Related Links
Get Notified
Sign up to receive an email when Tenable updates our list of sub-processors by completing the form below.
For more information about Tenable Sub-processors or general questions about GDPR, please contact us at [email protected].
Tenable is committed to transparency and ensuring that all of our Sub-processors comply with the GDPR in processing Customer Personal Data. Tenable engages the following Sub-processors to perform specific processing activities on behalf of Customers:
| Party | Use case | Personal Data Types | Location of Processing | Comments / Justification |
|---|---|---|---|---|
| Amazon Web Services (AWS) Cloud | Hosting service for Tenable Vulnerability Management and customer data containers | Any Personal Data captured in Scan Data and Admin User Information | Either United States (Virginia, California, Ohio), Germany (Frankfurt), the UK (London), Singapore, Canada, Australia (Sydney), Japan (Tokyo), Brazil (Sao Paolo), India (Mumbai), and the UAE. | AWS directly supports our role as a Data Processor for customer's historical Scan Data. Native AWS Data Security and Access controls applied to the customer's containers help satisfy GDPR requirements for Tenable as a Data Processor and AWS as a Sub-Processor. |
| SendGrid | Email Notifications | Admin User Information | United States, UK | Used when a customer signs up for trials or requests a password reset. Serves as verification for valid email address. |
| Twilio | SMS Notifications and Two-factor Authentication | Admin User Information | United States | Phone number and authentication codes are sent to Twilio, but no information is shared to identify who the phone number belongs to. |
| Salesforce, Inc. | Customer Relationship Management | Admin User Information | United States | Salesforce assists us in managing our relationships and interactions with our customers. |
| Marketo, Inc. | Customer Relationship Management | Admin User Information | United States, Ireland | Marketo assists us in managing and automating our customer marketing initiatives. |
| TaskUs, Inc. | Customer account management | Admin user information | United States | TaskUs assists us in managing our customer database. |
| Highspot, Inc. | Customer Relationship Management, Sales Enablement Management | Business contact information | United States | Highspot assists us in delivering relevant content to our customers, including proposals and product-related training/educational materials. |
| Arrow ECS SAS | Customer Relationship Management | Business contact information | France | Arrow assists us in managing our relationships and interactions with our customers. |
| Splunk Inc. | Product Infrastructure Management | Admin User Information | United States | Splunk assists us managing our infrastructure and analyzing product log data. |
| G2.com, Inc. | Customer Relationship Management | Admin User Information | United States | G2.com assists us in improving customer experience initiatives. |
| Zift Solutions, Inc. | MSSP Relationship Management | Admin User Information | United States | Zift Solutions assists us in managing our relationships and interactions with our MSSP customers. |
| Microsoft Operations Ireland Limited (Azure) | Hosting service for Tenable Identity Exposure and individual customer instances. | Any Personal Data captured in indicator/exposure results, raw AD event metadata, and Admin User Information | France, Ireland, Netherlands, Hong Kong, England, Australia, Singapore, United States, UAE, India | Microsoft Azure is our cloud-service provider for the Tenable Identity Exposure product. |
| Snowflake Computing Netherlands B.V. | Hosting and data warehousing services | Any Personal Data captured in Scan Data and Admin User Information | Either the United States (Virginia, California, Ohio), Germany (Frankfurt), the UK (London), Singapore, Canada, Australia (Sydney), Japan (Tokyo), Brazil (Sao Paolo), India (Mumbai), and the UAE. | Snowflake provides data warehousing services for Tenable cloud products. |
| Malbec Solutions, Inc. (d/b/a Malbek) | Customer relationship management | Business contact information | United States | Malbec assists us in managing customer contracts and related documentation. |
| Demandbase, Inc. | Customer relationship management | Business contact information | United States | Demandbase assists us in improving our customer sales and marketing initiatives. |
| Sutherland Global Services, Inc. | Customer relationship management, technical support | User/administrator information | United States, Philippines | Sutherland Global Services assists us in managing our relationships/interactions with Nessus Professional trial users and providing them with technical support. |
| Databricks, Inc. | Data warehousing services | User/administrator information | United States | Databricks serves as the data warehouse for our customer relationship and account management platforms. |
| MongoDB, Inc. | Hosting and database services | Any personal data captured in scan data and admin/user information | Either United States (Virginia, California, Ohio), Germany (Frankfurt), the UK (London), Singapore, Canada, Australia (Sydney), Japan (Tokyo), Brazil (Sao Paolo), India (Mumbai), and the UAE. | MongoDB provides hosting and database services for Tenable Cloud Security. |
| Pendo.io, Inc. | In-platform communications, and platform analytics | Admin/user information and usage insights | United States | Pendo assists us in understanding how users interact with the Tenable One Platform and to send them in-platform notifications about their license. |
| Datadog, Inc | Product Infrastructure Management | Admin/user information | United States | Datadog assists us in managing our Tenable Cloud Security infrastructure and analyzing log data. |
In addition to the Sub-processors listed above, the following entities are affiliates of Tenable, and accordingly may also function as sub-processors.
| Entity Name | Country |
|---|---|
| Tenable, Inc. | United States |
| Tenable Network Security Limited | United Kingdom |
| Tenable Network Security Pte. Limited | Singapore |
| Tenable Network Security Netherlands B.V. | The Netherlands |
| Tenable Network Security GmbH | Germany |
| Tenable Network Security France SAS | France |
| Tenable Network Security Ireland Limited | Ireland |
| Tenable Network Security Netherlands B.V., Amsterdam, Zweigniederlassung Zurich | Switzerland |
| Tenable Network Security Sweden AB | Sweden |
| Tenable Network Security Belgium SPRL | Belgium |
| Tenable Network Security Denmark ApS | Denmark |
| Tenable Network Security Poland S.p Z.o.o | Poland |
| Tenable GmbH | Austria |
| Alsid SAS | France |
| Tenable Network Security Netherlands, B.V., Sucursal en Espana | Spain |
| Tenable Network Security Netherlands, B.V., Italian Branch | Italy |
| Ermetic Ltd. | Israel |
| Ermetic B.V. | The Netherlands |
| Tenable Network Security Ireland Limited (DMCC Branch) | The UAE |
| Tenable Network Sequranca Brasil LTDA | Brazil |
| Eureka Security, Inc. | United States |
| Eureka Security Ltd | Israel |
| Tenable Israel Ltd | Israel |