# Wingify

Wingify declares [6 subprocessors](https://thirdpartyindex.com/vendors/wingify#subprocessors) in [its subprocessor list](https://wingify.com/compliance/subprocessors/), which we last checked on 2026-11-11 ([evidence](https://thirdpartyindex.com/evidence/108927)). They include [Amazon Web Services](https://thirdpartyindex.com/vendors/amazon-web-services), [Google Cloud](https://thirdpartyindex.com/vendors/google-cloud) and [Cloudflare](https://thirdpartyindex.com/vendors/cloudflare). No published changes since we first read it on 2026-09-22. [9 tracked vendors](https://thirdpartyindex.com/vendors/wingify#used-by) name Wingify as a subprocessor, including [Metabase](https://thirdpartyindex.com/vendors/metabase), [Validity](https://thirdpartyindex.com/vendors/validity) and [Acquia](https://thirdpartyindex.com/vendors/acquia).

Wingify (wingify.com): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/wingify
- Documents last verified: 2026-11-11
- Transparency rating: 83/100 (how much it publishes, not how secure it is): Subprocessor list 30/30; Processing locations 8/8; Purposes 7/7; Data processing addendum 0/12 (not found); Trust center 8/8; Privacy policy 6/6; security.txt 6/6; Security page 5/5; Status page 5/5; Vulnerability disclosure 0/5 (not found); Pages still reachable 8/8
- Supply chain: relies on 6 tracked vendors directly, 42 within two hops, 160 within three; 9 tracked vendors rely on it directly, 61 within two hops, 418 within three
- Cite as: Wingify, Third Party Index, https://thirdpartyindex.com/vendors/wingify (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Trust center | https://trust.wingify.com/ | 2026-11-11 | 2026-11-09 |
| Subprocessor list | https://wingify.com/compliance/subprocessors/ | 2026-11-11 | 2026-10-16 |
| Privacy policy | https://wingify.com/privacy-policy/ | 2026-11-11 | 2026-09-22 |
| Terms | https://wingify.com/terms/ | 2026-11-11 | 2026-09-22 |
| Security page | https://wingify.com/security/ | 2026-11-11 | 2026-11-04 |
| security.txt | https://wingify.com/.well-known/security.txt | 2026-11-11 | 2026-09-22 |
| Status page | https://status.wingify.com/ | 2026-11-11 | 2026-11-11 |

## Subprocessors (6)

As its own list states them.

| Subprocessor | Purpose | Location | Listed since |
|---|---|---|---|
| [Amazon Web Services (Amazon.com, Inc.)](https://thirdpartyindex.com/vendors/amazon-web-services.md) | Cloud Hosting Services – Storage for personalization and targeting. | Global | 2026-09-22 |
| [Clickhouse](https://thirdpartyindex.com/vendors/clickhouse.md) | Cloud Hosting Services | EU and USA | 2026-09-22 |
| [Cloudflare, Inc](https://thirdpartyindex.com/vendors/cloudflare.md) | For CDN, Cloudflare, Inc. (“Cloudflare”) provides content distribution, security and DNS services for web traffic transmitted to and from the Services, Secure and manage traffic to the Services, with access to URL interactions and IP addresses. | Global | 2026-09-22 |
| [Google Cloud Platform (Google LLC)](https://thirdpartyindex.com/vendors/google-cloud.md) | Cloud Hosting Services | EU, USA, India | 2026-09-22 |
| [Meilisearch](https://thirdpartyindex.com/vendors/meilisearch.md) | Visitor queries – Providing Visitor query results to Search API for presentation of Customer catalog products to the Visitor via the Wingify widget | EU | 2026-09-22 |
| [Snowflake](https://thirdpartyindex.com/vendors/snowflake.md) | Cloud Hosting Services | EU | 2026-09-22 |

Read from ([evidence](https://thirdpartyindex.com/evidence/3592)). CSV: https://thirdpartyindex.com/vendors/wingify/subprocessors.csv

## Web Technologies

Wingify's homepage made 163 requests to 30 domains, 15 services controlled by another company, and 2 domains not identified. Loaded on 2026-11-05 by a browser that accepted nothing; other visits may load more or less. What a page loads is not a list of who receives customer data.

15 third parties by category: Analytics 7 (Google Cloud, Clearbit, LinkedIn, Meta, Sprouts.ai, Heeet; reviewed: Matomo); Advertising 2 (Microsoft, OpenAI); Marketing automation 2 (GetVector, Inc., Adobe); Cookie compliance 1 (OneTrust); Affiliate programs 1 (PartnerStack); Form builders 1 (Default); Issue trackers 1 (Sentry). Each company that appears controlled by another organization is counted once, under the main category of the technologies detected from it on this homepage or, when none was, the category recorded from the company's own page (marked reviewed) or else the one it is usually detected as on other published homepages (marked as such); unclassified: none of these.

### Third parties (15)

- GetVector, Inc.: 13 requests to vector.co; Vector
- OneTrust: 11 requests to cookielaw.org, onetrust.com; OneTrust
- Google Cloud: 6 requests to googletagmanager.com, google-analytics.com, googlesyndication.com; Google Analytics, Google Tag Manager (its subprocessor list names it too)
- Microsoft: 6 requests to bing.com; Microsoft Advertising
- Clearbit: 5 requests to clearbit.com, clearbitjs.com, clearbitscripts.com; Clearbit, Clearbit Reveal
- LinkedIn: 4 requests to linkedin.com, licdn.com; Linkedin Insight Tag
- OpenAI: 4 requests to openai.com; ChatGPT Ads Measurement Pixel
- Adobe: 3 requests to marketo.net, mktoresp.com; Marketo
- Matomo: 3 requests to matomo.cloud
- PartnerStack: 3 requests to grsm.io, partnerlinks.io, partnerstack.com; PartnerStack
- Meta: 2 requests to facebook.net; Facebook Pixel 2.9.435
- Sentry: 2 requests to sentry-cdn.com, sentry.io; Sentry
- Sprouts.ai: 2 requests to sprouts.ai; Sprouts.ai
- Default: 1 request to default.com; Default (default.com)
- Heeet: 1 request to heeet.io; Heeet

### Unknown (2)

Domains not identified yet: cr-relay.com, usbrowserspeed.com

### First party (1)

- Wingify: 94 requests to wingify.com, wingify.net, vwo.com; Cloudflare, GSAP 3.15.0, Google Cloud, Google Cloud CDN, HSTS, HTTP/3, Matomo Analytics, MySQL, Open Graph, PHP, Priority Hints, WPML 4.9.6, WordPress, Yoast SEO 28.7, core-js 3.32.2, jQuery 3.7.1

11 tracked companies loaded by the homepage are not in Wingify's subprocessor list. A website can use a service without it processing customer data.

## Subprocessor of (9)

Tracked vendors whose own subprocessor lists name it, and what they say they use it for.

- [Acquia](https://thirdpartyindex.com/vendors/acquia.md): Provides the underlying Saas
- [AWeber](https://thirdpartyindex.com/vendors/aweber.md): A/B Testing; VWO Privacy
- [Bluebeam](https://thirdpartyindex.com/vendors/bluebeam.md): Website A/B testing and optimization platform.
- [BugHerd](https://thirdpartyindex.com/vendors/bugherd.md): A/B testing tool for bugherd.com
- [Dashlane](https://thirdpartyindex.com/vendors/dashlane.md): Experience optimization and behavioral analytics platform
- [Exiger](https://thirdpartyindex.com/vendors/exiger.md)
- [Kudoboard](https://thirdpartyindex.com/vendors/kudoboard.md): for marketing page A/B testing \[Headquartered in New Delhi, India. Note that Kudoboard’s instance is based on US-only servers through AWS\]
- [Metabase](https://thirdpartyindex.com/vendors/metabase.md): Website experimentation.
- [Validity](https://thirdpartyindex.com/vendors/validity.md): A/B Testing Tool; Business Operations

## Service status

Incidents it reported on its own status page.

- Last 43 days: 0 reported incidents (0 major or critical, 0 minor, 0 with no impact stated)
- Status page last read: 2026-11-12
- No incidents reported since Sep 30, 2026

## Incidents reported by Wingify's subprocessors

Incidents reported in the last 30 days on their own status pages by 2 vendors Wingify lists as subprocessors. A subprocessor list names a company, not the service an incident touched.

- 2026-11-12: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which Wingify lists as a subprocessor, reported INC20000347 (minor)
- 2026-11-11: [ClickHouse](https://thirdpartyindex.com/vendors/clickhouse#status), which Wingify lists as a subprocessor, reported Provisioning and scaling operations may take longer in AWS ap-northeast-1 Tokyo (minor)
- 2026-11-07: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which Wingify lists as a subprocessor, reported INC20000337 (minor)
- 2026-11-06: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which Wingify lists as a subprocessor, reported INC20000336 (minor)
- 2026-11-02: [ClickHouse](https://thirdpartyindex.com/vendors/clickhouse#status), which Wingify lists as a subprocessor, reported SQL Console database connection outage (minor)
- 2026-10-30: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which Wingify lists as a subprocessor, reported INC20000321 (minor)
- 2026-10-29: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which Wingify lists as a subprocessor, reported INC20000319 (minor)
- 2026-10-23: [ClickHouse](https://thirdpartyindex.com/vendors/clickhouse#status), which Wingify lists as a subprocessor, reported Degraded support ticket submission and response (minor)
- 2026-10-21: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which Wingify lists as a subprocessor, reported INC20000301 (critical)
- 2026-10-21: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which Wingify lists as a subprocessor, reported INC20000299 (minor)
- 2026-10-20: [ClickHouse](https://thirdpartyindex.com/vendors/clickhouse#status), which Wingify lists as a subprocessor, reported Google Cloud Outage (minor)
- 2026-10-20: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which Wingify lists as a subprocessor, reported INC20000294 (critical)
- 2026-10-19: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which Wingify lists as a subprocessor, reported INC20000290 (minor)
- 2026-10-16: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which Wingify lists as a subprocessor, reported INC20000287 (critical)
- 2026-10-13: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which Wingify lists as a subprocessor, reported INC20000277 (minor)

The subprocessor list as we read it on any date: https://thirdpartyindex.com/labs/time-machine/wingify

## Security contact

From its security.txt (https://wingify.com/.well-known/security.txt) ([evidence](https://thirdpartyindex.com/evidence/3595)):

- Contact: mailto:security@wingify.com
- Disclosure policy: https://vwo.com/security/responsible-disclosure-policy/
- Acknowledgments: https://vwo.com/security/whitehat/
- Languages: en
- Valid until 2027-06-02

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api
