Annex III

You can download a copy of the Annex III by clicking here.

Annex III - Current Authorized Subprocessors (Effective September 10, 2026)

‍

Sub-processor:

Reason for Sub-processing:

Data Processing Location(s):

Amazon Web Services

Securely host our infrastructure, ensuring reliable data storage, processing, and availability.

United States
Germany
Switzerland or Japan

Third Party Generative AI Service - access and utilize hosted AI models.

Global (Click here)

Location Optional
Customer may elect to disable Global Processing

Anthropic

Third Party Generative AI Service, used for access and use of hosted AI models.

United States

Datadog

Used to aggregate, search and analyze logs.

United States

DNSlytics

Gather domain and IP address intelligence for security analysis.

United States

Google Cloud Platform

Third Party Generative AI Service - access and utilize hosted AI models.

United States

Have I Been Pwned

Used to assess if credentials for users being investigated have been compromised.

Optional - Customer may elect to disable the applicable Service feature(s).

United States

IPInfo

Obtain geolocation and IP address based information.

Optional - Customer may elect to disable the applicable Service feature(s).

United States

Microsoft Azure

Third Party Generative AI Service - access and utilize hosted AI models.

Global

(Click here)

Location Optional - Customer may elect to disable Global Processing.

Parallel

Providing web intelligence and search infrastructure specifically engineered for AI agents. This capability allows our AI-driven security systems to perform high-accuracy, real-time web research.

Optional - Customer may elect to disable the applicable Service feature(s).

United States

Posthog

Product and usage analytics services.

United States

Pylon

Used to create, process and manage support tickets.

United States

ReversingLabs

File hash values and domain names are shared to perform threat intelligence and malware analysis for detecting and preventing malicious activities.

Optional - Customer may elect to disable the applicable Service feature(s).

United States

Scrapfly

Web scraping and screenshot capture of webpages for the analysis of phishing emails and associated links.

United States

SerpApi

Retrieve real-time search engine results, enhancing the accuracy and relevance of our services.

Optional - Customer may elect to disable the applicable Service feature(s).

United States

Slack

Secure team communication and collaboration for support and operational purposes.

United States

Snowflake

Used for ad hoc analytics and generating internal operational reports.

United States or Germany

Spur

Identify and analyze VPNs, proxies, Tor nodes, and other anonymizing infrastructure.

Optional - Customer may elect to disable the applicable Service feature(s).

United States

URLScan

Used for scanning URLs for malicious content. This enhances our ability to analyze and neutralize web-based threats found within emails and other data streams.

Optional - Customer may elect to disable the applicable Service feature(s).

United States

VMRay

Providing an advanced malware sandbox and phishing threat analysis. This includes automated malware triage and analysis of samples.

Optional - Customer may elect to disable the applicable Service feature(s).

United States

‍

Upcoming Subprocessors (Advance Notice Only)

‍

Sub-processor:

Reason for Sub-processing:

Data Processing Location(s):

Expected Effective Date:

Greynoise

Identify IP addresses associated with internet-wide scanning and automated activity.

Optional - Customer may elect to disable the applicable Service feature(s).

United States

October 10, 2026

Mailgun

Used to deliver investigation notifications and platform alerts by email.

Optional - engaged only if Customer elects the applicable Service feature(s).

United States

October 10, 2026

OpenAI

Third Party Generative AI Service, used for access and use of hosted AI models.

United States

October 10, 2026

TypeSafe AI

Third Party AI Service, used for access and use of hosted classification models.

United States

October 31, 2026