FlowConsent
How it worksPricingComparisonsBlogDocumentationLog inTry FlowConsent
Try FlowConsent
Other

AppDynamics

Analytics

Cisco AppDynamics is an application performance monitoring (APM) platform. Its core tracing is server side, but the optional Browser Real User Monitoring (RUM) feature injects JavaScript that sets ADRUM cookies and captures page performance, session and IP data. When RUM is enabled the tool becomes non essential and consent is generally required in the EU.

Block AppDynamics until consentScan my site
Overview

What does AppDynamics do?

What Cisco AppDynamics is

Cisco AppDynamics is an application performance monitoring platform used to trace transactions, detect errors and measure how applications and infrastructure behave. Most of its monitoring is server side through language agents, but it also offers Browser Real User Monitoring, known as RUM or End User Monitoring, which observes the experience of real visitors in the browser.

Data and cookies collected

Server side APM agents collect technical telemetry about your application and do not set cookies in the visitor browser. The Browser RUM feature is different, it injects a JavaScript agent that sets ADRUM cookies and captures page load timing, errors, browser and device details, the visitor IP address and session identifiers. That browser data can identify individuals and is personal data under the GDPR.

GDPR and ePrivacy implications

If only server side APM is used, you can usually rely on legitimate interest for operational performance monitoring. Once Browser RUM is enabled, the ADRUM cookies are not strictly necessary for a service the visitor requested, so the ePrivacy Directive requires prior consent before they are set, and the IP and session data must have a valid GDPR basis and be disclosed.

Consent requirements

Where Browser RUM is active, load the ADRUM script only after the visitor consents to performance or analytics cookies, and block it behind your consent manager until then. If you run server side APM only, no browser consent is needed because nothing is stored on the visitor device, though you still document the processing.

Data transfers to the United States

AppDynamics is a Cisco product and its SaaS controllers and RUM collectors may run on infrastructure in the United States or other regions. When RUM data including IP addresses leaves the EEA, you need a transfer mechanism such as the Data Privacy Framework or Standard Contractual Clauses. Choosing an in region controller can help keep server side data within the EEA.

Practical compliance steps

Decide whether you need Browser RUM at all, gate it behind consent if you do, consider IP anonymisation, sign a data processing agreement with Cisco, confirm the controller region and transfer mechanism, list the ADRUM cookies in your cookie policy and document the lawful basis for server side monitoring.

Compliance

AppDynamics and the GDPR

AppDynamics is classified as “Analytics”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy.

Legal basis
Consent under Article 6(1)(a) GDPR where Browser RUM cookies are used; legitimate interest under Article 6(1)(f) for server side performance monitoring
Risk level
medium
Applicable regulations
GDPR, ePrivacy Directive

Impact assessment (DPIA)

Server side APM alone is low risk and a DPIA is rarely needed. When Browser RUM or End User Monitoring is enabled, assess the risk of systematic collection of IP addresses and session data and document the processing, since combined behavioural monitoring across many users can raise the risk profile.

Sample text for your banner

We use Cisco AppDynamics Browser Monitoring to measure page performance. This sets cookies and may transfer performance data and your IP address to Cisco outside the EU. Do you accept performance monitoring?
Cookies and trackers

What AppDynamics sets and contacts

Tracking method
Server side APM agents, plus optional Browser Real User Monitoring (RUM) JavaScript that injects a beacon and sets ADRUM cookies
Server location
United States and global Cisco AppDynamics infrastructure (SaaS controllers in multiple regions)
Data transferred outside the EU
When Browser RUM is enabled, performance and end user data including IP addresses may be processed on Cisco infrastructure outside the EEA, including the United States, relying on Standard Contractual Clauses or the Data Privacy Framework. Pure server side APM can be configured to stay in region.

Cookies set (3)

NameTypeDurationPurpose
ADRUMPerformance / RUMSessionCorrelates browser RUM beacons with a user session for performance monitoring
ADRUM_BTPerformance / RUMSessionIdentifies the business transaction for end user monitoring
ADRUM_BTaPerformance / RUMSessionStores business transaction context for RUM correlation

Third-party domains contacted (3)

  • appdynamics.com
  • eum-appdynamics.com
  • cdn.appdynamics.com
Questions

Frequently asked questions about AppDynamics

Can't find your question? Write to us, we answer fast.

What cookies does AppDynamics set?

Server side APM sets no browser cookies. When Browser RUM is enabled it sets ADRUM cookies such as ADRUM, ADRUM_BT and ADRUM_BTa to correlate performance beacons with a user session.

Do I need consent to use AppDynamics?

It depends on the mode. Pure server side APM needs no browser consent. If Browser RUM is enabled, the ADRUM cookies are non essential, so prior consent is required under the ePrivacy Directive.

What is the legal basis for AppDynamics?

Server side performance monitoring can rely on legitimate interest under Article 6(1)(f) GDPR. Browser RUM that sets cookies and captures IP and session data needs consent under Article 6(1)(a).

Does AppDynamics transfer data to the United States?

It can. AppDynamics is a Cisco product and its SaaS controllers and RUM collectors may run in the US, so when RUM data including IP addresses leaves the EEA you need a transfer mechanism such as the Data Privacy Framework or Standard Contractual Clauses.

Do I need a DPIA for AppDynamics?

Server side APM rarely needs a DPIA. With Browser RUM enabled, assess the risk of systematic collection of IP and session data across many users and document the processing, carrying out a DPIA if the risk is high.

How do I implement AppDynamics compliantly?

Decide if you need Browser RUM, gate it behind consent if you do, consider IP anonymisation, sign a data processing agreement with Cisco, confirm the controller region and disclose the ADRUM cookies and the server side basis.

What are the alternatives to AppDynamics?

Alternatives include other APM tools such as server side only observability stacks, or EU hosted monitoring platforms. Choosing server side tracing without browser RUM avoids setting cookies on the visitor device.

How should I update my cookie policy for AppDynamics?

If Browser RUM is enabled, list the ADRUM cookies with their purpose and duration, name Cisco as a recipient, explain possible US transfers and describe how visitors withdraw consent. Server side only setups need no cookie entry.

Same category

More services: Other

See the whole category

Microsoft 365

Microsoft 365 is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Microsoft 365 integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Microsoft 365 helps organizations maintain robust websites that meet user expectations and technical requirements.

Other

DrChrono

DrChrono is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. DrChrono supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, DrChrono ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

Preferences

Gerrit

Gerrit is an analytics and measurement platform providing deep insights into digital ecosystem performance. It tracks user interactions, measures campaign effectiveness, and identifies optimization opportunities across web and mobile. Gerrit offers customizable dashboards, automated alerts, and data export capabilities. By transforming raw data into actionable intelligence, Gerrit empowers organizations to optimize strategy and maximize return on investment.

Analytics

Muscula

Muscula is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Muscula integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Muscula helps organizations maintain robust websites that meet user expectations and technical requirements.

Preferences

Qualtrics

Qualtrics is a user preference and personalization service that helps websites deliver customized experiences based on individual visitor settings and choices. It manages preferences for content display, communication channels, and interaction styles. Qualtrics integrates with website platforms to remember and apply user choices consistently across sessions. With privacy-compliant preference storage, Qualtrics enhances satisfaction by ensuring tailored browsing experiences for every visitor.

Preferences

Proton Mail

Proton Mail is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Proton Mail supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Proton Mail ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

Other

Make your site compliant today.

Free up to 25,000 sessions a month. No credit card, no commitment.

Create my bannerScan my site