Third party data sub-processors and affiliates

Tenable is committed to transparency and ensuring that all of our Sub-processors comply with the GDPR in processing Customer Personal Data. Tenable engages the following Sub-processors to perform specific processing activities on behalf of Customers:

Party Use case Personal Data Types Location of Processing Comments / Justification
Amazon Web Services (AWS) Cloud Hosting service for Tenable Vulnerability Management and customer data containers Any Personal Data captured in Scan Data and Admin User Information Either United States (Virginia, California, Ohio), Germany (Frankfurt), the UK (London), Singapore, Canada, Australia (Sydney), Japan (Tokyo), Brazil (Sao Paolo), India (Mumbai), and the UAE. AWS directly supports our role as a Data Processor for customer's historical Scan Data. Native AWS Data Security and Access controls applied to the customer's containers help satisfy GDPR requirements for Tenable as a Data Processor and AWS as a Sub-Processor.
SendGrid Email Notifications Admin User Information United States, UK Used when a customer signs up for trials or requests a password reset. Serves as verification for valid email address.
Twilio SMS Notifications and Two-factor Authentication Admin User Information United States Phone number and authentication codes are sent to Twilio, but no information is shared to identify who the phone number belongs to.
Salesforce, Inc. Customer Relationship Management Admin User Information United States Salesforce assists us in managing our relationships and interactions with our customers.
Marketo, Inc. Customer Relationship Management Admin User Information United States, Ireland Marketo assists us in managing and automating our customer marketing initiatives.
TaskUs, Inc. Customer account management Admin user information United States TaskUs assists us in managing our customer database.
Arrow ECS SAS Customer Relationship Management Business contact information France Arrow assists us in managing our relationships and interactions with our customers.
G2.com, Inc. Customer Relationship Management Admin User Information United States G2.com assists us in improving customer experience initiatives.
Zift Solutions, Inc. MSSP Relationship Management Admin User Information United States Zift Solutions assists us in managing our relationships and interactions with our MSSP customers.
Microsoft Operations Ireland Limited (Azure) Hosting service for Tenable Identity Exposure and individual customer instances. Any Personal Data captured in indicator/exposure results, raw AD event metadata, and Admin User Information France, Ireland, Netherlands, Hong Kong, England, Australia, Singapore, United States, UAE, India Microsoft Azure is our cloud-service provider for the Tenable Identity Exposure product.
Snowflake Computing Netherlands B.V. Hosting and data warehousing services Any Personal Data captured in Scan Data and Admin User Information Either the United States (Virginia, California, Ohio), Germany (Frankfurt), the UK (London), Singapore, Canada, Australia (Sydney), Japan (Tokyo), Brazil (Sao Paolo), India (Mumbai), and the UAE. Snowflake provides data warehousing services for Tenable cloud products.
Malbec Solutions, Inc. (d/b/a Malbek) Customer relationship management Business contact information United States Malbec assists us in managing customer contracts and related documentation.
Demandbase, Inc. Customer relationship management Business contact information United States Demandbase assists us in improving our customer sales and marketing initiatives.
Sutherland Global Services, Inc. Customer relationship management, technical support User/administrator information United States, Philippines Sutherland Global Services assists us in managing our relationships/interactions with Nessus Professional trial users and providing them with technical support.
Databricks, Inc. Data warehousing services User/administrator information United States Databricks serves as the data warehouse for our customer relationship and account management platforms.
MongoDB, Inc. Hosting and database services Any personal data captured in scan data and admin/user information Either United States (Virginia, California, Ohio), Germany (Frankfurt), the UK (London), Singapore, Canada, Australia (Sydney), Japan (Tokyo), Brazil (Sao Paolo), India (Mumbai), and the UAE. MongoDB provides hosting and database services for Tenable Cloud Security.
Pendo.io, Inc. In-platform communications, and platform analytics Admin/user information and usage insights United States Pendo assists us in understanding how users interact with the Tenable One Platform and to send them in-platform notifications about their license.
Datadog, Inc Product Infrastructure Management Admin/user information United States Datadog assists us in managing our Tenable Cloud Security infrastructure and analyzing log data.
Coralogix Inc. Product infrastructure management Admin user information United States Coralogix assists us in managing our product infrastructure and analyzing product log data.
ClickHouse, Inc Hosting and database services Personal data captured in scan data Either the United States (Virginia, California, Ohio), Germany (Frankfurt), the UK (London), Singapore, Canada, Australia (Sydney), Japan (Tokyo), Brazil (Sao Paolo), India (Mumbai), or the UAE. ClickHouse provides hosting and database services for Tenable Cloud Security.
Cloudflare, Inc Web traffic monitoring Any Personal Data captured in Scan Data Either the United States (Virginia, California, Ohio), Germany (Frankfurt), the UK (London), Singapore, Canada, Australia (Sydney), Japan (Tokyo), Brazil (Sao Paolo), India (Mumbai), or the UAE. Cloudflare provides web traffic monitoring services for the Tenable One platform.
Artificial Intelligence Vendors
Party Services Provided Personal Data Processed (If Applicable)
Google LLC (Google Cloud Vertex AI, Google Gemini Enterprise) Vertex AI provides cloud-based services for developing and deploying AI models in support of Tenable's AI/ML-powered product features.

Gemini's generative AI features assist us with customer technical support inquiries. 		For Gemini, any Personal Data captured in case data provided by the customer for technical support purposes.
Amazon Web Services, LLC (Amazon Bedrock) Amazon Bedrock provides cloud-based services for developing and deploying AI models in support of Tenable's AI/ML-powered product features. Any personal data that customer includes in prompts when using our Products' generative AI features.
Salesforce, Inc. (Salesforce Einstein) Einstein's generative AI features assist us with customer technical support inquiries. Any Personal Data captured in case data provided by the customer for technical support purposes.
SearchUnify SearchUnify's generative AI features assist us with customer technical support inquiries. Any Personal Data captured in case data provided by the customer for technical support purposes.
Slack Technologies, LLC (Slack AI) Slack AI's generative AI features assist us with customer technical support inquiries. Any Personal Data captured in case data provided by the customer for technical support purposes.

In addition to the Sub-processors listed above, the following entities are affiliates of Tenable, and accordingly may also function as sub-processors.

Entity Name Country
Tenable, Inc. United States
Tenable Network Security Limited United Kingdom
Tenable Network Security Pte. Limited Singapore
Tenable Network Security Netherlands B.V. The Netherlands
Tenable Network Security GmbH Germany
Tenable Network Security France SAS France
Tenable Network Security Ireland Limited Ireland
Tenable Network Security Netherlands B.V., Amsterdam, Zweigniederlassung Zurich Switzerland
Tenable Network Security Sweden AB Sweden
Tenable Network Security Belgium SPRL Belgium
Tenable Network Security Denmark ApS Denmark
Tenable Network Security Poland S.p Z.o.o Poland
Tenable GmbH Austria
Tenable Network Security Netherlands, B.V., Sucursal en Espana Spain
Tenable Network Security Netherlands, B.V., Italian Branch Italy
Tenable Network Security Ireland Limited (DMCC Branch) The UAE
Tenable Network Sequranca Brasil LTDA Brazil