# Withings

Withings declares [18 subprocessors](https://thirdpartyindex.com/vendors/withings#subprocessors), plus 1 of its own affiliates, in [its subprocessor list](https://media.withings.com/web/legal/privacy-policy/List_Subprocessors_Privacy_Policy_ENG.pdf), which we last checked on 2026-11-11 ([evidence](https://thirdpartyindex.com/evidence/7076)). They include [Google Cloud](https://thirdpartyindex.com/vendors/google-cloud), [Zendesk](https://thirdpartyindex.com/vendors/zendesk) and [Mailgun](https://thirdpartyindex.com/vendors/mailgun). No published changes since we first read it on 2026-09-23. [1 tracked vendor](https://thirdpartyindex.com/vendors/withings#used-by), [8fit](https://thirdpartyindex.com/vendors/8fit), names Withings as a subprocessor.

Withings (withings.com): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/withings
- Documents last verified: 2026-11-11
- Transparency rating: 55/100 (how much it publishes, not how secure it is): Subprocessor list 30/30; Processing locations 0/8 (partial); Purposes 6/7 (partial); Data processing addendum 0/12 (not found); Trust center 0/8 (not found); Privacy policy 6/6; security.txt 0/6 (not found); Security page 0/5 (not found); Status page 5/5; Vulnerability disclosure 0/5 (not found); Pages still reachable 8/8
- Supply chain: relies on 5 tracked vendors directly, 77 within two hops, 279 within three; 1 tracked vendors rely on it directly, 1 within two hops, 1 within three
- Cite as: Withings, Third Party Index, https://thirdpartyindex.com/vendors/withings (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Subprocessor list | https://media.withings.com/web/legal/privacy-policy/List\_Subprocessors\_Privacy\_Policy\_ENG.pdf | 2026-11-11 | 2026-09-23 |
| Privacy policy | https://www.withings.com/en-us/policies/privacy-policy | 2026-11-11 | 2026-09-23 |
| Terms | https://www.withings.com/en-us/policies/terms-of-service | 2026-11-11 | 2026-10-16 |
| Status page | https://status.withings.io/ | 2026-11-11 | 2026-09-23 |

## Subprocessors (18)

As its own list states them.

| Subprocessor | Purpose | Location | Listed since |
|---|---|---|---|
| BrainTree Signifyd | Version February 2025 Payment on WITHINGS website Payment management Payment on WITHINGS website Fight against fraud | — | 2026-09-23 |
| BSO | Hosting of WITHINGS infrastructures | — | 2026-09-23 |
| CPM TELUS International Playvox | Version February 2025 Support customer Support customer Support assessment of Support agents | — | 2026-09-23 |
| Dimotrans | delivery of products in | — | 2026-09-23 |
| [GCS (Google Cloud Storage)](https://thirdpartyindex.com/vendors/google-cloud.md) | are encrypted before sent to GCS in order to strengthen the confidentiality of personal data. | — | 2026-09-23 |
| [Google Ads](https://thirdpartyindex.com/vendors/google-cloud.md) | — | — | 2026-09-23 |
| Klarna | on WITHINGS website Payment management | — | 2026-09-23 |
| Logistech | Logistics Allows delivery of products in the USA | — | 2026-09-23 |
| Mailchimp Twilio | Sending emails (backup solution) Allows to send emails to users Sending SMS Sending SMS to use 2FA | — | 2026-09-23 |
| [Mailgun](https://thirdpartyindex.com/vendors/mailgun.md) | Sending emails Allows to send emails to users | — | 2026-09-23 |
| Meta Criteo | Marketing communications Allows us to present you ads adapted to your profile Version February 2025 | — | 2026-09-23 |
| [Revers.io](https://thirdpartyindex.com/vendors/revers-io.md) | services management of returns | — | 2026-09-23 |
| Shipup ShopRunBack | customer experience transport returns product returns | — | 2026-09-23 |
| [TikTok](https://thirdpartyindex.com/vendors/tiktok.md) | — | — | 2026-09-23 |
| \[US Only\] HeartBeat Health | Medical advice Validation of the first ECG recorded with the Scan Watch | — | 2026-09-23 |
| \[UScan Users only\] Google - Vertex AI | AI platform Offer a better understanding of the insights of the UScan. Enable to chat with a conversational agent | — | 2026-09-23 |
| Youtube | — | — | 2026-09-23 |
| [Zendesk](https://thirdpartyindex.com/vendors/zendesk.md) | Provides a more efficient customer relationship management | — | 2026-09-23 |

Read from ([evidence](https://thirdpartyindex.com/evidence/7076)). CSV: https://thirdpartyindex.com/vendors/withings/subprocessors.csv

### Its own affiliates (1)

- WITHINGS

## Web Technologies

Withings's homepage made 660 requests to 70 domains, 46 services controlled by another company, and 10 domains not identified. Loaded on 2026-10-14 by a browser that accepted nothing; other visits may load more or less. What a page loads is not a list of who receives customer data.

46 third parties by category: Advertising 25 (Microsoft, ID5 Technology Ltd, OpenAI, Reddit, Inc.; reviewed: Criteo, ArtsAI, BidSwitch GmbH, Claritas, LLC, Equativ, Improve Digital, Index Exchange Inc., Media.net Advertising FZ-LLC, MediaWallah, LLC, Mediavine, Inc., Nativo Inc., Nexxen, Revcontent, LLC, TPMN, Tapad, Inc., TripleLift; usually detected as Advertising: Magnite, Inc., PubMatic, Xandr, Taboola, Teads); Analytics 6 (Shopify, Cloudflare, Magellan AI, Northbeam, LinkedIn; usually detected as Analytics: Meta); Marketing automation 2 (Klaviyo, Adobe); Tag managers 1 (Google Cloud); A/B Testing 1 (AB Tasty); Cookie compliance 1 (Didomi SAS); CDN 1 (Amazon Web Services); Email 1 (usually detected as Email: LiveIntent); Personalisation 1 (Webyn); Widgets 1 (Outbrain); Unclassified 6 (Yotpo, Signifyd, Inc., Klarna Bank AB (publ), Intelligems, Inc., OuterSignal Inc., Trybe, Inc.). Each company that appears controlled by another organization is counted once, under the main category of the technologies detected from it on this homepage or, when none was, the category recorded from the company's own page (marked reviewed) or else the one it is usually detected as on other published homepages (marked as such); unclassified: none of these.

### Third parties (46)

- Shopify: 35 requests to shopify.com, shopifysvc.com, shop.app; Shopify, Signifyd
- Yotpo: 29 requests to yotpo.com
- Klaviyo: 24 requests to klaviyo.com; Klaviyo
- Signifyd, Inc.: 19 requests to signifyd.com
- Microsoft: 17 requests to clarity.ms, bing.com; Microsoft Advertising
- Google Cloud: 11 requests to doubleclick.net, fonts.googleapis.com, google.com, googlesyndication.com, google.co.uk, googletagmanager.com; Google Tag Manager (its subprocessor list names it too)
- AB Tasty: 8 requests to abtasty.com; AB Tasty
- Cloudflare: 7 requests to cloudflareinsights.com; Cloudflare Browser Insights
- Webyn: 7 requests to webyn.ai; Webyn
- Criteo: 6 requests to criteo.com
- Outbrain: 6 requests to outbrain.com; Outbrain
- ID5 Technology Ltd: 5 requests to id5-sync.com, eu-1-id5-sync.com; ID5
- Klarna Bank AB (publ): 4 requests to klarna.com
- Magellan AI: 4 requests to mgln.ai; Magellan AI
- Northbeam: 4 requests to northbeam.io; Northbeam
- OpenAI: 4 requests to openai.com; ChatGPT Ads Measurement Pixel
- Adobe: 3 requests to marketo.net, mktoresp.com; Marketo
- Didomi SAS: 3 requests to privacy-center.org; Didomi
- Intelligems, Inc.: 3 requests to intelligems.io
- LinkedIn: 3 requests to linkedin.com, licdn.com; Linkedin Insight Tag
- Reddit, Inc.: 3 requests to reddit.com, redditstatic.com; Reddit Ads
- ArtsAI: 2 requests to arttrk.com
- Magnite, Inc.: 2 requests to rubiconproject.com, tremorhub.com
- PubMatic: 2 requests to pubmatic.com
- Xandr: 2 requests to adnxs.com
- Amazon Web Services: 1 request to s3.eu-west-1.amazonaws.com; Amazon S3
- BidSwitch GmbH: 1 request to bidswitch.net
- Claritas, LLC: 1 request to trkn.us
- Equativ: 1 request to smartadserver.com
- Improve Digital: 1 request to 360yield.com
- Index Exchange Inc.: 1 request to casalemedia.com
- LiveIntent: 1 request to liadm.com
- Media.net Advertising FZ-LLC: 1 request to media.net
- MediaWallah, LLC: 1 request to mediawallahscript.com
- Mediavine, Inc.: 1 request to mediavine.com
- Meta: 1 request to facebook.com
- Nativo Inc.: 1 request to postrelease.com
- Nexxen: 1 request to 1rx.io
- OuterSignal Inc.: 1 request to outersignal.com
- Revcontent, LLC: 1 request to revcontent.com
- TPMN: 1 request to tpmn.co.kr
- Taboola: 1 request to taboola.com
- Tapad, Inc.: 1 request to tapad.com
- Teads: 1 request to teads.tv
- TripleLift: 1 request to 3lift.com
- Trybe, Inc.: 1 request to jointrybe.com

### Unknown (10)

Domains not identified yet: alia-prod.com, online-metrix.net, cjintegrations.com, mczbf.com, clmbtech.com, redirectify.app, replo.app, shopifycdn.com, shopmy.us, yotpoapi.com

### First party (1)

- Withings: 397 requests to withings.com; Alia, Amazon Web Services, Apple Pay, ArtsAI, Cloudflare, Criteo, Google Analytics, Google Font API, HSTS, HTTP/3, Klarna Checkout, Klaviyo Reviews, Microsoft Clarity, Open Graph, Priority Hints, Rudderstack, Shop Pay, Snowplow Analytics, Swiper, core-js 2.6.12, lit-element 4.2.2, lit-html 3.3.3

16 tracked companies loaded by the homepage are not in Withings's subprocessor list. A website can use a service without it processing customer data.

## Subprocessor of (1)

Tracked vendors whose own subprocessor lists name it, and what they say they use it for.

- [8fit](https://thirdpartyindex.com/vendors/8fit.md): Hosting and managed services Security page

## Incidents reported by Withings's subprocessors

Incidents reported in the last 30 days on their own status pages by 1 vendor Withings lists as a subprocessor. A subprocessor list names a company, not the service an incident touched.

- 2026-10-28: [Mailgun](https://thirdpartyindex.com/vendors/mailgun#status), which Withings lists as a subprocessor, reported Route delays in EU Region (minor)

The subprocessor list as we read it on any date: https://thirdpartyindex.com/labs/time-machine/withings

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api