# Ziflow

Ziflow declares [19 subprocessors](https://thirdpartyindex.com/vendors/ziflow#subprocessors) in [its subprocessor list](https://trust.ziflow.com/subprocessors), which we last checked on 2026-11-11 ([evidence](https://thirdpartyindex.com/evidence/200455)). They include [Amazon Web Services](https://thirdpartyindex.com/vendors/amazon-web-services), [Google Cloud](https://thirdpartyindex.com/vendors/google-cloud) and [OpenAI](https://thirdpartyindex.com/vendors/openai). The list last changed on 2026-11-02: 0 added, 0 removed, 1 changed. [2 tracked vendors](https://thirdpartyindex.com/vendors/ziflow#used-by) name Ziflow as a subprocessor, including [Cloudinary](https://thirdpartyindex.com/vendors/cloudinary) and [Acquia](https://thirdpartyindex.com/vendors/acquia).

Ziflow (ziflow.com): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/ziflow
- Documents last verified: 2026-11-11
- Transparency rating: 89/100 (how much it publishes, not how secure it is): Subprocessor list 30/30; Processing locations 8/8; Purposes 7/7; Data processing addendum 12/12; Trust center 8/8; Privacy policy 6/6; security.txt 0/6 (not found); Security page 5/5; Status page 5/5; Vulnerability disclosure 0/5 (not found); Pages still reachable 8/8
- Supply chain: relies on 18 tracked vendors directly, 163 within two hops, 470 within three; 2 tracked vendors rely on it directly, 48 within two hops, 1025 within three
- Cite as: Ziflow, Third Party Index, https://thirdpartyindex.com/vendors/ziflow (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Trust center | https://trust.ziflow.com/ | 2026-11-11 | 2026-11-10 |
| Subprocessor list | https://trust.ziflow.com/subprocessors | 2026-11-11 | 2026-11-02 |
| Data processing addendum | https://churnzero.com/data-processing-addendum/ | 2026-11-11 | 2026-10-01 |
| Privacy policy | https://www.ziflow.com/privacy-policy | 2026-11-11 | 2026-09-22 |
| Terms | https://www.ziflow.com/terms | 2026-11-11 | 2026-09-22 |
| Security page | https://www.ziflow.com/security | 2026-11-11 | 2026-09-22 |
| Status page | https://status.ziflow.com/ | 2026-11-11 | 2026-11-11 |

## Subprocessors (19)

As its own list states them.

| Subprocessor | Purpose | Location | Listed since |
|---|---|---|---|
| [Amazon Web Services](https://thirdpartyindex.com/vendors/amazon-web-services.md) | AWS cloud services; Hosting | USA | 2026-10-14 |
| [Anthropic](https://thirdpartyindex.com/vendors/anthropic.md) (AI model provider: Anthropic) | AI-powered features; AI-powered features (e.g. assistant, summarization, search) | USA | 2026-10-14 |
| [Auth0](https://thirdpartyindex.com/vendors/okta.md) | Authentication; Identity provider | USA | 2026-10-14 |
| [Avalara](https://thirdpartyindex.com/vendors/avalara.md) | Finance and payments; Tax compliance | USA | 2026-10-14 |
| [Brightcove (Zencoder)](https://thirdpartyindex.com/vendors/brightcove.md) | Video processing; Video processing - \[Download PDF\]( | USA | 2026-09-28 |
| [ChurnZero](https://thirdpartyindex.com/vendors/churnzero.md) | Customer analytics; Customer support | USA | 2026-10-14 |
| [Google Inc.](https://thirdpartyindex.com/vendors/google-cloud.md) | Marketing | USA | 2026-09-28 |
| [Google Gemini (Vertex AI)](https://thirdpartyindex.com/vendors/google-cloud.md) (AI model provider: Google Vertex AI / Gemini) | AI-powered features; AI-powered features (e.g. assistant, summarization, search) | USA | 2026-10-14 |
| [HubSpot](https://thirdpartyindex.com/vendors/hubspot.md) | Marketing; Marketing platform | USA | 2026-10-14 |
| [Logz.io](https://thirdpartyindex.com/vendors/logz-io.md) | Logs; Storage, processing and access to application logs - \[Download PDF\]( | USA | 2026-09-28 |
| [Maxio (ex Chargify)](https://thirdpartyindex.com/vendors/maxio.md) | Billing; account management - \[Download PDF\]( | USA | 2026-09-28 |
| [OpenAI](https://thirdpartyindex.com/vendors/openai.md) (AI model provider: OpenAI) | AI language model; AI language model, API | USA | 2026-10-14 |
| [Pendo](https://thirdpartyindex.com/vendors/pendo.md) | CRM, Customer behaviour analysis; Data analytics | USA | 2026-10-14 |
| [Salesforce](https://thirdpartyindex.com/vendors/salesforce.md) | CRM; Sales | USA | 2026-10-14 |
| [Slack](https://thirdpartyindex.com/vendors/slack.md) | CRM, Slack communicator; Collaboration | USA | 2026-10-14 |
| [Stripe](https://thirdpartyindex.com/vendors/stripe.md) | Finance and payments; Payment processing - \[Download PDF\]( | USA | 2026-09-28 |
| [Von](https://thirdpartyindex.com/vendors/vonlabs-ai.md) | Sales; Sales intelligence platform - \[Download PDF\]( | USA | 2026-11-02 |
| [Xero](https://thirdpartyindex.com/vendors/xero.md) | Finance and payments; Payments processing | USA | 2026-10-14 |
| [Zendesk](https://thirdpartyindex.com/vendors/zendesk.md) | Customer support; \[Download PDF\]( | USA | 2026-09-28 |

Read from ([evidence](https://thirdpartyindex.com/evidence/54154)). CSV: https://thirdpartyindex.com/vendors/ziflow/subprocessors.csv

AI model providers (or a cloud provider's AI model service) among these entries: 3. All vendors that list one: https://thirdpartyindex.com/ai

## Compliance

As its trust center lists them.

- Audited: SOC 2, ISO/IEC 27001 ([evidence](https://thirdpartyindex.com/evidence/92463))
- Claimed: SOC 2 Type II, GDPR ([evidence](https://thirdpartyindex.com/evidence/92463))

## Web Technologies

Ziflow's homepage made 190 requests to 45 domains, and 22 services controlled by another company. Loaded on 2026-11-04 by a browser that accepted nothing; other visits may load more or less. What a page loads is not a list of who receives customer data.

22 third parties by category: Analytics 9 (HubSpot, Demandbase, LinkedIn, Meta, G2.com, Leadfeeder, Quora, RB2B, ZoomInfo); Advertising 8 (Google Cloud, Reddit, Inc., Microsoft, OpenAI, X Corp.; reviewed: Index Exchange Inc.; usually detected as Advertising: Magnite, Inc., PubMatic); Marketing automation 1 (Salesloft); CDN 1 (UNPKG); Appointment scheduling 1 (Chili Piper); Customer data platform 1 (reviewed: LiveRamp); Documentation 1 (Zendesk). Each company that appears controlled by another organization is counted once, under the main category of the technologies detected from it on this homepage or, when none was, the category recorded from the company's own page (marked reviewed) or else the one it is usually detected as on other published homepages (marked as such); unclassified: none of these.

### Third parties (22)

- HubSpot: 35 requests to hubspot.com, hsforms.com, hubspotusercontent-na1.net, hs-banner.com, hscollectedforms.net, hs-analytics.net, hsadspixel.net, hsforms.net, hubapi.com; HubSpot Analytics (its subprocessor list names it too)
- Google Cloud: 28 requests to google.com, gstatic.com, doubleclick.net, googletagmanager.com, google-analytics.com; DoubleClick Floodlight, Google Analytics, Google Tag Manager, reCAPTCHA (its subprocessor list names it too)
- Zendesk: 14 requests to zdassets.com, zendesk.com; Zendesk, Zendesk Widget (its subprocessor list names it too)
- Reddit, Inc.: 4 requests to reddit.com, redditstatic.com; Reddit Ads
- Demandbase: 3 requests to company-target.com, demandbase.com; Demandbase 10.1.23
- LinkedIn: 3 requests to linkedin.com, licdn.com; Linkedin Insight Tag
- Meta: 3 requests to facebook.net, facebook.com; Facebook Pixel 2.9.435
- Microsoft: 3 requests to bing.com; Microsoft Advertising
- OpenAI: 3 requests to openai.com; ChatGPT Ads Measurement Pixel (its subprocessor list names it too)
- Salesloft: 3 requests to salesloft.com; Salesloft
- X Corp.: 3 requests to ads-twitter.com, t.co, twitter.com; Twitter Ads
- G2.com: 2 requests to g2.com, g2crowd.com; G2 Track Your Prospects
- Leadfeeder: 2 requests to leadfeeder.com, lfeeder.com; Leadfeeder
- Magnite, Inc.: 2 requests to rubiconproject.com, tremorhub.com
- Quora: 2 requests to quora.com; Quora Pixel
- UNPKG: 2 requests to unpkg.com; Unpkg, web-vitals 6.2.3
- Chili Piper: 1 request to chilipiper.com; Chili Piper
- Index Exchange Inc.: 1 request to casalemedia.com
- LiveRamp: 1 request to rlcdn.com
- PubMatic: 1 request to pubmatic.com
- RB2B: 1 request to ddwl4m2hdecbv.cloudfront.net; RB2B
- ZoomInfo: 1 request to zoominfo.com; Zoominfo

### First party (1)

- Ziflow: 72 requests to ziflow.com; Choices, Cloudflare, GSAP 3.12.5, HSTS, HTTP/3, HubSpot, HubSpot CMS Hub, HubSpot Cookie Policy Banner, Open Graph, Priority Hints, Sentry, Swiper, lit-element 3.3.3, lit-html 2.8.0

12 tracked companies loaded by the homepage are not in Ziflow's subprocessor list. A website can use a service without it processing customer data.

## Subprocessor of (2)

Tracked vendors whose own subprocessor lists name it, and what they say they use it for.

- [Acquia](https://thirdpartyindex.com/vendors/acquia.md): Ziflow is a cloud-based service embedded into Acquia DAM that allows users to annotate, review, and approve work-in-progress image and video files before releas…
- [Cloudinary](https://thirdpartyindex.com/vendors/cloudinary.md): Assets – Creative Review module

## Service status

Incidents it reported on its own status page.

- Last 90 days: 1 reported incidents (0 major or critical, 1 minor, 0 with no impact stated)
- Typical time to resolve: 4 h 41 min
- Status page last read: 2026-11-12
- 2026-10-21: Delays creating proofs from intake forms and workflows (minor)
- 2026-04-29: Proof Processing Performance Degradation (minor)
- 2026-04-29: Proof Processing Performance Degradation (minor)
- 2026-03-04: Error Combining Non-Static Proofs (minor)
- 2026-03-04: Inability to Access Comment Attachments (minor)
- 2026-02-27: Issues with Proof Notification Delivery (minor)
- 2026-02-27: Delayed Processing Speeds (minor)
- 2026-01-08: Delayed Processing Speeds (minor)

## Incidents reported by Ziflow's subprocessors

Incidents reported in the last 30 days on their own status pages by 7 vendors Ziflow lists as subprocessors. A subprocessor list names a company, not the service an incident touched.

- 2026-11-12: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Ziflow lists as a subprocessor, reported GPT-image-2.5 and 2.6 Sunburst & Flare High error rate (minor)
- 2026-11-11: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Ziflow lists as a subprocessor, reported Unable to start new Workspace Agent runs (critical)
- 2026-11-11: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Ziflow lists as a subprocessor, reported Elevated errors affecting logins, sign-ups, and ChatGPT features (minor)
- 2026-11-10: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Ziflow lists as a subprocessor, reported Elevated errors on Fable 52 and Mythos 52 (no impact stated)
- 2026-11-10: [HubSpot](https://thirdpartyindex.com/vendors/hubspot#status), which Ziflow lists as a subprocessor, reported Some HubSpot tools may be unavailable for some users (no impact stated)
- 2026-11-10: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Ziflow lists as a subprocessor, reported Incorrect cost data in Costs API exports (no impact stated)
- 2026-11-10: [Xero](https://thirdpartyindex.com/vendors/xero#status), which Ziflow lists as a subprocessor, reported Global: Xero Partner Hub - Some slowness or unable to access pages in Partner Hub (major)
- 2026-11-09: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Ziflow lists as a subprocessor, reported Elevated Errors On API (minor)
- 2026-11-09: [Xero](https://thirdpartyindex.com/vendors/xero#status), which Ziflow lists as a subprocessor, reported UK: HMRC connected services - MTD IT and MTD VAT (minor)
- 2026-11-09: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Ziflow lists as a subprocessor, reported Elevated ChatGPT Conversation Errors (minor)
- 2026-11-08: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Ziflow lists as a subprocessor, reported Elevated errors with image generation (minor)
- 2026-11-08: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Ziflow lists as a subprocessor, reported Degraded performance for Claude Fable 5.1 (minor)
- 2026-11-06: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Ziflow lists as a subprocessor, reported Elevated error rates with some U.S. business Mastercards (no impact stated)
- 2026-11-05: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Ziflow lists as a subprocessor, reported ChatGPT Work and Dots Errors (minor)
- 2026-11-04: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Ziflow lists as a subprocessor, reported Elevated error rates across paid ChatGPT plans (minor)
- 2026-11-04: [Logz.io](https://thirdpartyindex.com/vendors/logz-io#status), which Ziflow lists as a subprocessor, reported Data Ingestions Delays For Some Customers - Degraded Performance - us-east-1 (minor)
- 2026-11-04: [Pendo](https://thirdpartyindex.com/vendors/pendo#status), which Ziflow lists as a subprocessor, reported Degradation of Account and Visitor Reports (critical)
- 2026-11-03: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Ziflow lists as a subprocessor, reported File upload errors in ChatGPT (minor)
- 2026-11-02: [HubSpot](https://thirdpartyindex.com/vendors/hubspot#status), which Ziflow lists as a subprocessor, reported HubSpot is experiencing issues (no impact stated)
- 2026-11-01: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Ziflow lists as a subprocessor, reported Elevated Instant Payouts failures (no impact stated)
- 2026-10-30: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Ziflow lists as a subprocessor, reported Elevated errors with search in Dots, ChatGPT Work, and certain ChatGPT thinking experiences (minor)
- 2026-10-30: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Ziflow lists as a subprocessor, reported Elevated errors for GPT Image 2 API image edits (minor)
- 2026-10-28: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Ziflow lists as a subprocessor, reported Elevated Issuing errors from 17:13 - 20:41 UTC (minor)
- 2026-10-28: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Ziflow lists as a subprocessor, reported Elevated errors affecting the Google Calendar connector (minor)
- 2026-10-28: [Xero](https://thirdpartyindex.com/vendors/xero#status), which Ziflow lists as a subprocessor, reported Global: Xero - customers are experiencing issues across Xero (critical)
- 2026-10-28: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Ziflow lists as a subprocessor, reported Elevated errors affecting the Gmail connector (minor)
- 2026-10-27: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Ziflow lists as a subprocessor, reported Elevated errors for Claude Sonnet 5.5 (major)
- 2026-10-27: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Ziflow lists as a subprocessor, reported 6.1 Sol Degraded Model Performance (minor)
- 2026-10-27: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Ziflow lists as a subprocessor, reported Elevated errors for Claude Sonnet 5.5 (major)
- 2026-10-27: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Ziflow lists as a subprocessor, reported Elevated error rates for most hosted Code Reviews and Security Reviews on private GitHub repositories (no impact stated)
- 2026-10-26: [Xero](https://thirdpartyindex.com/vendors/xero#status), which Ziflow lists as a subprocessor, reported Global: Xero - some customers may be experiencing intermittent errors in Xero. (minor)
- 2026-10-26: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Ziflow lists as a subprocessor, reported Elevated error rates for Ads POST requests (minor)
- 2026-10-25: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Ziflow lists as a subprocessor, reported Elevated errors for Claude Fable 5.1 (major)
- 2026-10-25: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Ziflow lists as a subprocessor, reported Elevated errors for Claude Sonnet 5.5 and other models (major)
- 2026-10-24: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Ziflow lists as a subprocessor, reported Elevated Blik errors (no impact stated)
- 2026-10-24: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Ziflow lists as a subprocessor, reported Elevated errors for Claude Fable 5 and Claude Fable 5.1 (major)
- 2026-10-24: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Ziflow lists as a subprocessor, reported Elevated errors for Claude Opus 5.5 (major)
- 2026-10-23: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Ziflow lists as a subprocessor, reported Elevated errors for Claude Fable 5.1, Sonnet 5.5, and Haiku 5.5 (critical)
- 2026-10-23: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Ziflow lists as a subprocessor, reported Degraded experience with ChatGPT app connections using CIMD (minor)
- 2026-10-23: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Ziflow lists as a subprocessor, reported Help Center Chat Support Degraded (no impact stated)
- 2026-10-23: [HubSpot](https://thirdpartyindex.com/vendors/hubspot#status), which Ziflow lists as a subprocessor, reported Some HubSpot tools may be unavailable for some users (no impact stated)
- 2026-10-23: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Ziflow lists as a subprocessor, reported Delays in customer support responses (no impact stated)
- 2026-10-22: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Ziflow lists as a subprocessor, reported Elevated Bancontact errors (no impact stated)
- 2026-10-22: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Ziflow lists as a subprocessor, reported New Ad Accounts failing to provision admins (minor)
- 2026-10-22: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Ziflow lists as a subprocessor, reported Degraded Performance of Dots on Enterprise (minor)
- 2026-10-22: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Ziflow lists as a subprocessor, reported Elevated Bancontact errors (no impact stated)
- 2026-10-22: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Ziflow lists as a subprocessor, reported Elevated errors affecting Connectors (minor)
- 2026-10-22: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Ziflow lists as a subprocessor, reported Elevated ChatGPT conversation and Responses API errors (minor)
- 2026-10-22: [HubSpot](https://thirdpartyindex.com/vendors/hubspot#status), which Ziflow lists as a subprocessor, reported Update on PHP security vulnerability (no impact stated)
- 2026-10-21: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Ziflow lists as a subprocessor, reported Authentication errors for some users (major)
- 2026-10-21: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Ziflow lists as a subprocessor, reported Degraded performance for Claude Fable 5 (minor)
- 2026-10-21: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Ziflow lists as a subprocessor, reported Elevated error rates for gpt-5.6-luna API requests (minor)
- 2026-10-21: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Ziflow lists as a subprocessor, reported Elevated FedRAMP API error rates for Astra and Sol (minor)
- 2026-10-21: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Ziflow lists as a subprocessor, reported Degraded performance in ChatGPT, Codex, and APIs (minor)
- 2026-10-20: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Ziflow lists as a subprocessor, reported Spike in cancellations and expired errors with PayByBank payments (no impact stated)
- 2026-10-20: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Ziflow lists as a subprocessor, reported Elevated Revolut Pay errors (no impact stated)
- 2026-10-19: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Ziflow lists as a subprocessor, reported File Download errors (minor)
- 2026-10-15: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Ziflow lists as a subprocessor, reported Elevated declines on Mastercard (no impact stated)
- 2026-10-15: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Ziflow lists as a subprocessor, reported Elevated declines on Visa (no impact stated)
- 2026-10-15: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Ziflow lists as a subprocessor, reported Widespread feature degradation (major)
- 2026-10-15: [Xero](https://thirdpartyindex.com/vendors/xero#status), which Ziflow lists as a subprocessor, reported Global: Subscriptions - some customers are unable to purchase and management subscriptions (minor)
- 2026-10-15: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Ziflow lists as a subprocessor, reported Elevated Amazon Pay errors (no impact stated)
- 2026-10-14: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Ziflow lists as a subprocessor, reported Delayed Costs data in the Compliance API (minor)
- 2026-10-14: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Ziflow lists as a subprocessor, reported Limited availability on gpt-image-2.5-flare and gpt-image-2.5-sunburst (minor)
- 2026-10-14: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Ziflow lists as a subprocessor, reported Degraded performance in Codex and ChatGPT Work (minor)
- 2026-10-14: [Xero](https://thirdpartyindex.com/vendors/xero#status), which Ziflow lists as a subprocessor, reported Global: Xero - Some customers may be experiencing some errors in product and inability to view invoice PDFs. (major)

## Recent changes

Changes to its documents and subprocessor list since monitoring began.

- 2026-11-02: Changed subprocessor: Von (purpose: Sales, Sales intelligence platform → Sales, Sales intelligence platform - \[Download PDF\]() ([evidence](https://thirdpartyindex.com/evidence/200455))

Feed: https://thirdpartyindex.com/vendors/ziflow/changes.atom

The subprocessor list as we read it on any date: https://thirdpartyindex.com/labs/time-machine/ziflow

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api