Skip to content

Privacy Matters at Contrast Security

Sub-Processors List

List of Sub-Processors as of 11 April 2024

Contrast Security, Inc. (“Contrast”) uses Sub-processors to help in the delivery of products and to provide related support services to our customers. A sub-processor is a 3rd party organisation used by Contrast where we are acting as a processor that may process or have access to personal data.

To ensure that we remain transparent to our customers and to comply with regulatory requirements such as the General Data Protection Regulation (“GDPR”), we maintain an up-to-date list of the entities, functions, and locations of these sub-processors as referenced below. For any questions, please email rfp@contrastsecurity.com

Contrast performs rigorous assessments on the information security and data protection practices of its sub-processors and requires each to commit to written obligations regarding their security measures and to demonstrate compliance with applicable personal data protection laws and regulations and other policies.

Some of Contrast's sub-processors are only used with its cloud storage-based solutions. Please refer to the Service column to confirm whether a sub-processor is applicable to Enterprise On Premise installations.

To be notified whenever our Sub-processor listing is updated, please follow the link below:

Register Now

 

Contrast Security – List of Sub-Processors:

Sub-Processor

Contact Details of Sub-Processor and Data Privacy Officer

Processing Location of Data

Processing Operations of Sub-Processor

Contrast Service

Amazon Web Services (“AWS”)

410 Terry Avenue N Seattle, WA 98109 USA

DPO: https://aws.amazon.com/contact-us/compliance-support/

Customers in the U.S.
us-east-1 (Virginia USA) - primary
us-west-2 (Oregon, USA) - primary
us-east-2 (Ohio USA) - failover

Data of US customers does not leave US

Customers in the U.K. and E.U.
eu-west-2 (London, UK) - primary
eu-west-1 (Ireland) - failover
eu-west-3 (Paris, France)- failover
eu-central-1 (Frankfurt, Germany) - primary EU customers

Data of EU customers does not leave EU*

Customers in Japan

ap-northeast-1 (Tokyo, Japan)- primary
ap-northeast-3 (Osaka, Japan) - failover

Data of customers in Japan does not leave Japan

Cloud Hosting Provider

Backups of customer data

SaaS

Atlassian, Inc. (Jira/Confluence)

350 Bush Street
Floor 13
San Francisco, CA 94194 USA

DPO: Dataprotection@atlassian.com

United States

Privileged users could potentially process from any of these locations - Bulgaria, Canada, Germany, Isle of Man, Israel, Japan, Mexico, New Zealand, UK

Bug Tracking - Jira, Project Management

SaaS

On Premise

DarkTrace, Ltd.

555 Mission Street
Suite 3225
San Francisco, CA 94105 USA

DPO: privacy@darktrace.com

Headquartered in Cambridge, England and San Francisco, California, United States

Email Security

SaaS

On Premise

Datadog

620 8th Ave
45th Floor
New York, NY 10018 USA 

DPO: gdpr@datadoghq.com

privacy@datadoghq.com

United States

Log Aggregation, Alerting and Security Anomaly Detection

Confidential Data captured in Vulnerabilities or Attack Trace Data, Admin User Information

SaaS

Google Workspace

1600 Amphitheatre Pkwy
Mountain View, CA 94043 USA

DPO: https://support.google.com/policies/
contact/general_privacy_form

United States

Email, File Storage,  Collaboration, Hosting,  Platform Services

SaaS

On Premise

LinearB, Inc.

929 Colorado Ave.

Santa Monica, CA 90401 USA

DPO: privacy@linearb.io

United States

Bug tracking and metrics

SaaS

On Premise

Slack Technologies, Inc.

500 Howard Street
San Francisco, CA
94105 USA

DPO: dpo@slack.com

United States

Customer support communication and collaboration

SaaS

On Premise

Wiz, Inc.

One Manhattan West, 57th Floor
New York, NY 10001 USA

DPO: privacy@wiz.io

United States

Infrastructure Monitoring, Vulnerability Management, Threat Intelligence, Compliance Reporting

Vulnerability Data Related to the SaaS Environment

SaaS

Zendesk, Inc.

999 Market Street
San Francisco, CA 94103 USA

DPO: privacy@zendesk.com

euprivacy@zendesk.com

Attn: Privacy Team and DPO

United States 

Customer Success employees with privileged access could potentially access from any of these locations - Canada, Isle of Man, Japan, UK

Customer Support Portal/ Customer Relationship Management (“CRM”)

Customer Support Ticket Data

 

SaaS

On Premise

Zoom

55 Almaden Blvd
Suite 600
San Jose, CA 95113 USA

DPO: privacy@zoom.us

Attn: Data Protection Officer

United States

Conference Calling Communication

SaaS

On Premise

Professional Services

 

iWAconsolti

Prolongation of Oriente 6
#996 B Col.
Centro. Orizaba
Veracruz, MX  CP 94300 

DPO: Gerardo Arellano <garellano@iwa.com.mx>
bolsadetrabajo@iwa.com.mx

Mexico

Engineering/ R&D Support

SaaS

On Premise

Mechdyne

11 East Church
Street 4th Floor
Marshalltown, IA
50158 USA


DPO: at +1.641.754.4649

+44 116 318 4083

United States

IT Support Services

SaaS

On Premise

NLS Systems, Ltd.

147 Pinehaven Road
Pinehaven, Upper Hutt, 5019
New Zealand

info@nls.systems

New Zealand

Engineering/ R&D Support

SaaS

On Premise

 

*  unless otherwise specified in customer contract / agreement