# Xactus Xactus declares [7 subprocessors](https://thirdpartyindex.com/vendors/xactus#subprocessors) in [its subprocessor list](https://trust.xactus.com/subprocessors), which we last checked on 2026-11-11 ([evidence](https://thirdpartyindex.com/evidence/55100)). They include [Amazon Web Services](https://thirdpartyindex.com/vendors/amazon-web-services), [Microsoft](https://thirdpartyindex.com/vendors/microsoft) and [Datadog](https://thirdpartyindex.com/vendors/datadog). No published changes since we first read it on 2026-09-22. [1 tracked vendor](https://thirdpartyindex.com/vendors/xactus#used-by), [Blackbaud](https://thirdpartyindex.com/vendors/blackbaud), names Xactus as a subprocessor. Xactus (xactus.com): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index. - Page: https://thirdpartyindex.com/vendors/xactus - Documents last verified: 2026-11-11 - Transparency rating: 71/100 (how much it publishes, not how secure it is): Subprocessor list 30/30; Processing locations 7/8 (partial); Purposes 1/7 (partial); Data processing addendum 0/12 (not found); Trust center 8/8; Privacy policy 6/6; security.txt 6/6; Security page 0/5 (not found); Status page 5/5; Vulnerability disclosure 0/5 (not found); Pages still reachable 8/8 - Supply chain: relies on 5 tracked vendors directly, 49 within two hops, 232 within three; 1 tracked vendors rely on it directly, 1 within two hops, 1 within three - Cite as: Xactus, Third Party Index, https://thirdpartyindex.com/vendors/xactus (data CC BY 4.0) ## Documents | Document | URL | Last verified | Last changed | |---|---|---|---| | Trust center | https://trust.xactus.com/ | 2026-11-11 | 2026-11-11 | | Subprocessor list | https://trust.xactus.com/subprocessors | 2026-11-11 | 2026-10-06 | | Privacy policy | https://xactus.com/privacy-policy/ | 2026-11-11 | 2026-09-22 | | security.txt | https://xactus.com/.well-known/security.txt | 2026-11-11 | 2026-10-26 | | Status page | https://status.xactus.com/ | 2026-11-11 | 2026-11-11 | ## Subprocessors (7) As its own list states them. | Subprocessor | Purpose | Location | Listed since | |---|---|---|---| | [Amazon Web Services](https://thirdpartyindex.com/vendors/amazon-web-services.md) | Cloud Hosting Services | United States | 2026-10-01 | | [Datadog](https://thirdpartyindex.com/vendors/datadog.md) | — | Cloud monitoring | 2026-10-01 | | [Five9](https://thirdpartyindex.com/vendors/five9.md) | — | Contact Center | 2026-10-01 | | [Freshdesk](https://thirdpartyindex.com/vendors/freshworks.md) | — | Customer support | 2026-10-01 | | [Microsoft Azure](https://thirdpartyindex.com/vendors/microsoft.md) | — | Cloud provider | 2026-10-01 | | [Office 365](https://thirdpartyindex.com/vendors/microsoft.md) | — | Collaboration | 2026-10-01 | | Shred-It, LLC | — | — | 2026-10-01 | Read from ([evidence](https://thirdpartyindex.com/evidence/8800)). CSV: https://thirdpartyindex.com/vendors/xactus/subprocessors.csv ## Compliance As its trust center lists them. - Audited: SOC 2 Type II ([evidence](https://thirdpartyindex.com/evidence/13505)) - Claimed: NIST CSF ([evidence](https://thirdpartyindex.com/evidence/29313)) ## Web Technologies Xactus's homepage made 109 requests to 9 domains, and 4 services controlled by another company. Loaded on 2026-11-09 by a browser that accepted nothing; other visits may load more or less. What a page loads is not a list of who receives customer data. 4 third parties by category: Analytics 1 (Google Cloud); Cookie compliance 1 (Hu-manity Rights, Inc.); Issue trackers 1 (Sentry); Video players 1 (Wistia). Each company that appears controlled by another organization is counted once, under the main category of the technologies detected from it on this homepage or, when none was, the category recorded from the company's own page (marked reviewed) or else the one it is usually detected as on other published homepages (marked as such); unclassified: none of these. ### Third parties (4) - Wistia: 17 requests to wistia.com; Wistia - Google Cloud: 13 requests to fonts.googleapis.com, google.com, doubleclick.net, googletagmanager.com; Google Analytics, Google Sign-in, Google Tag Manager - Hu-manity Rights, Inc.: 1 request to hu-manity.co; Cookie Compliance (Hu-manity.co) - Sentry: 1 request to sentry-cdn.com; Sentry 9.6.1 ### First party (1) - Xactus: 77 requests to xactus.com, xactusrevamp.wpenginepowered.com; Cloudflare, Cookie Notice 3.1.18, Cornerstone 7.7.8, GSAP, Google Font API, HSTS, HTTP/3, Lightbox, MediaElement.js 4.2.17, Moxie 1.3.5.1, MySQL, Open Graph, PHP, Plupload 2.1.9, Priority Hints, RSS, Site Kit 1.191.0, Slider Revolution 6.7.38, Twitter Emoji (Twemoji), WP Engine, WordPress, Yoast SEO 28.8, Yoast SEO Premium 26.6, hCaptcha, jQuery 3.7.1, jQuery Migrate 3.4.1, mOxie 2 tracked companies loaded by the homepage are not in Xactus's subprocessor list. A website can use a service without it processing customer data. ## Subprocessor of (1) Tracked vendors whose own subprocessor lists name it, and what they say they use it for. - [Blackbaud](https://thirdpartyindex.com/vendors/blackbaud.md) ## Service status Incidents it reported on its own status page. - Last 90 days: 9 reported incidents (3 major or critical, 5 minor, 1 with no impact stated) - Typical time to resolve: 27 h 16 min - Status page last read: 2026-11-12 - Its status page says now: Minor Service Outage (affected: Income: partial outage) - Under way: AccountChek Asset Verification Service Disruption (minor), since 2026-11-10 21:06 UTC - 2026-11-11: Encompass Partner Connect (EPC) Credit – Order Submission Issue (minor) - 2026-11-10: AccountChek Asset Verification Service Disruption (minor) - 2026-11-09: Social Security Verification Processing Delay (minor) - 2026-11-06: Credit Report Rendering Issue (minor) - 2026-10-20: Equifax Credit Request Errors (major) - 2026-10-19: Social Security VerificationX — Processing Delays (major) - 2026-10-06: Undisclosed DebtX: Encompass Automated Service Ordering (ASO) (major) - 2026-09-25: Equifax Activation Delays - Undisclosed DebtX (no impact stated) ## Incidents reported by Xactus's subprocessors Incidents reported in the last 30 days on their own status pages by 1 vendor Xactus lists as a subprocessor. A subprocessor list names a company, not the service an incident touched. - 2026-10-28: [Datadog](https://thirdpartyindex.com/vendors/datadog#status), which Xactus lists as a subprocessor, reported Metrics query are disrupted (major) - 2026-10-26: [Datadog](https://thirdpartyindex.com/vendors/datadog#status), which Xactus lists as a subprocessor, reported Elevated Error Rates for Workflow Automation, App Builder, Bits Code, Bits Agent Builder (major) The subprocessor list as we read it on any date: https://thirdpartyindex.com/labs/time-machine/xactus ## Security contact From its security.txt (https://xactus.com/.well-known/security.txt) ([evidence](https://thirdpartyindex.com/evidence/159020)): - Contact: https://xactus.com/responsible-vulnerability-disclosure/ - Contact: mailto:security@xactus.com - Languages: en - Valid until 2027-10-20 --- Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api