Snapshot 11616

Document
Subprocessor list
URL
https://www.varonis.com/hubfs/policies/subprocessors-list.pdf?hsLang=en
Fetched
HTTP status
200
Content type
application/pdf
Fetch mode
pdf
Size
170179 bytes
SHA-256 (raw)
34c3f9aca318c9d3ca7ba46848e86a4082494519b85436bf71afed8f5cb522e1
SHA-256 (normalized text)
18511e2b3cb4eaf2712ef6109afcdf05d5b649f83acb776c081ed4c0a88a786d

Raw (normalized text)

Scripts and page chrome removed; this is what change detection compares.

                               Sub Processors List
Service Providers

      Name          Product   Purpose of Processing               Location             Scope of processed PII

                                                         Azure – per customer
                              Azure – Cloud service      choice:
                              provider, DevOps App       US, EU, UK, Australia,
                              platforms (TFS/ADO) -      Canada, India, Singapore,     Personal Data
                              Customer support           United Arab Emirates          processed by Varonis as
Microsoft      All products   management and             (except ADO routed through    a result of customer’s
                              collaboration              Singapore), Switzerland       use of the Subscription
                              Sentinel - Security        (except for ADO routed        Services.
                              information and event      through EU)
                              management                 Other services – US (with
                                                         narrow scope of PII)

                                                         DAC – per customer
                                                         choice:
                                                         US, EU, UK, Australia,
                                                         Canada, India or
                                                         Singapore

               DatAdvantage                              Interceptor* – US, EU, UK,
                              AWS - Cloud service
               Cloud (DAC)                               India
                              provider
               Interceptor                               Atlas AI* – US, EU
                                                                                       Personal Data
               Atlas AI                                                                processed by Varonis as
Amazon                                                   * Canada routed to US; the    a result of customer’s
                                                         rest are routed to EU         use of the Subscription
                                                         (unless the chosen region     Services.
                                                         is available)

                                                         Per customer initial choice
                              SES - Communication
               All products                              of cloud locality.
                              application
                                                         *Switzerland - routed to EU

                                                                                       Personal Data
                                                                                       processed by Varonis as
               DatAdvantage                              Per customer initial choice
ClickHouse                                                                             a result of customer’s
               Cloud (DAC)    Storing events             of cloud locality
                                                                                       use of the Subscription
                                                                                       Services.
                                                                                       Diagnostics logs, that
                                                                                       may contain incidental
                                                         US, EU
                              Centralized platform for                                 Personal Data
               DatAdvantage                              * Canada and India routed
DataDog                       monitoring, visualizing,                                 processed by Varonis as
               Cloud (DAC)                               to US
                              and alerting on data                                     a result of customer’s
                                                         * The rest are routed to EU
                                                                                       use of the Subscription
                                                                                       Services.
                                                                                                        Personal Data
                                          Centralized platform for     US, EU                           processed by Varonis as
                       DatAdvantage
 Coralogix                                monitoring, visualizing,     * Canada routed to US            a result of customer’s
                       Cloud (DAC)
                                          and alerting on data         * The rest are routed to EU      use of the Subscription
                                                                                                        Services.
                                                                                                        Personal Data
                                                                                                        processed by Varonis as
                       All products,
                                                                                                        a result of customer’s
                       except for                                      Per customer initial choice
 Imperva                                  Web Application Firewall                                      use of the Subscription
                       FedRAMP                                         of cloud locality
                                                                                                        Services.
                       clients
                                                                                                        *Data in transit – no
                                                                                                        storage*
                                                                       Per customer initial choice
                                                                       of cloud locality, except for:
                                                                                                        Personal Data
                                          Files from Varonis           * India – routed to Australia
                       All products,                                                                    processed by Varonis as
                                          support, advanced            * Switzerland – routed to
                       except for                                                                       a result of customer’s
 Box                                      services etc. that include   EU
                       FedRAMP                                                                          use of the Subscription
                                          logs that may contain PII    * Singapore, United Arab
                       clients                                                                          Services.
                                                                       Emirates – routed to
                                                                       Singapore/Japan

                                          Support ticket
                                                                                                        Email of customer’s
                                          management platform
 Salesforce            All products                                    US                               personnel accessing the
                                          (not including files
                                                                                                        system
                                          attached to tickets)

                                                                                                        Email of customer’s
                                          Identity Management
 Okta                  All products                                    US                               personnel accessing the
                                          Solution
                                                                                                        system

                                                                                                        Email of customer’s
                                          Identity Management
 auth0                 Atlas AI                                        US                               personnel accessing the
                                          Solution
                                                                                                        system

                                                                                                        Personal Data
                                                                                                        processed by Varonis as
                                                                                                        a result of customer’s
                                                                       Per location of customer’s
 Cloudflare            Atlas AI           Web Application Firewall                                      use of the Subscription
                                                                       user connecting to Varonis
                                                                                                        Services.
                                                                                                        *Data in transit – no
                                                                                                        storage*

                                                                       US, EU
                                          MDDR case                                                     Alerts from Varonis
 Torq.IO SOAR          MDDR Services                                   * Canada routed to US
                                          management platform                                           platform
                                                                       * The rest are routed to EU

                                                                                                     Personal Data
                                                                                                     processed by Varonis as
                         Gen AI based
                                                                         US, EU                      a result of customer’s
  Microsoft &            features,
                                            Gen AI processing            * Canada routed to US       use of the Subscription
  Amazon                 products and
                                                                         * The rest are routed to EU Services.
                         services
                                                                                                     *Data in transit – no
                                                                                                     storage*
Unless indicated otherwise above, if a sub-processor doesn’t provide the client’s chosen locality, the following
default shall apply:
* US & Canada shall be routed to US
* The rest shall be routed to EU (unless the chosen region is available)
Varonis Group Entities
The following entities are members of the Company Group, and function as sub-processors to provide the services.

 Entity Name                                                         Entity Country

 Varonis Systems, Inc.                                               USA

 Varonis Systems Ltd.                                                Israel

 Varonis Systems (Ireland) Limited                                   Ireland

 Varonis France SAS                                                  France

 Varonis (UK) Limited                                                UK

 Varonis Systems (Deutschland) GmbH                                  Germany

 Varonis Systems (Netherlands) B.V.                                  The Netherlands and Belgium

 Varonis Systems (Luxemburg) S.à r.l.                                Luxemburg

 Varonis Systems (Poland) sp. z o.o.                                 Poland

 Varonis Systems Corp                                                Canada

 Varonis Systems Australia Pty Ltd                                   Australia

 Varonis Singapore PTE Ltd.                                          Singapore

 Varonis Systems (India) Private Limited                             India

 Varonis Systems Japan K.K                                           Japan