyindex.com/vendors/grafana#status), which Veeam Software lists as a subprocessor, reported Mimir query unexpected response with status code 500 (minor) - 2026-11-06: [Grafana](https://thirdpartyindex.com/vendors/grafana#status), which Veeam Software lists as a subprocessor, reported Synthetic Monitoring — Jakarta Public Probe Degradation (no impact stated) - 2026-11-04: [Elasticsearch](https://thirdpartyindex.com/vendors/elasticsearch#status), which Veeam Software lists as a subprocessor, reported mOLTP PrivateLink connectivity issue (major) - 2026-11-04: [Grafana](https://thirdpartyindex.com/vendors/grafana#status), which Veeam Software lists as a subprocessor, reported GitHub returning 403 for all Git Sync repositories (minor) - 2026-11-03: [Grafana](https://thirdpartyindex.com/vendors/grafana#status), which Veeam Software lists as a subprocessor, reported October usage report visualization issue (minor) - 2026-11-03: [Grafana](https://thirdpartyindex.com/vendors/grafana#status), which Veeam Software lists as a subprocessor, reported Increased query latency for Logs in GCP US Central (prod-us-central-0) (minor) - 2026-11-03: [Grafana](https://thirdpartyindex.com/vendors/grafana#status), which Veeam Software lists as a subprocessor, reported Elevated Request Errors for Grafana Across Multiple Regions (minor) - 2026-11-02: [Grafana](https://thirdpartyindex.com/vendors/grafana#status), which Veeam Software lists as a subprocessor, reported Grafana Cloud: k6 timeouts (no impact stated) - 2026-11-02: [Grafana](https://thirdpartyindex.com/vendors/grafana#status), which Veeam Software lists as a subprocessor, reported Metrics Alert Rule Evaluation Failures in AWS Australia (prod-au-southeast-1) (minor) - 2026-11-02: [Grafana](https://thirdpartyindex.com/vendors/grafana#status), which Veeam Software lists as a subprocessor, reported Missing Metrics for Some Synthetic Monitoring Checks using the Montreal, North Virginia, and North California public probes (no impact stated) - 2026-11-02: [Grafana](https://thirdpartyindex.com/vendors/grafana#status), which Veeam Software lists as a subprocessor, reported IRM Unable to Voice Call Brazil Numbers (major) - 2026-10-27: [Grafana](https://thirdpartyindex.com/vendors/grafana#status), which Veeam Software lists as a subprocessor, reported Frontend Observability Outage in prod-eu-west-2 (critical) - 2026-10-27: [Grafana](https://thirdpartyindex.com/vendors/grafana#status), which Veeam Software lists as a subprocessor, reported Degraded Cloud Integrations (minor) - 2026-10-26: [Grafana](https://thirdpartyindex.com/vendors/grafana#status), which Veeam Software lists as a subprocessor, reported ingestion errors in mimir-prod-66 (no impact stated) - 2026-10-23: [Grafana](https://thirdpartyindex.com/vendors/grafana#status), which Veeam Software lists as a subprocessor, reported Some Grafana Instances Experiencing Issues Coming Online after Restart (minor) - 2026-10-23: [Grafana](https://thirdpartyindex.com/vendors/grafana#status), which Veeam Software lists as a subprocessor, reported Elevated Trace Ingestion Latency and Errors for Grafana Cloud Traces in AWS Germany (major) - 2026-10-23: [Elasticsearch](https://thirdpartyindex.com/vendors/elasticsearch#status), which Veeam Software lists as a subprocessor, reported Elastic Support Portal is unavailable (major) - 2026-10-22: [Elasticsearch](https://thirdpartyindex.com/vendors/elasticsearch#status), which Veeam Software lists as a subprocessor, reported 403 error when trying to access Autoops in newly created serverless projects (major) - 2026-10-21: [Grafana](https://thirdpartyindex.com/vendors/grafana#status), which Veeam Software lists as a subprocessor, reported Some GCK6 App Project Pages are Failing to Load (major) - 2026-10-21: [Grafana](https://thirdpartyindex.com/vendors/grafana#status), which Veeam Software lists as a subprocessor, reported Increased timeout errors in alert rule evaluations (AWS Germany, prod-eu-west-2) (minor) - 2026-10-21: [Grafana](https://thirdpartyindex.com/vendors/grafana#status), which Veeam Software lists as a subprocessor, reported Possible incorrect evaluation of Synthetic Monitoring alert rules in cluster prod-us-east-3 (no impact stated) - 2026-10-20: [Grafana](https://thirdpartyindex.com/vendors/grafana#status), which Veeam Software lists as a subprocessor, reported DB issues in prod-sa-east-1 (no impact stated) - 2026-10-20: [Elasticsearch](https://thirdpartyindex.com/vendors/elasticsearch#status), which Veeam Software lists as a subprocessor, reported Elastic Cloud scaling issues in Azure (major) - 2026-10-20: [Grafana](https://thirdpartyindex.com/vendors/grafana#status), which Veeam Software lists as a subprocessor, reported Some GCK6 App Project Pages are Failing to Load (major) - 2026-10-20: [Grafana](https://thirdpartyindex.com/vendors/grafana#status), which Veeam Software lists as a subprocessor, reported IRM outage in the region prod-gb-south-0 and prod-eu-west-0 (no impact stated) - 2026-10-20: [Elasticsearch](https://thirdpartyindex.com/vendors/elasticsearch#status), which Veeam Software lists as a subprocessor, reported Degraded availability for some Elastic Cloud Hosted and Serverless deployments in GCP europe-west2 (London) (major) - 2026-10-20: [Grafana](https://thirdpartyindex.com/vendors/grafana#status), which Veeam Software lists as a subprocessor, reported Grafana Cloud unavailibity in the prod-gb-south-0 region (minor) - 2026-10-19: [Grafana](https://thirdpartyindex.com/vendors/grafana#status), which Veeam Software lists as a subprocessor, reported Metrics: Evelvated Read and Ruler Errors. (major) - 2026-10-16: [Grafana](https://thirdpartyindex.com/vendors/grafana#status), which Veeam Software lists as a subprocessor, reported Metric reads and rule evaluations are degraded in mimir-prod-66 (minor) - 2026-10-15: [Grafana](https://thirdpartyindex.com/vendors/grafana#status), which Veeam Software lists as a subprocessor, reported Tempo Write Failures in prod-us-central-0 (major) - 2026-10-15: [Grafana](https://thirdpartyindex.com/vendors/grafana#status), which Veeam Software lists as a subprocessor, reported Tempo: High Latency in prod-eu-west-2 (minor) - 2026-10-14: [Grafana](https://thirdpartyindex.com/vendors/grafana#status), which Veeam Software lists as a subprocessor, reported Authentication errors in prod-us-west-0 (minor) - 2026-10-13: [Grafana](https://thirdpartyindex.com/vendors/grafana#status), which Veeam Software lists as a subprocessor, reported Errors when querying Prometheus datasource (minor) - 2026-10-13: [Grafana](https://thirdpartyindex.com/vendors/grafana#status), which Veeam Software lists as a subprocessor, reported Phone call notifications to numbers in Russia and Kazakhstan are blocked (minor) The subprocessor list as we read it on any date: https://thirdpartyindex.com/labs/time-machine/veeam-software ## Security contact From its security.txt (https://www.veeam.com/.well-known/security.txt) ([evidence](https://thirdpartyindex.com/evidence/10897)): - Contact: mailto:security@veeam.com - Disclosure policy: https://hackerone.com/veeam?type=team - Acknowledgments: https://hackerone.com/veeam/thanks - Security jobs: https://careers.veeam.com/ - Languages: en - Expired 2025-01-01 --- Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api