← Legal Center

Authorized Subprocessors List

A list of our third-party cloud subprocessors that may process customer data for the provision of our services, maintained to satisfy global data protection obligations.

Authorized Subprocessors Last updated: July 2026

To support the delivery of our Services (including the ThreatModeler SaaS platform, Nexus, Professional Services, Academy, and Customer Support), ThreatModeler Software, Inc. and its affiliates engage the third-party entities listed below as subprocessors.

To accommodate our global customer base, the geographical location where customer data is hosted and processed is strictly determined by the hosting region mutually agreed by the Parties.

Subprocessor Name Category / Function Corporate Address Service Description Processing Location
Amazon Web Services, Inc. (AWS)Core Infrastructure410 Terry Avenue North, Seattle, WA 98109-5210, USAPrimary Cloud Infrastructure and Platform Hosting.Based on the customer's selected hosting region.
Microsoft Corporation (Azure & Azure Boards)Core Infrastructure
Customer Support & Platform Integration
One Microsoft Way, Redmond, WA 98052-6399, USAEnterprise-grade hosting of Large Language Models (LLMs) via Azure OpenAI.

Integration to link security requirements and threat tasks to Customer's sprint planning and DevOps boards.
United States (USA) (Azure OpenAI LLM model processing is hosted exclusively on US-based secure endpoints)
Google LLC (Google Cloud)Core Infrastructure1600 Amphitheatre Parkway, Mountain View, CA 94043, USACloud Infrastructure hosting, database management, and enterprise-grade hosting of LLMs via Google Vertex AI.Based on the customer's selected hosting region.
Cloudflare, Inc.Core Infrastructure101 Townsend St, San Francisco, CA 94107, USAWeb Application Firewall (WAF), Content Delivery Network (CDN), and edge routing security.Global Edge Network (nearest to the user's location).
Symmetry Systems, Inc.Core Infrastructure400 S El Camino Real Suite 1050, San Mateo, CA 94402, USAData Security Posture Management (DSPM) and real-time monitoring of sensitive data and AI agentsUnited States (USA) / Global Network.
Binary Defense Systems, Inc.Core Infrastructure600 Alpha Pkwy, Stow, OH 44224, United StatesManaged Detection and Response (MDR), threat hunting, and security information event monitoring (SIEM)United States (USA) / Global Network.
Broadcom Inc. (Symantec Enterprise)Core Infrastructure3401 Hillview Ave, Palo Alto, CA 94304, USACloud cybersecurity tools, data-centric hybrid security, and enterprise threat preventionUnited States (USA) / Global Network.
Slack Technologies, LLCCustomer Support500 Howard Street, San Francisco, CA 94105, USAEnterprise communication and direct customer interaction with CS.United States (USA) / Global Network.
Salesforce, Inc. (Service Cloud)Customer Support415 Mission St, San Francisco, CA 94105, USACustomer Support ticketing platform, live chat, and customer case management.United States (USA)
Atlassian Pty Ltd (Jira)Customer Support & Platform Integration341 George St, Sydney, NSW 2000, AustraliaTechnical bug tracking, developer ticketing escalation, and secure custom feature request logging.United States (USA)
Service Now, Inc.Customer Support & Platform Integration2225 Lawson Lane, Santa Clara, CA 95054, USAIntegration to export and sync threat models and security tasks into Customer's corporate ServiceNow instances.United States (USA)
MantisHub LLCCustomer Support & Platform IntegrationPO Box 3317, Seattle, WA 98114, USAIntegration to export and track software security defects and vulnerabilities in Customer's Mantis issue trackers.United States (USA)
Peeklogic LLCCustomer Support440 N Barranca Ave #1029, Covina, CA 91723, USASoftware connector linking Salesforce Service Cloud and Jira.United States (USA).
Splunk, Inc. (Splunk On-Call)Customer Support270 Brannan St, San Francisco, CA 94107, USASecurity, monitoring, and real-time incident alerting software for SaaS deployments.United States (USA).
Rocketlane Technologies, Inc.Professional Services (PS)2035 Sunset Lake Road, Suite B-2, Newark, DE 19702, USACustomer onboarding portal, managing Professional Services (PS) deliverables, milestones, and project resources.United States (USA).
LearnWorlds (LearnWorlds CY Ltd)Professional Services (PS)14 Pramantorou Street, 2018 Strovolos, Nicosia, CyprusLearning Management System (LMS) used to host and deliver ThreatModeler Academy training.Cyprus
Accredible (Growlabs, Inc.)Professional Services (PS)201 Mission St, San Francisco, CA 94105, USAGenerates and hosts digital training certificates for users completing ThreatModeler Academy.United States (USA).
Zapier, Inc.Professional Services (PS)548 Market St #14147, San Francisco, CA 94104, USAWorkflow automation provider connecting LMS registration with reporting tools.United States (USA).
PostHog, Inc.Product Analytics2261 Market Street #4008, San Francisco, CA 94114, USAProduct analytics and user interaction tracking. Note: All data collected is strictly de-identified and anonymized.United States (USA).
ChurnZeroCustomer Analytics717 D Street NW, 2nd Floor, Washington D.C., 20004, USACustomer management platform. Tracks platform usage, meetings and customer health.United States (USA).
Domo, Inc.Product Analytics772 East Utah Valley Drive, American Fork, UT 84003, USABusiness intelligence platform used to track customer license utilization and metrics.United States (USA).
ThreatModeler Software, Inc.Corporate Affiliate101 Hudson Street, Suite 2100, 21st Floor, Jersey City, NJ 07302, USAProvision of global engineering, technical support, customer success, and platform maintenance services.United States (USA)
ThreatModeler Software, S.L. (former IriusRisk, S.L.)Corporate AffiliateParque Tecnológico Walqa, 22197 Huesca, Aragon, SpainProvision of global engineering, technical support, customer success, and platform maintenance services.Spain
ThreatModeler Software, Ltd. (former IriusRisk, Ltd.)Corporate Affiliate128 City Road, London, EC1V 2NX, United KingdomProvision of global engineering, technical support, customer success, and platform maintenance services.United Kingdom (UK)
ThreatModeler Software India Private LimitedCorporate AffiliateGraphix - 2, A - 13, 10th Floor, Sector - 62, Noida, Gautam Buddha Nagar, Uttar Pradesh, 201301, IndiaProvision of global engineering, technical support, customer success, and platform maintenance services.India

Scroll horizontally to view all columns on smaller screens.

Privacy Team & Subprocessor Updates

Customers may subscribe to receive notifications of any future additions or replacements to this Subprocessor List by clicking "Subscribe to Updates" in the ThreatModeler Trust Center, or by emailing our Privacy Team at privacy@threatmodeler.com. ThreatModeler will use commercially reasonable efforts to notify subscribed customers at least fifteen (15) days in advance of authorizing any new subprocessor.