Snapshot 14466
Raw (normalized text)
Scripts and page chrome removed; this is what change detection compares.
Last updated date: April 07, 2026
WSO2 Sub-Processor List
This sub-processor list includes only those sub-processors that are engaged by WSO2 and
are involved in the provision of the intended services to the customer.
As part of the service being provided under each solution, data may be shared with other
WSO2 products/offerings. Such instances will not be listed here.
Sub-processors that are common across multiple products are listed under the
“Infrastructure Service Provider” category.
Third party services facilitated by WSO2 at customer request are not WSO2 sub-processors.
Contractual relationship remains directly between customer and third party.
Transfer of personal data between WSO2 subsidiaries and affiliate companies is in
accordance with the transfer mechanisms specified under Art. 46 of the GDPR.
When you create a public cloud subscription, your organization administrator user details will
be collected and processed by WSO2 for subscription and support services.
The following sub-processors would be involved. Please note that your end user or business
user data will not be stored within any of the platforms listed below.
Furthermore, when you visit wso2.com to access documentation or use the contact us
forms, the following sub-processors get involved.
1
Infrastructure Service Sub-Processors
Sub-processor Purpose of processing Categories of data subjects Location
Microsoft Azure To host WSO2 public cloud services. Public cloud subscriber data, Global
including administrator profiles and
end-user profiles.
AWS* To host WSO2 public cloud services. Public cloud subscriber data, Global
including end-user profiles.
Google Cloud To host WSO2 public cloud services. Public cloud subscriber data, Global
Platform* including end-user profiles.
*Processed when opting for data planes or services offered by these optional CSP.
Identity Platform Sub-Processors
Sub-processor Purpose of processing Categories of data subjects Location
VirusTotal To protect WSO2 systems and Any request to WSO2 websites and public USA
services against malware and cloud services that are flagged by the
bad actors. security monitoring solutions in place for
anomalies or suspicious or malicious.
Google Inc (Google To protect logins and forms from Those who log in to Asgardeo. USA
reCAPTCHA) bots.
Developer Platform Sub-Processors
Sub-processor Purpose of processing Categories of data subjects Location
VirusTotal To protect WSO2 systems and Any request to WSO2 websites and USA
services against malware and bad services that are flagged by the
actors. security monitoring solutions in place
for anomalies or suspicious or
malicious.
Google Inc (Google To protect logins and forms from Those who log in to Asgardeo. USA
reCAPTCHA) bots.
MongoDB, Inc. To host cloud metadata. Those who publish APIs on Developer USA
Platform.
Aiven To provide a database as a service Those who consume Developer USA and EU
for Developer Platform subscribers. Platform database as a service.
Amplitude For the performance and analytics Those who have interacted with USA and EU
purposes of Developer Platform. Developer Platform Console.
2
API Platform Sub-Processors
Sub-processor Purpose of processing Categories of data subjects Location
Those who publish APIs on API
MongoDB, Inc. To host cloud metadata. Platform. USA
Any request to WSO2 websites and
services that are flagged by the
To protect WSO2 systems and security monitoring solutions in place
services against malware and bad for anomalies or suspicious or
VirusTotal actors. malicious. USA
Google Inc
(GooglereCAPTCH To protect logins and forms from
A) bots. Those who log in to Asgardeo. USA
To Provide a Secure VPN tunnel to Public cloud subscriber data, including
TailScale transfer data. end-user profiles. Global
Integration Platform Sub-Processors
Sub-processor Purpose of processing Categories of data subjects Location
Those who publish APIs on Integration
MongoDB, Inc. To host cloud metadata. Platform. USA
Any request to WSO2 websites and
services that are flagged by the
To protect WSO2 systems and security monitoring solutions in place
services against malware and bad for anomalies or suspicious or
VirusTotal actors. malicious. USA
To provide a database as a service
for Developer Platform Those who consume Integration
Aiven subscribers. Platform database as a service. USA and EU
Google Inc
(GooglereCAPTCH To protect logins and forms from
A) bots. Those who log in to Asgardeo. USA
For the performance and analytics Those who have interacted with the
Amplitude purposes of Developer Platform. Integration Platform Console. USA and EU
To provide a Secure VPN tunnel to Public cloud subscriber data, including
TailScale transfer data. end-user profiles. Global
3
WSO2 Sub-Processors
Sub-processor Purpose of processing Categories of Data Subjects Location
For sending notifications to
subscribers and managing
communication Those who have filled out any form on
Pardot preferences. the WSO2 website. USA
For providing support services to Employees of the subscribers involved
subscribers and managing support in raising support tickets through the
ServiceNow cases. support portal. USA
Google Inc For communicating and
(GoogleWorkspace collaborating with subscribers and Employees of the subscribers involved
s) potential subscribers. in communications with WSO2. Global
Employees of the subscribers involved
For meeting the sanctions and in the procurement or renewal of
Dow Jones compliance screening obligations. subscriptions. USA
To host WSO2 workloads, and
workloads may process subscriber Employees of the subscribers involved
CacheFly information. in communications with WSO2. Global
Employees of the subscribers involved
in the procurement or renewal of
For backing up salesforce subscriptions and raising support
Ownbackup databases. tickets through the support portal. USA
For collecting customer feedback Employees of the subscribers are
and conducting NPS surveys (for involved in consuming support services
Emojot on-prem customers). from WSO2. USA
For meeting the sanctions and Employees of the subscribers involved
compliance screening obligations in the procurement or renewal of
AEB (for on-prem customers). subscriptions. Germany
To provide AI model services (LLM
processing) to power an Customers, end-users submitting
AI-powered programming prompts, and possibly employees if
Anthropic assistant. prompts contain identifiers. Global
4
Optional Sub-Processors
Sub-processor Purpose of processing Categories of data subjects Location
For providing WSO2 training and Those who undergo WSO2 training
Thinkific product exams. and exams. USA
Silicon Valley Bank To facilitate card payments to Those who make payments using
Payment Gateway purchase WSO2 services. online payment options. USA
To facilitate card payments to Subscribers who are making online
Stripe purchase WSO2 services. payments. USA
To facilitate webinar events, we
may invite subscribers to present Those who participate in events that
Zoom their experiences with WSO2. are conducted using Zoom. USA
Employees of the subscribers involved
For executing contracts between in the procurement or renewal of
SpotDraft subscribers and WSO2. subscriptions. USA
Employees of the subscribers involved
For executing contracts between in the procurement or renewal of
DocuSign subscribers and WSO2. subscriptions. USA
Employees of the subscribers involved
For subscriber invoicing and in the procurement or renewal of
Netsuite internal finance systems. subscriptions. USA
WSO2 Subsidiaries and Affiliate Companies
Transfer of personal data between WSO2 subsidiaries and affiliate companies is in
accordance with the transfer mechanisms specified under Art. 46 of the GDPR.
WSO2 subsidiaries and affiliate companies Location
WSO2 LLC USA
WSO2 (UK) Limited United Kingdom
WSO2 Germany GmbH Germany
WSO2 Australia Pty Limited Australia
WSO2 Lanka (Private) Limited Sri Lanka
WSO2 India Private Limited India
WSO2 Brasil Tecnologia E Software EIRELI Brazil
WSO2 Middle East FZ LLC Dubai
WSO2 SG Pte Ltd Singapore
WSO2 Spain S.L Spain
WSO2 South Africa Pty Limited South Africa
WSO2 EA Limited Kenya
Moesif Inc USA
5