Last updated: July 19, 2024
Depending on the nature of the service or product, SailPoint and its affiliates may engage one or more of the following third-party sub-processors, as specified below.
For customers of SailPoint, please note that not every third-party vendor listed below may be relevant to your relationship with SailPoint. If you wish to know more about which third-party vendors we use for a particular service or product, or if you have any particular objection to the use of any of the below vendors, please contact us at [email protected].
In addition, we use third-party vendors that support our firewalls and anti-virus protection mechanisms. If you wish to know about the data and information security measures we have in place, please contact us at [email protected].
SailPoint sells add-ons for its products. Some add-ons are listed below. If an add-on is not listed, it is because there are no sub-processors above and beyond those listed for the underlying product you purchased.
Please note that Identity Security Cloud Standard, Identity Security Cloud Business, and Identity Security Cloud Business Plus, are three tiers of our Identity Security Cloud product, listed as “ISC”.
The add-on listed as “AI Services for IIQ/IDN” includes Access Insights, Access Modeling, Recommendation Engine, all of which were previously separated and are only available for IIQ or IDN.
Please note that the below list is regularly updated so please check this page periodically for any subsequent updates.
| Affiliate Sub-processor name | Location |
|---|---|
| SailPoint International, Inc., including branch in Australia and registrations in Hong Kong and Taiwan | USA |
| SailPoint Technologies Canada Inc. | Canada |
| SailPoint Technologies Japan G.K. | Japan |
| SailPoint Technologies GmbH | Germany |
| SailPoint Technologies India Private Ltd. | India |
| SailPoint Technologies Israel Ltd. | Israel |
| SailPoint Technologies México, S.A. de C.V. | Mexico |
| SailPoint Technologies Netherlands B.V. | Netherlands |
| SailPoint Technologies Pte Ltd. | Singapore |
| SailPoint Technologies SARL (Switzerland), including a registration in Belgium and a branch in France | Switzerland |
| SailPoint Technologies UK Ltd., including a branch in Norway | UK |
| SailPoint Technologies Korea Limited | Korea |
| SailPoint Technologies FZ-LLC | Dubai |
| SailPoint SZ, LLC. | US |
| SailPoint Chile Limitada | Chile |
| Third Party Sub-processor name | Location | SailPoint Product | Processing Activity |
|---|---|---|---|
| Amazon Web Services, Inc. | USA, Canada, UK, Germany, Australia, Japan, Singapore | ISC, IDN, IIQ CMS, AI Services for IIQ/IDN, CAM, SaaS Management, NERM | Hosting provider for the SaaS Services – hosting may occur in either Germany, Australia, Japan, Canada, Singapore, UK or US, as elected by Customer at the start of the SaaS Services; provides all infrastructure and hosting services for the SaaS Services listed |
| Atlassian Pty Ltd | USA, Ireland, Australia | ISC, IDN, IIQ CMS, AI Services for IIQ/IDN, CAM | Provides status pages, which display status and uptime information for the CMS Services, and status notifications to subscribed Customer employees; data is hosted in the US |
| Confluent | USA, Canada, UK, Germany, Australia, Japan | ISC, IDN, AI Services for IIQ/IDN, CAM, SaaS Management | Provides medium for communication between microservices |
| Datadog | USA | ISC, IDN, IIQ CMS, AI Services for IIQ/IDN, SaaS Management, NERM | Infrastructure and Application Monitoring Platform; cloud infrastructure monitoring and application log aggregation; provides insight into overall system health as well as logging for troubleshooting and maintenance |
| Gainsight, Inc. | USA | ISC, IIQ, IDN, IIQ CMS, FAM, AI Services for IIQ/IDN, CAM, SaaS Management, ARM, NERM | Customer account administration and support used to send email notifications to designated customer contacts |
| ID DataWeb | USA | NERM (If purchased with ID Proofing add-on) | Identity Verification for ID Proofing |
| Microsoft Corporation (Microsoft 365) | USA | ISC, IIQ, IDN, IIQ CMS, FAM, AI Services for IIQ/IDN, CAM, SaaS Management, ARM, NERM | Email, calendar, and audio and web conferencing |
| Microsoft Corporation (Microsoft Azure) | USA, Ireland, Netherlands | ARM | Cloud hosting provider |
| MongoDB, Inc. | USA | ARM, NERM | Back-end database services |
| Pendo.io, Inc. | USA | ISC, IDN, AI Services for IIQ/IDN, CAM, SaaS Management, ARM | Analytics provider used to analyze and improve the Services |
| Qlik | USA, Ireland, Australia | ISC, IDN, AI Services for IIQ/IDN | Embedded Business Intelligence platform for storing data model and visualization configurations. Qlik’s in-memory performance layer caches data for fast rendering and fast filtering and drill through actions. |
| Saba Software, Inc. | USA | ISC, IIQ, IDN, IIQ CMS, FAM, AI Services for IIQ/IDN, CAM, SaaS Management, ARM, NERM | Saba Cloud learning management system used to provide the Identity University portal and online training services |
| salesforce.com, inc. | USA | ISC, IIQ, IDN, IIQ CMS, FAM, AI Services for IIQ/IDN, CAM, SaaS Management, ARM, NERM | Customer relationship management (CRM) system |
| ServiceNow, Inc. | USA | ISC, IIQ, IDN, IIQ CMS, FAM, AI Services for IIQ/IDN, CAM, SaaS Management, ARM, NERM | Ticketing system for Support and Maintenance Services |
| Slack Technologies, Inc. | USA | ISC, IIQ, IDN, IIQ CMS, FAM, AI Services for IIQ/IDN, CAM, SaaS Management, ARM, NERM | Messaging and collaboration tool; primary internal chat tool |
| Snowflake | USA | ISC, IDN, AI Services for IIQ/IDN, CAM, SaaS Management, ARM, NERM | Cloud data warehousing |
| Strivacity, Inc. | USA | NERM | Account Management for Partner Portal and Customer Training Sites for Non-Employee Risk Management |
| Traceable | USA, India | ISC, IDN, AI Services for IIQ/IDN, ARM | Provides capabilities to detect malicious API requests |
| Twilio, Inc. | USA | ISC, IDN, AI Services for IIQ/IDN, SaaS Management, ARM | Two-factor authentication communication via mobile device provider for the SaaS Services if Customer elects to enable this feature. For ARM and SaaS Management, additional functions such as product communications, including onboarding account setup, password reset, account security notifications, or other notices related to the product functions. |
| Zoom Video Communications, Inc. | USA | ISC, IIQ, IDN, IIQ CMS, FAM, AI Services for IIQ/IDN, CAM, SaaS Management, ARM, NERM | Audio and web conferencing |