Authorized Subprocessors List
A list of our third-party cloud subprocessors that may process customer data for the provision of our services, maintained to satisfy global data protection obligations.
To support the delivery of our Services (including the ThreatModeler SaaS platform, Nexus, Professional Services, Academy, and Customer Support), ThreatModeler Software, Inc. and its affiliates engage the third-party entities listed below as subprocessors.
To accommodate our global customer base, the geographical location where customer data is hosted and processed is strictly determined by the hosting region mutually agreed by the Parties.
| Subprocessor Name | Category / Function | Corporate Address | Service Description | Processing Location |
|---|---|---|---|---|
| Amazon Web Services, Inc. (AWS) | Core Infrastructure | 410 Terry Avenue North, Seattle, WA 98109-5210, USA | Primary Cloud Infrastructure and Platform Hosting. | Based on the customer's selected hosting region. |
| Microsoft Corporation (Azure & Azure Boards) | Core Infrastructure Customer Support & Platform Integration | One Microsoft Way, Redmond, WA 98052-6399, USA | Enterprise-grade hosting of Large Language Models (LLMs) via Azure OpenAI. Integration to link security requirements and threat tasks to Customer's sprint planning and DevOps boards. | United States (USA) (Azure OpenAI LLM model processing is hosted exclusively on US-based secure endpoints) |
| Google LLC (Google Cloud) | Core Infrastructure | 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA | Cloud Infrastructure hosting, database management, and enterprise-grade hosting of LLMs via Google Vertex AI. | Based on the customer's selected hosting region. |
| Cloudflare, Inc. | Core Infrastructure | 101 Townsend St, San Francisco, CA 94107, USA | Web Application Firewall (WAF), Content Delivery Network (CDN), and edge routing security. | Global Edge Network (nearest to the user's location). |
| Symmetry Systems, Inc. | Core Infrastructure | 400 S El Camino Real Suite 1050, San Mateo, CA 94402, USA | Data Security Posture Management (DSPM) and real-time monitoring of sensitive data and AI agents | United States (USA) / Global Network. |
| Binary Defense Systems, Inc. | Core Infrastructure | 600 Alpha Pkwy, Stow, OH 44224, United States | Managed Detection and Response (MDR), threat hunting, and security information event monitoring (SIEM) | United States (USA) / Global Network. |
| Broadcom Inc. (Symantec Enterprise) | Core Infrastructure | 3401 Hillview Ave, Palo Alto, CA 94304, USA | Cloud cybersecurity tools, data-centric hybrid security, and enterprise threat prevention | United States (USA) / Global Network. |
| Slack Technologies, LLC | Customer Support | 500 Howard Street, San Francisco, CA 94105, USA | Enterprise communication and direct customer interaction with CS. | United States (USA) / Global Network. |
| Salesforce, Inc. (Service Cloud) | Customer Support | 415 Mission St, San Francisco, CA 94105, USA | Customer Support ticketing platform, live chat, and customer case management. | United States (USA) |
| Atlassian Pty Ltd (Jira) | Customer Support & Platform Integration | 341 George St, Sydney, NSW 2000, Australia | Technical bug tracking, developer ticketing escalation, and secure custom feature request logging. | United States (USA) |
| Service Now, Inc. | Customer Support & Platform Integration | 2225 Lawson Lane, Santa Clara, CA 95054, USA | Integration to export and sync threat models and security tasks into Customer's corporate ServiceNow instances. | United States (USA) |
| MantisHub LLC | Customer Support & Platform Integration | PO Box 3317, Seattle, WA 98114, USA | Integration to export and track software security defects and vulnerabilities in Customer's Mantis issue trackers. | United States (USA) |
| Peeklogic LLC | Customer Support | 440 N Barranca Ave #1029, Covina, CA 91723, USA | Software connector linking Salesforce Service Cloud and Jira. | United States (USA). |
| Splunk, Inc. (Splunk On-Call) | Customer Support | 270 Brannan St, San Francisco, CA 94107, USA | Security, monitoring, and real-time incident alerting software for SaaS deployments. | United States (USA). |
| Rocketlane Technologies, Inc. | Professional Services (PS) | 2035 Sunset Lake Road, Suite B-2, Newark, DE 19702, USA | Customer onboarding portal, managing Professional Services (PS) deliverables, milestones, and project resources. | United States (USA). |
| LearnWorlds (LearnWorlds CY Ltd) | Professional Services (PS) | 14 Pramantorou Street, 2018 Strovolos, Nicosia, Cyprus | Learning Management System (LMS) used to host and deliver ThreatModeler Academy training. | Cyprus |
| Accredible (Growlabs, Inc.) | Professional Services (PS) | 201 Mission St, San Francisco, CA 94105, USA | Generates and hosts digital training certificates for users completing ThreatModeler Academy. | United States (USA). |
| Zapier, Inc. | Professional Services (PS) | 548 Market St #14147, San Francisco, CA 94104, USA | Workflow automation provider connecting LMS registration with reporting tools. | United States (USA). |
| PostHog, Inc. | Product Analytics | 2261 Market Street #4008, San Francisco, CA 94114, USA | Product analytics and user interaction tracking. Note: All data collected is strictly de-identified and anonymized. | United States (USA). |
| ChurnZero | Customer Analytics | 717 D Street NW, 2nd Floor, Washington D.C., 20004, USA | Customer management platform. Tracks platform usage, meetings and customer health. | United States (USA). |
| Domo, Inc. | Product Analytics | 772 East Utah Valley Drive, American Fork, UT 84003, USA | Business intelligence platform used to track customer license utilization and metrics. | United States (USA). |
| ThreatModeler Software, Inc. | Corporate Affiliate | 101 Hudson Street, Suite 2100, 21st Floor, Jersey City, NJ 07302, USA | Provision of global engineering, technical support, customer success, and platform maintenance services. | United States (USA) |
| ThreatModeler Software, S.L. (former IriusRisk, S.L.) | Corporate Affiliate | Parque Tecnológico Walqa, 22197 Huesca, Aragon, Spain | Provision of global engineering, technical support, customer success, and platform maintenance services. | Spain |
| ThreatModeler Software, Ltd. (former IriusRisk, Ltd.) | Corporate Affiliate | 128 City Road, London, EC1V 2NX, United Kingdom | Provision of global engineering, technical support, customer success, and platform maintenance services. | United Kingdom (UK) |
| ThreatModeler Software India Private Limited | Corporate Affiliate | Graphix - 2, A - 13, 10th Floor, Sector - 62, Noida, Gautam Buddha Nagar, Uttar Pradesh, 201301, India | Provision of global engineering, technical support, customer success, and platform maintenance services. | India |
Scroll horizontally to view all columns on smaller screens.
Privacy Team & Subprocessor Updates
Customers may subscribe to receive notifications of any future additions or replacements to this Subprocessor List by clicking "Subscribe to Updates" in the ThreatModeler Trust Center, or by emailing our Privacy Team at privacy@threatmodeler.com. ThreatModeler will use commercially reasonable efforts to notify subscribed customers at least fifteen (15) days in advance of authorizing any new subprocessor.