Snapshot 5896
Raw (normalized text)
Scripts and page chrome removed; this is what change detection compares.
Cerbos Infrastructure and Sub-processors
Updated: March 13, 2024
Scope
This documentation describes the infrastructure environment and sub-processors for the Cerbos’s provision of the
Services.
Capitalized terms used in this documentation are defined in Cerbos’s Master Services Agreement, Data Processing
Addendum and/or other written agreement with Customer. In the event of conflict, the Data Processing Addendum
definition shall prevail.
All Services
The following legal entities are engaged in processing Personal Data for all Services.
Entity Name Entity Type Location of Sub-processor Storage location
Zenauth Ltd Cerbos HQ • United Kingdom • N/A
• European Economic
Google Inc. (Google Cloud) Third Party Hosting Provider • United States
Area
• European Economic
Auth0, Inc. Customer support tool • United States Area & United
Kingdom
• European Economic
Salesforce, Inc. (Slack) Customer support tool • United States Area & United
Kingdom
Google Inc. (Google Toolkit used for Professional • European Economic
• United States
Workspace) Services and Support Area
• European Economic
ClickHouse, Inc. OLAP Database • United States
Area
• European Economic
Hotjar Limited Usage analytics tool • Malta
Area
• European Economic
PostHog Inc. Usage analytics tool • United States
Area
• European Economic
Crisp IM SAS Customer support tool • France
Area
• European Economic
Hubspot, Inc. Customer support tool • United States
Area
Customer agrees and acknowledges that Cerbos is a remote-first company and engages its personnel as employees, via
an employer of record and/or via other means of alternative contracting (individual companies or sole
entrepreneurship) in various countries worldwide (collectively the “Remote Personnel”). Cerbos shall treat all Remote
Personnel as its employees and employ the same effective control over their work regardless of their formal legal
status. Cerbos considers the Remote Personnel as its personnel under its direct control and not as separate
sub-processors. Cerbos does not publicly disclose the list of the Remote Personnel and their location to protect their
privacy. Customer can request the list. If the Remote Personnel is deemed third-party sub-processors for the purpose
of applicable privacy laws, Customer grants general consent for Cerbos to use Remote Personnel as sub-processors.
-1-
Cerbos customers may subscribe to notifications of new sub-processors by sending an email to
legal@cerbos.dev.
-2-