Security vendors and their subprocessors
9 security vendors with a tracked subprocessor list, re-checked daily. Of the 1 whose trust page we track, 1 lists a SOC 2 Type II report and 1 lists ISO 27001.
- BitSight subprocessors checked September 26, 2026
- Bitwarden subprocessors checked September 26, 2026
- Drata subprocessors checked September 26, 2026
- Rapid7 subprocessors checked September 26, 2026
- Secureframe subprocessors checked September 26, 2026
- Snyk subprocessors checked September 26, 2026
- Tenable subprocessors checked September 26, 2026
- TrustArc subprocessors checked September 26, 2026
- Twingate subprocessors checked September 26, 2026
Key DPA terms across security vendors
What each vendor's data processing agreement commits to. The vendor page quotes the sentence behind every answer.
| Vendor | Breach notification | Notice of a new subprocessor | Transfers outside the EU |
|---|---|---|---|
| Twingate | Without undue delay, with no set deadline | 10 days ahead | Standard contractual clauses and the EU–US Data Privacy Framework |