Related Links
Get Notified
Sign up to receive an email when Tenable updates our list of sub-processors by completing the form below.
For more information about Tenable Sub-processors or general questions about GDPR, please contact us at [email protected].
Tenable is committed to transparency and ensuring that all of our Sub-processors comply with the GDPR in processing Customer Personal Data. Tenable engages the following Sub-processors to perform specific processing activities on behalf of Customers:
| Party | Use case | Personal Data Types | Location of Processing | Comments / Justification |
|---|---|---|---|---|
| Amazon Web Services (AWS) Cloud | Hosting service for Tenable.io and customer data containers | Any Personal Data captured in Scan Data and Admin User Information | Either United States (Virginia, California, Ohio), Germany (Frankfurt), the UK (London), Singapore, Canada, and Australia (Sydney). | AWS directly supports our role as a Data Processor for customer's historical Scan Data. Native AWS Data Security and Access controls applied to the customer's containers help satisfy GDPR requirements for Tenable as a Data Processor and AWS as a Sub-Processor. |
| SendGrid | Email Notifications | Admin User Information | United States, UK | Used when a customer signs up for trials or requests a password reset. Serves as verification for valid email address. |
| Twilio | SMS Notifications and Two-factor Authentication | Admin User Information | United States | Phone number and authentication codes are sent to Twilio, but no information is shared to identify who the phone number belongs to. |
| Salesforce, Inc. | Customer Relationship Management | Admin User Information | United States | Salesforce assists us in managing our relationships and interactions with our customers. |
| Marketo, Inc. | Customer Relationship Management | Admin User Information | United States, Ireland | Marketo assists us in managing and automating our customer marketing initiatives. |
| TaskUs, Inc. | Customer account management | Admin user information | United States | TaskUs assists us in managing our customer database. |
| Highspot, Inc. | Customer Relationship Management, Sales Enablement Management | Business contact information | United States | Highspot assists us in delivering relevant content to our customers, including proposals and product-related training/educational materials. |
| Arrow ECS SAS | Customer Relationship Management | Business contact information | France | Arrow assists us in managing our relationships and interactions with our customers. |
| Splunk Inc. | Product Infrastructure Management | Admin User Information | United States | Splunk assists us managing our infrastructure and analyzing product log data. |
| G2.com, Inc. | Customer Relationship Management | Admin User Information | United States | G2.com assists us in improving customer experience initiatives. |
| Zift Solutions, Inc. | MSSP Relationship Management | Admin User Information | United States | Zift Solutions assists us in managing our relationships and interactions with our MSSP customers. |
| Microsoft Operations Ireland Limited (Azure) | Hosting service for Tenable.ad and individual customer instances. | Any Personal Data captured in indicator/exposure results, raw AD event metadata, and Admin User Information | France, Ireland, Netherlands, Hong Kong, England, Australia, Singapore, United States, UAE, India | Microsoft Azure is our cloud-service provider for the Tenable.ad product. |
| Snowflake Computing Netherlands B.V. | Hosting and data warehousing services | Any Personal Data captured in Scan Data and Admin User Information | Either the United States (Virginia, California, Ohio), Germany (Frankfurt), the UK (London), Singapore, Canada, and Australia (Sydney). | Snowflake provides data warehousing services for Tenable cloud products. |
| Malbec Solutions, Inc. (d/b/a Malbek) | Customer relationship management | Business contact information | United States | Malbec assists us in managing customer contracts and related documentation. |
In addition to the Sub-processors listed above, the following entities are affiliates of Tenable, and accordingly may also function as sub-processors.
| Entity Name | Country |
|---|---|
| Tenable Holdings, Inc. | United States |
| Tenable, Inc. | United States |
| Tenable Public Sector LLC | United States |
| Tenable Network Security Limited | United Kingdom |
| Tenable Network Security Inc. | Canada |
| Tenable Network Security Pte. Limited | Singapore |
| Tenable Network Security Pty Ltd | Australia |
| Tenable Network Security Japan Kabushiki Kaisha | Japan |
| Tenable Network Security Hong Kong Limited | Hong Kong |
| Tenable Network Security GmbH | Germany |
| Tenable Network Security Netherlands B.V. | The Netherlands |
| Tenable Network Security Pte Limited | Malaysia |
| Tenable Network Security France SAS | France |
| Tenable Network Security Ireland Limited | Ireland |
| Tenable Network Security India Private Limited | India |
| Tenable Network Security Sweden AB | Sweden |
| Tenable Network Security Korea Ltd. | Korea |
| Tenable Network Security (Shanghai) Company Limited | China |
| Tenable Network Security (Shanghai) Company Limited Beijing Branch | China |
| Tenable Networks Seguridad Privada en Mexico | Mexico |
| Tenable Network Security Ireland (DMCC Branch) | UAE |
| Tenable Network Security Netherlands B.V., Amsterdam, Zurich Branch | Switzerland |
| Tenable Network Security Netherlands B.V., Italian Branch | Italy |
| Tenable Network Security Netherlands B.V., Sucursal en Espana | Spain |
| Tenable Network Seguridad Privada Chile SPA | Chile |
| Tenable Network Security Denmark ApS | Denmark |
| Tenable Network Security Pty Ltd, New Zealand Branch | New Zealand |
| Tenable Network Security Colombia, S.A.S. | Colombia |
| Tenable S.R.L. | Peru |
| Tenable Network Seguarança Brasil Ltda | Brazil |
| Tenable Argentina S.R.L. | Argentina |
| Tenable Israel Ltd | Israel |
| Tenable (Thailand) Ltd | Thailand |
| Tenable Turkey Ağ Güvenliği Hizmetleri Limited Şirket | Turkey |
| Tenable Network Security Poland S.p z.o.o | Poland |
| Tenable Network Security (PTY) LTD | South Africa |
| Kantor Perwakilan Perusahaan Asing Tenable Network Security Ireland Limited | Indonesia |
| Indegy Inc. | United States |
| Indegy Ltd. | Israel |
| Alsid SAS | France |
| Alsid Limited | United Kingdom |
| Alsid Inc. | United States |
| Tenable GmbH | Austria |
| Accurics, Inc. | United States |
| Accurics India Private Limited | India |
