Annex III
You can download a copy of the Annex III by clicking here.
Annex III - Current Authorized Subprocessors (Effective September 10, 2026)
Sub-processor:
Reason for Sub-processing:
Data Processing Location(s):
Amazon Web Services
Securely host our infrastructure, ensuring reliable data storage, processing, and availability.
United States
Germany
Switzerland or Japan
Third Party Generative AI Service - access and utilize hosted AI models.
Global (Click here)
Location Optional
Customer may elect to disable Global Processing
Anthropic
Third Party Generative AI Service, used for access and use of hosted AI models.
United States
Datadog
Used to aggregate, search and analyze logs.
United States
DNSlytics
Gather domain and IP address intelligence for security analysis.
United States
Google Cloud Platform
Third Party Generative AI Service - access and utilize hosted AI models.
United States
Have I Been Pwned
Used to assess if credentials for users being investigated have been compromised.
Optional - Customer may elect to disable the applicable Service feature(s).
United States
IPInfo
Obtain geolocation and IP address based information.
Optional - Customer may elect to disable the applicable Service feature(s).
United States
Microsoft Azure
Third Party Generative AI Service - access and utilize hosted AI models.
Parallel
Providing web intelligence and search infrastructure specifically engineered for AI agents. This capability allows our AI-driven security systems to perform high-accuracy, real-time web research.
Optional - Customer may elect to disable the applicable Service feature(s).
United States
Posthog
Product and usage analytics services.
United States
Pylon
Used to create, process and manage support tickets.
United States
ReversingLabs
File hash values and domain names are shared to perform threat intelligence and malware analysis for detecting and preventing malicious activities.
Optional - Customer may elect to disable the applicable Service feature(s).
United States
Scrapfly
Web scraping and screenshot capture of webpages for the analysis of phishing emails and associated links.
United States
SerpApi
Retrieve real-time search engine results, enhancing the accuracy and relevance of our services.
Optional - Customer may elect to disable the applicable Service feature(s).
United States
Slack
Secure team communication and collaboration for support and operational purposes.
United States
Snowflake
Used for ad hoc analytics and generating internal operational reports.
United States or Germany
Spur
Identify and analyze VPNs, proxies, Tor nodes, and other anonymizing infrastructure.
Optional - Customer may elect to disable the applicable Service feature(s).
United States
URLScan
Used for scanning URLs for malicious content. This enhances our ability to analyze and neutralize web-based threats found within emails and other data streams.
Optional - Customer may elect to disable the applicable Service feature(s).
United States
VMRay
Providing an advanced malware sandbox and phishing threat analysis. This includes automated malware triage and analysis of samples.
Optional - Customer may elect to disable the applicable Service feature(s).
United States
Upcoming Subprocessors (Advance Notice Only)
Sub-processor:
Reason for Sub-processing:
Data Processing Location(s):
Expected Effective Date:
Greynoise
Identify IP addresses associated with internet-wide scanning and automated activity.
Optional - Customer may elect to disable the applicable Service feature(s).
United States
October 10, 2026
Mailgun
Used to deliver investigation notifications and platform alerts by email.
Optional - engaged only if Customer elects the applicable Service feature(s).
United States
October 10, 2026
OpenAI
Third Party Generative AI Service, used for access and use of hosted AI models.
United States
October 10, 2026
TypeSafe AI
Third Party AI Service, used for access and use of hosted classification models.
United States
October 31, 2026
