Last updated: October 9, 2023
Depending on the nature of the service or product, SailPoint and its affiliates may engage one or more of the following third party sub-processors, as specified below.
For customers of SailPoint, please note that not every third party vendor listed below may be relevant to your relationship with SailPoint. If you wish to know more about which third party vendors we use for a particular service or product, or if you have any particular objection to the use of any of the below vendors, please contact us at [email protected].
In addition, we use third party vendors that support our firewalls and anti-virus protection mechanisms. If you wish to know about the data and information security measures we have in place, please contact us at [email protected].
Please note that SailPoint’s Identity Security Cloud Business and Identity Security Cloud Business Plus are suites of SailPoint products. While these suites are already represented through the inclusion of the individual products that comprise the suites, for the convenience and ease of use of our customers, we have listed the product suites separately in the product list column, as applicable.
Please note that the below list is regularly updated so please check this page periodically for any subsequent updates.
| Affiliate Sub-processor name | Location |
|---|---|
| SailPoint International, Inc., including branch in Australia and registrations in Hong Kong and Taiwan | USA |
| SailPoint Technologies Canada Inc. | Canada |
| SailPoint Technologies Japan G.K. | Japan |
| SailPoint Technologies GmbH | Germany |
| SailPoint Technologies India Private Ltd. | India |
| SailPoint Technologies Israel Ltd. | Israel |
| SailPoint Technologies México, S.A. de C.V. | Mexico |
| SailPoint Technologies Netherlands B.V. | Netherlands |
| SailPoint Technologies Pte Ltd. | Singapore |
| SailPoint Technologies SARL (Switzerland), including a registration in Belgium and a branch in France | Switzerland |
| SailPoint Technologies UK Ltd., including a branch in Norway | UK |
| SailPoint Technologies Korea Limited | Korea |
| SailPoint Technologies FZ-LLC | Dubai |
| SecZetta, Inc. | US |
| Servicios SecZetta Chile Limitada | Chile |
| Third Party Sub-processor name | Location | SailPoint Product | Processing Activity |
|---|---|---|---|
| Amazon Web Services, Inc. | USA, Canada, UK, Germany, Australia, Japan | Identity Security Cloud Business, Identity Security Cloud Business Plus, IDN, IIQ CMS, Access Insights, Access Modeling, Recommendation Engine, CAM, CIEM, SaaS Management, Non-Employee Risk Management, DAS | Hosting provider for the SaaS Services – hosting may occur in either Germany, Australia, Japan, Canada, UK or US, as elected by Customer at the start of the SaaS Services; provides all infrastructure and hosting services for the SaaS Services listed |
| Argeniss | USA, Argentina | ARM | Staff augmentation firm |
| Atlassian Pty Ltd | USA, Ireland, Australia | Identity Security Cloud Business, Identity Security Cloud Business Plus, IDN, IIQ CMS, Access Insights, Access Modeling, Recommendation Engine, CAM, CIEM, DAS | Provides status pages, which display status and uptime information for the CMS Services, and status notifications to subscribed Customer employees; data is hosted in the US |
| Confluent | USA, Canada, UK, Germany, Australia, Japan | Identity Security Cloud Business, Identity Security Cloud Business Plus, IDN, Access Insights, Access Modeling, Recommendation Engine, CAM, CIEM, SaaS Management, DAS | Provides medium for communication between microservices |
| Datadog | USA | Identity Security Cloud Business, Identity Security Cloud Business Plus, IDN, IIQ CMS, Access Insights, Access Modeling, Recommendation Engine, SaaS Management, Non-Employee Risk Management | Infrastructure and Application Monitoring Platform; cloud infrastructure monitoring and application log aggregation; provides insight into overall system health as well as logging for troubleshooting and maintenance |
| FullStory | USA | Identity Security Cloud Business Plus, SaaS Management, DAS | Helps improve the UX experience |
| Gainsight, Inc. | USA | Identity Security Cloud Business, Identity Security Cloud Business Plus, IIQ, IDN, IIQ CMS, FAM, Access Insights, Access Modeling, Recommendation Engine, CAM, CIEM, SaaS Management, ARM, Non-Employee Risk Management, DAS | Customer account administration and support used to send email notifications to designated customer contacts |
| GitHub, Inc. | USA | Identity Security Cloud Business, Identity Security Cloud Business Plus, IDN, IIQ CMS, Access Insights, Access Modeling, Recommendation Engine, CAM, CIEM, Non-Employee Risk Management, DAS | Source code management; certain Customer employees will be provided a user account and will provide their Personal Data for authentication purposes |
| ID DataWeb | USA | Non-Employee Risk Management (If purchased with ID Proofing add-ion) | Identity Verification for ID Proofing |
| Intercom | USA | Identity Security Cloud Business Plus, SaaS Management, DAS | Provides real time support chat on the site and a help desk site |
| iTransition, Inc. | USA, Poland | ARM | Staff augmentation firm |
| Microsoft Corporation (Microsoft 365) | USA | Identity Security Cloud Business, Identity Security Cloud Business Plus, IIQ, IDN, IIQ CMS, FAM, Access Insights, Access Modeling, Recommendation Engine, CAM, CIEM, SaaS Management, ARM, Non-Employee Risk Management, DAS | Email, calendar, and audio and web conferencing |
| Microsoft Corporation (Microsoft Azure) | USA, Ireland, Netherlands | ARM | Cloud hosting provider |
| MongoDB, Inc. | USA | ARM, Non-Employee Risk Management | Back-end database services |
| Pendo.io, Inc. | USA | Identity Security Cloud Business, Identity Security Cloud Business Plus, IDN, Access Insights, Access Modeling, Recommendation Engine, CAM, CIEM, SaaS Management, ARM, DAS | Analytics provider used to analyze and improve the Services |
| Qlik | USA, Ireland, Australia | Identity Security Cloud Business, Identity Security Cloud Business Plus, IDN, Access Insights, Access Modeling, Recommendation Engine, DAS | Embedded Business Intelligence platform for storing data model and visualization configurations. Qlik’s in-memory performance layer caches data for fast rendering and fast filtering and drill through actions. |
| Saba Software, Inc. | USA | Identity Security Cloud Business, Identity Security Cloud Business Plus, IIQ, IDN, IIQ CMS, FAM, Access Insights, Access Modeling, Recommendation Engine, CAM, CIEM, SaaS Management, ARM, Non-Employee Risk Management, DAS | Saba Cloud learning management system used to provide the Identity University portal and online training services |
| salesforce.com, inc. | USA | Identity Security Cloud Business, Identity Security Cloud Business Plus, IIQ, IDN, IIQ CMS, FAM, Access Insights, Access Modeling, Recommendation Engine, CAM, CIEM, SaaS Management, ARM, Non-Employee Risk Management, DAS | Customer relationship management (CRM) system |
| ServiceNow, Inc. | USA | Identity Security Cloud Business, Identity Security Cloud Business Plus, IIQ, IDN, IIQ CMS, FAM, Access Insights, Access Modeling, Recommendation Engine, CAM, CIEM, SaaS Management, ARM, Non-Employee Risk Management, DAS | Ticketing system for Support and Maintenance Services |
| Slack Technologies, Inc. | USA | Identity Security Cloud Business, Identity Security Cloud Business Plus, IIQ, IDN, IIQ CMS, FAM, Access Insights, Access Modeling, Recommendation Engine, CAM, CIEM, SaaS Management, ARM, Non-Employee Risk Management, DAS | Messaging and collaboration tool; primary internal chat tool |
| Snowflake | USA | Identity Security Cloud Business, Identity Security Cloud Business Plus, IDN, Access Insights, Access Modeling, Recommendation Engine, CAM, CIEM, SaaS Management, ARM, Non-Employee Risk Management, DAS | Cloud data warehousing |
| SoftServe, Inc. | USA, Poland | Identity Security Cloud Business, Identity Security Cloud Business Plus, IDN, Access Insights, Access Modeling, Recommendation Engine, CAM, CIEM, ARM, DAS | Staff augmentation firm |
| Strivacity, Inc. | USA | Non-Employee Risk Management | Account Management for Partner Portal and Customer Training Sites for Non-Employee Risk Management |
| Twilio, Inc. | USA | Identity Security Cloud Business, Identity Security Cloud Business Plus, IDN, Access Insights, Access Modeling, Recommendation Engine, SaaS Management, ARM, DAS | Two-factor authentication communication via mobile device provider for the SaaS Services if Customer elects to enable this feature |
| Zoom Video Communications, Inc. | USA | Identity Security Cloud Business, Identity Security Cloud Business Plus, IIQ, IDN, IIQ CMS, FAM, Access Insights, Access Modeling, Recommendation Engine, CAM, CIEM, SaaS Management, ARM, Non-Employee Risk Management, DAS | Audio and web conferencing |