Snapshot 222495
Raw (normalized text)
Scripts and page chrome removed; this is what change detection compares.
Skip to navigationSkip to main content Opens in new tab |Prophet Security's Trust Center Prophet Security Prophet Security provides AI-powered security operations solutions and is committed to maintaining the highest standards of information security and responsible AI governance. We are SOC 2 Type II, ISO/IEC 27001:2022, and ISO/IEC 42001:2023 certified, operating under an Integrated Management System (IMS) that unifies information security and AI governance. We have also completed independent third-party assessments of our controls relevant to GDPR, CCPA, and HIPAA, each with no exceptions noted. Our comprehensive security program includes continuous monitoring, annual independent audits, regular penetration testing, and a formal incident response plan to protect the confidentiality, integrity, and availability of customer data while ensuring our AI systems are developed and operated responsibly and ethically. security@prophetsecurity.ai Subprocessors Amazon Web Services • Cloud provider; AI Service United States, Germany, Switzerland or Japan; Global Current – authorized as of September 10, 2026. Infrastructure - Securely host our infrastructure, ensuring reliable data storage, processing, and availability. Processed in United States, Germany, Switzerland or Japan. Generative AI (Amazon Bedrock) - Third Party Generative AI Service - access and utilize hosted AI models. Global processing. Location optional - Customer may elect to disable Global Processing. Anthropic • AI Service United States Current – authorized as of September 10, 2026. Third Party Generative AI Service, used for access and use of hosted AI models. Datadog • Cloud monitoring United States Current – authorized as of September 10, 2026. Used to aggregate, search and analyze logs. DNSlytics • Data analytics United States Current – authorized as of September 10, 2026. Gather domain and IP address intelligence for security analysis. Google Cloud Platform • AI Service United States Current – authorized as of September 10, 2026. Third Party Generative AI Service - access and utilize hosted AI models. Greynoise • Security United States Advance notice – expected effective October 10, 2026. Identify IP addresses associated with internet-wide scanning and automated activity. Optional - Customer may elect to disable the applicable Service feature(s). Have I Been Pwned • Data Breach Analysis United States Current – authorized as of September 10, 2026. Used to assess if credentials for users being investigated have been compromised. Optional - Customer may elect to disable the applicable Service feature(s). IPInfo • Data analytics United States Current – authorized as of September 10, 2026. Obtain geolocation and IP address based information. Optional - Customer may elect to disable the applicable Service feature(s). Mailgun • Email delivery United States Advance notice – expected effective October 10, 2026. Used to deliver investigation notifications and platform alerts by email. Optional - engaged only if Customer elects the applicable Service feature(s). Microsoft Azure • AI Services Global Current – authorized as of September 10, 2026. Third Party Generative AI Service - access and utilize hosted AI models. Location optional - Customer may elect to disable Global Processing. 1-10 of 23 results Showresults per page All subprocessors Amazon Web Services **Current – authorized as of September 10, 2026.** **Infrastructure** - Securely host our infrastructure, ensuring reliable data storage, processing, and availability. Processed in United States, Germany, Switzerland or Japan. **Generative AI (Amazon Bedrock)** - Third Party Generative AI Service - access and utilize hosted AI models. Global processing. Location optional - Customer may elect to disable Global Processing. Cloud provider; AI Service United States, Germany, Switzerland or Japan; Global aws.amazon.com Anthropic **Current – authorized as of September 10, 2026.** Third Party Generative AI Service, used for access and use of hosted AI models. AI Service United States anthropic.com Datadog **Current – authorized as of September 10, 2026.** Used to aggregate, search and analyze logs. Cloud monitoring United States https://www.datadoghq.com/ DNSlytics **Current – authorized as of September 10, 2026.** Gather domain and IP address intelligence for security analysis. Data analytics United States https://dnslytics.com Google Cloud Platform **Current – authorized as of September 10, 2026.** Third Party Generative AI Service - access and utilize hosted AI models. AI Service United States https://cloud.google.com Greynoise **Advance notice – expected effective October 10, 2026.** Identify IP addresses associated with internet-wide scanning and automated activity. Optional - Customer may elect to disable the applicable Service feature(s). Security United States https://www.greynoise.io Have I Been Pwned **Current – authorized as of September 10, 2026.** Used to assess if credentials for users being investigated have been compromised. Optional - Customer may elect to disable the applicable Service feature(s). Data Breach Analysis United States haveibeenpwned.com IPInfo **Current – authorized as of September 10, 2026.** Obtain geolocation and IP address based information. Optional - Customer may elect to disable the applicable Service feature(s). Data analytics United States https://ipinfo.io Mailgun **Advance notice – expected effective October 10, 2026.** Used to deliver investigation notifications and platform alerts by email. Optional - engaged only if Customer elects the applicable Service feature(s). Email delivery United States https://www.mailgun.com Microsoft Azure **Current – authorized as of September 10, 2026.** Third Party Generative AI Service - access and utilize hosted AI models. Location optional - Customer may elect to disable Global Processing. AI Services Global azure.microsoft.com OpenAI **Advance notice – expected effective October 10, 2026.** Third Party Generative AI Service, used for access and use of hosted AI models. AI Service United States Parallel **Current – authorized as of September 10, 2026.** Providing web intelligence and search infrastructure specifically engineered for AI agents. This capability allows our AI-driven security systems to perform high-accuracy, real-time web research. Optional - Customer may elect to disable the applicable Service feature(s). Web Intelligence United States https://parallel.ai/ Posthog **Current – authorized as of September 10, 2026.** Product and usage analytics services. Data analytics United States https://posthog.com Pylon **Current – authorized as of September 10, 2026.** Used to create, process and manage support tickets. Support Ticket Management United States www.usepylon.com ReversingLabs **Current – authorized as of September 10, 2026.** File hash values and domain names are shared to perform threat intelligence and malware analysis for detecting and preventing malicious activities. Optional - Customer may elect to disable the applicable Service feature(s). Security United States https://www.reversinglabs.com Scrapfly **Current – authorized as of September 10, 2026.** Web scraping and screenshot capture of webpages for the analysis of phishing emails and associated links. Security United States https://scrapfly.io SerpApi **Current – authorized as of September 10, 2026.** Retrieve real-time search engine results, enhancing the accuracy and relevance of our services. Optional - Customer may elect to disable the applicable Service feature(s). Engineering United States https://serpapi.com Slack **Current – authorized as of September 10, 2026.** Secure team communication and collaboration for support and operational purposes. Collaboration United States slack.com Snowflake **Current – authorized as of September 10, 2026.** Used for ad hoc analytics and generating internal operational reports. Data analytics United States or Germany https://www.snowflake.com Spur **Current – authorized as of September 10, 2026.** Identify and analyze VPNs, proxies, Tor nodes, and other anonymizing infrastructure. Optional - Customer may elect to disable the applicable Service feature(s). Data analytics United States https://spur.us/ URLScan **Current – authorized as of September 10, 2026.** Used for scanning URLs for malicious content. This enhances our ability to analyze and neutralize web-based threats found within emails and other data streams. Optional - Customer may elect to disable the applicable Service feature(s). URL Analysis United States urlscan.io VMRay **Current – authorized as of September 10, 2026.** Providing an advanced malware sandbox and phishing threat analysis. This includes automated malware triage and analysis of samples. Optional - Customer may elect to disable the applicable Service feature(s). Advanced Threat Analysis United States https://www.vmray.com/ TypeSafe AI **Advance notice – expected effective October 31, 2026.** Third Party AI Service, used for access and use of hosted classification models. AI Service United States https://typesafe.ai/