Related Links
Get Notified
Sign up to receive an email when Tenable updates our list of sub-processors by completing the form below.
For more information about Tenable Sub-processors or general questions about GDPR, please contact us at [email protected].
Tenable is committed to transparency and ensuring that all of our Sub-processors comply with the GDPR in processing Customer Personal Data. Tenable engages the following Sub-processors to perform specific processing activities on behalf of Customers:
Party | Use case | Personal Data Types | Location of Processing | Comments / Justification |
---|---|---|---|---|
Amazon Web Services (AWS) Cloud | Hosting service for Tenable Vulnerability Management and customer data containers | Any Personal Data captured in Scan Data and Admin User Information | Either United States (Virginia, California, Ohio), Germany (Frankfurt), the UK (London), Singapore, Canada, Australia (Sydney), Japan (Tokyo), Brazil (Sao Paolo), India (Mumbai), and the UAE. | AWS directly supports our role as a Data Processor for customer's historical Scan Data. Native AWS Data Security and Access controls applied to the customer's containers help satisfy GDPR requirements for Tenable as a Data Processor and AWS as a Sub-Processor. |
SendGrid | Email Notifications | Admin User Information | United States, UK | Used when a customer signs up for trials or requests a password reset. Serves as verification for valid email address. |
Twilio | SMS Notifications and Two-factor Authentication | Admin User Information | United States | Phone number and authentication codes are sent to Twilio, but no information is shared to identify who the phone number belongs to. |
Salesforce, Inc. | Customer Relationship Management | Admin User Information | United States | Salesforce assists us in managing our relationships and interactions with our customers. |
Marketo, Inc. | Customer Relationship Management | Admin User Information | United States, Ireland | Marketo assists us in managing and automating our customer marketing initiatives. |
TaskUs, Inc. | Customer account management | Admin user information | United States | TaskUs assists us in managing our customer database. |
Highspot, Inc. | Customer Relationship Management, Sales Enablement Management | Business contact information | United States | Highspot assists us in delivering relevant content to our customers, including proposals and product-related training/educational materials. |
Arrow ECS SAS | Customer Relationship Management | Business contact information | France | Arrow assists us in managing our relationships and interactions with our customers. |
Splunk Inc. | Product Infrastructure Management | Admin User Information | United States | Splunk assists us managing our infrastructure and analyzing product log data. |
G2.com, Inc. | Customer Relationship Management | Admin User Information | United States | G2.com assists us in improving customer experience initiatives. |
Zift Solutions, Inc. | MSSP Relationship Management | Admin User Information | United States | Zift Solutions assists us in managing our relationships and interactions with our MSSP customers. |
Microsoft Operations Ireland Limited (Azure) | Hosting service for Tenable Identity Exposure and individual customer instances. | Any Personal Data captured in indicator/exposure results, raw AD event metadata, and Admin User Information | France, Ireland, Netherlands, Hong Kong, England, Australia, Singapore, United States, UAE, India | Microsoft Azure is our cloud-service provider for the Tenable Identity Exposure product. |
Snowflake Computing Netherlands B.V. | Hosting and data warehousing services | Any Personal Data captured in Scan Data and Admin User Information | Either the United States (Virginia, California, Ohio), Germany (Frankfurt), the UK (London), Singapore, Canada, Australia (Sydney), Japan (Tokyo), Brazil (Sao Paolo), India (Mumbai), and the UAE. | Snowflake provides data warehousing services for Tenable cloud products. |
Malbec Solutions, Inc. (d/b/a Malbek) | Customer relationship management | Business contact information | United States | Malbec assists us in managing customer contracts and related documentation. |
Demandbase, Inc. | Customer relationship management | Business contact information | United States | Demandbase assists us in improving our customer sales and marketing initiatives. |
Sutherland Global Services, Inc. | Customer relationship management, technical support | User/administrator information | United States, Philippines | Sutherland Global Services assists us in managing our relationships/interactions with Nessus Professional trial users and providing them with technical support. |
Databricks, Inc. | Data warehousing services | User/administrator information | United States | Databricks serves as the data warehouse for our customer relationship and account management platforms. |
MongoDB, Inc. | Hosting and database services | Any personal data captured in scan data and admin/user information | Either United States (Virginia, California, Ohio), Germany (Frankfurt), the UK (London), Singapore, Canada, Australia (Sydney), Japan (Tokyo), Brazil (Sao Paolo), India (Mumbai), and the UAE. | MongoDB provides hosting and database services for Tenable Cloud Security. |
Pendo.io, Inc. | In-platform communications, and platform analytics | Admin/user information and usage insights | United States | Pendo assists us in understanding how users interact with the Tenable One Platform and to send them in-platform notifications about their license. |
Datadog, Inc | Product Infrastructure Management | Admin/user information | United States | Datadog assists us in managing our Tenable Cloud Security infrastructure and analyzing log data. |
In addition to the Sub-processors listed above, the following entities are affiliates of Tenable, and accordingly may also function as sub-processors.
Entity Name | Country |
---|---|
Tenable, Inc. | United States |
Tenable Network Security Limited | United Kingdom |
Tenable Network Security Pte. Limited | Singapore |
Tenable Network Security Netherlands B.V. | The Netherlands |
Tenable Network Security GmbH | Germany |
Tenable Network Security France SAS | France |
Tenable Network Security Ireland Limited | Ireland |
Tenable Network Security Netherlands B.V., Amsterdam, Zweigniederlassung Zurich | Switzerland |
Tenable Network Security Sweden AB | Sweden |
Tenable Network Security Belgium SPRL | Belgium |
Tenable Network Security Denmark ApS | Denmark |
Tenable Network Security Poland S.p Z.o.o | Poland |
Tenable GmbH | Austria |
Alsid SAS | France |
Tenable Network Security Netherlands, B.V., Sucursal en Espana | Spain |
Tenable Network Security Netherlands, B.V., Italian Branch | Italy |
Ermetic Ltd. | Israel |
Ermetic B.V. | The Netherlands |
Tenable Network Security Ireland Limited (DMCC Branch) | The UAE |
Tenable Network Sequranca Brasil LTDA | Brazil |
Eureka Security, Inc. | United States |
Eureka Security Ltd | Israel |
Tenable Israel Ltd | Israel |