Third Party Index

Snapshot 74340

Document
Subprocessor list
URL
https://www.rubrik.com/content/dam/rubrik/en/resources/data-sheet/ds-rubrik-third-party-subprocessors.pdf
Fetched
HTTP status
200
Content type
application/pdf
Fetch mode
pdf
Size
69565 bytes
SHA-256 (raw)
a82e06c7c422e8d69d6bbc8bbec7150526b14dc6052bdb01925519cdd5fa1f95
SHA-256 (normalized text)
acfb51caa60ea79d571310604a2c06a8d044ebf41d974f132e76c18487aea74b

Normalized text

Scripts and page chrome removed; this is what change detection compares.

Last updated: August 24, 2026

THIRD-PARTY SUBPROCESSORS
This list identifies subprocessors that are authorized under the agreement between Rubrik and the customer
to process customer personal data as part of a Rubrik Service. All subprocessors have gone through a data
privacy assessment to determine the type of service they will provide, the associated processing activity and
type of customer personal data that the subprocessor will be authorized to process. The list below does not
apply to services that Rubrik provides on an evaluation basis, as a proof of concept or to any services that
have not been commercially released.

The following subprocessors may be used by Rubrik to: (i) provide technologies used to deliver a Rubrik
Service; (ii) provide customers with support associated with the services; (iii) provide an ancillary service
to help support, operate and maintain a Rubrik Service; or (iv) otherwise process customer personal data in
connection with the provision of Rubrik Service.

Click here to sign up to be notified when new subprocessors are added.
CORE PRODUCTS SUBPROCESSORS
Rubrik products listed below leverage a core set of subprocessors as part of their control plane architecture. Customers who
select their control plane to run on the Google Cloud Platform will activate the Google LLC subprocessor. Customers who
purchase RSC via the Amazon Marketplace will activate the Amazon Web Services, Inc. subprocessor. A customer can have
multiple RSC accounts and control planes on both Google LLC and Amazon Web Services, Inc.

    Aligned Product                                     Subprocessor             Description                                                        Location of Processing

    Rubrik Security Cloud (RSC)                         Amazon Web               Used for cloud infrastructure services to support                  Australia, Bahrain,
                                                        Services, Inc.           delivery of products and services, such as                         Brazil, Canada, France,
    Data Protection
                                                                                 facilitating support file transfers, logs, etc.                    Germany, Hong Kong,
     • Active Directory                                                                                                                             India, Indonesia, Ireland,
     • Cloud Cluster ES                                                                                                                             Israel, Italy, Japan,
     • Cloud Native Protection                                                                                                                      Malaysia, Mexico,
     • Cloud Unstructured                                                                                                                           Singapore, South Africa,
     • NAS CD                                                                                                                                       South Korea, Sweden,
     • Hybrid RCDM                                                                                                                                  Thailand, the UAE, the
     • Kubernetes                                                                                                                                   United Kingdom, and the
     • Microsoft Entra ID                                                                                                                           USA.
     • Microsoft 365 (M365)
     • NOSQL                                                                     AWS cloud platform. Cloud services used in the                     Germany, the United
     • Hybrid SAP HANA                                                           delivery and support of products and services.                     Kingdom, and the USA
     • Rubrik Cloud Vault (RCV)                                                  (AWS control plane.).
     • Salesforce (SFDC)
     • Jira                                             Palo Alto                Used for collection, aggregation, and                              USA
     • Mass Recovery                                    Networks, Inc.           measurement of product metrics and statistics.
    Data Posture Management
                                                        Google LLC               Google cloud platform. Cloud services used                         Australia, Belgium,
    Data Security Posture Management                                             in the delivery and support of products and                        Germany, India,
     • Cloud Posture Risk1                                                       services (Google control plane).                                   Indonesia, Israel, Japan,
     • Data Discovery & Classification2                                                                                                             the Kingdom of Saudi
     • Data Risk Management                                                                                                                         Arabia,Singapore,
     • Data Access Governance (DAG)3                                                                                                                Switzerland, the United
     • Data Detection & Response (DDR)4                                                                                                             Kingdom, and the USA.
    Cyber Recovery
                                                        Logz.io, Inc.            Used to collect service and application logs                       USA and Netherlands.
     • Anomaly Detection                                                         related to products and services.
     • Threat Monitoring
     • Threat Hunting                                   Microsoft                Microsoft Azure. Used for cloud infrastructure                     Austria, Australia,
     • Threat Containment                               Corporation              and hosting services to support delivery of                        Brazil, Canada, Chile,
     • Rubrik AI5                                                                products and services.                                             France, Germany, Hong
     • Cyber Recovery Simulation                                                                                                                    Kong, India, Indonesia,
    Identity Security                                                                                                                               Ireland, Israel, Italy,
     • Identity Resilience                                                                                                                          Japan, Malaysia,
     • Identity Recovery                                                                                                                            Mexico, Netherlands,
                                                                                                                                                    New Zealand, Norway,
    AI Acceleration                                                                                                                                 Poland, Qatar, Singapore,
     • Rubrik Agent Cloud6                                                                                                                          South Africa, South
                                                                                                                                                    Korea, Spain, Sweden,
                                                                                                                                                    Switzerland, Taiwan,
                                                                                                                                                    United Arab Emirates,
                                                                                                                                                    the United Kingdom, and
                                                                                                                                                    the USA.

                                                        Twilio Inc.              Sendgrid email service used to send notifications                  USA
                                                                                 about the products and services to customer
                                                                                 support teams and/or customer contacts.

1   Cloud Posture Risk (CPR) uses the DSPM infrastructure. Refer to the DSPM table for additional subprocessors.
2   Data Discovery and Classification uses the DSPM infrastructure if Cloud Live workloads are selected. Refer to the DSPM table for additional subprocessors.
3   Data Access Governance (DAG) uses the DSPM infrastructure. Refer to the DSPM table for additional subprocessors.
4   Data Detection & Response (DDR) uses the DSPM infrastructure. Refer to the DSPM table for additional subprocessors.
5   Rubrik AI. Refer to the Artificial Intelligence table for additional subprocessors.
6   Rubrik Agent Cloud also leverages the Predibase SaaS infrastructure. Refer to the Rubrik Agent Cloud table for additional subprocessors.
ADDITIONAL SUBPROCESSORS

The products listed below are a part of Rubrik core products that also utilize Amazon Web Services and/or Microsoft Azure as
part of hosted solution, and may be dependent on a customer selection.

    Aligned Product                                      Subprocessor             Description                                      Location of Processing

    NAS CD                                               Amazon Web               NAS CD utilizes Amazon Web Services as part of   Australia, Germany, India,
                                                         Services, Inc.           its architecture.                                Israel, Singapore, South
                                                                                                                                   Africa, South Korea,
                                                                                                                                   Sweden, Switzerland,
                                                                                                                                   the UAE1, the United
                                                                                                                                   Kingdom, and the USA.

    Rubrik Cloud Vault (RCV)                             Amazon Web               Where supported, Customers can select a Rubrik   Available in Single
                                                         Services, Inc.           managed AWS storage location for customer        zone and Multi-zone
                                                                                  data.                                            redundancies for Backup
                                                                                                                                   tier and Multi-zone
                                                                                                                                   redundancy for Archive
                                                                                                                                   tier.
                                                                                                                                   AWS regions supporting
                                                                                                                                   single and multi-zone
                                                                                                                                   redundancy

                                                         Microsoft                Where supported, Customers can select a Rubrik   Region support depends
                                                         Corporation              managed Microsoft Azure storage location for     on the customer selected
                                                                                  customer data.                                   tier and associated
                                                                                                                                   redundancy level.
                                                                                                                                   Azure regions supporting
                                                                                                                                   Single-zone redundancy
                                                                                                                                   Azure regions supporting
                                                                                                                                   Multi-zone redundancy
                                                                                                                                   Azure regions supporting
                                                                                                                                   Multi-region redundancy

                                                         Google LLC               Where supported, Customers can select a Rubrik   Available in Multi-zone
                                                                                  managed Google Cloud Platform storage location   redundancy.
                                                                                  for customer data.
                                                                                                                                   GCP regions supported

1    The RSC deployment into the UAE region is a limited deployment with restricted functionality.
DSPM SUBPROCESSORS
Rubrik DSPM products leverage the below additional listed subprocessors.

 Aligned Product                      Subprocessor       Description                                         Location of Processing

 Rubrik Security Cloud (RSC)          Amazon Web         Used for cloud infrastructure services to support   Australia, Germany, India,
                                      Services, Inc.     delivery of products and services, such as          Ireland, Israel, Japan,
 Data Posture Management                                 facilitating support file transfers, logs, etc.     Republic of Indonesia,
 Data Security Posture Management                                                                            Singapore, Switzerland,
  • Cloud Posture Risk                                                                                       the United Arab Emirates,
  • Data Risk Management                                                                                     the United Kingdom, and
  • Data Discovery & Classification                                                                          the USA.
  • Data Access Governance (DAG)
  • Data Detection & Response (DDR)   Okta, Inc.         Used to provide authentication services for         Australia, Europe, Japan,
  • Laminar                                              DSPM Legacy (Laminar) Platform.                     the United Kingdom, and
                                                                                                             the USA.

                                      ClickHouse, Inc.   Used to collect service and application logs        Australia, Germany,
                                                         related to Data Security Posture Management         India, Ireland, Japan,
                                                         products and services.                              Singapore, the United
                                                                                                             Kingdom, the United
                                                                                                             Arab Emirates, and the
                                                                                                             USA.

RUBRIK AGENT CLOUD SUBPROCESSORS
The Rubrik Agent Cloud product leverages the below listed subprocessors.

 Aligned Product                      Subprocessor       Description                                         Location of Processing

 Rubrik Agent Cloud                   Amazon Web         Used for cloud infrastructure services to support   USA
                                      Services, Inc.     delivery of products and services, such as
                                                         facilitating support file transfers, logs, etc.

                                      Okta, Inc.         Used to provide authentication within the           USA
                                                         Predibase Dataplane.
ARTIFICIAL INTELLIGENCE SUBPROCESSORS
Products that leverage AI will also appear in this table. Subprocessors will repeat as needed to properly identify the product /
subprocessor alignment.

    Aligned Product                                      Subprocessor             Description                                                        Location of Processing

    Rubrik AI1                                           Microsoft                Cloud AI inference platform (Azure AI Foundry)                     USA
                                                         Corporation              used to deliver Rubrik AI-assisted features.
                                                                                  Processes customer-submitted queries and
                                                                                  associated metadata on a transient basis.

                                                         Amazon Web               Cloud AI inference platform (Amazon Bedrock)                       USA
                                                         Services, Inc            used to deliver Rubrik AI-assisted features.
                                                                                  Processes customer-submitted queries and
                                                                                  associated metadata on a transient basis.

                                                         Google LLC               Cloud AI inference platform (Google Vertex AI)                     USA
                                                                                  used to deliver Rubrik AI-assisted features.
                                                                                  Processes customer-submitted queries and
                                                                                  associated metadata on a transient basis.

1    Rubrik AI may route inference requests to one or more of the above listed platforms at any time. Individual models may be served from any listed platform, and platform assignment
     per model may change based on operational factors including performance, availability, and for other reasons determined by Rubrik, Inc.

ANCILLARY
The subprocessors listed below provide an ancillary service to help support, operate and maintain a Rubrik service.

    Subprocessor                                         Description                                                                                 Location of Processing

    dbt Labs, Inc                                        Data transformation tool used to provide big data framework                                 USA
                                                         analytics.

    Snowflake Inc.                                       Big data framework used for analytics.                                                      USA
CUSTOMER SUPPORT
All Rubrik products are supported by an integrated set of tooling and used by our Customer Support team.

 Aligned Product                       Subprocessor       Description                                          Location of Processing

 All Products and All Features         Amazon Web         Amazon Connect is utilized as a global telephony     USA
                                       Services, Inc.     platform to enable customers and partners to
                                                          receive technical support services over the
                                                          phone.

                                       Atlassian Pty      Jira. Ticketing system used to track customer        USA
                                       Ltd.               reported bugs, enhancements, and support
                                                          requests, including related AI-enabled features
                                                          for issue management and administrative
                                                          support.

                                       Box, Inc.          Box. FTP services enabling customers to share        USA
                                                          large files for troubleshooting.

                                       Google LLC         Workplace /Gmail: Used as a customer support         Belgium, Chile,
                                                          communication platform.                              Denmark, Finland,
                                                                                                               Germany, Ireland, Japan,
                                                                                                               Netherlands, Norway,
                                                                                                               Singapore, Taiwan, the
                                                                                                               United Kingdom, and the
                                                                                                               USA.

                                       Salesforce, Inc.   Service Console: Used as a customer support          USA
                                                          ticketing and case management platform.

                                       Salesforce, Inc.   Slack. Collaboration service used to interact with   USA
                                                          customers during support.

                                       Zoom Video         Zoom. Cloud-based communications platform            USA
                                       Communications,    used to support customer collaboration, including
                                       Inc.               video meetings, VoIP, screen sharing, recording,
                                                          transcription, and other AI-enabled audio,
                                                          video, and meeting assistance features used
                                                          in connection with customer technical support
                                                          interactions.

AFFILIATES
Rubrik engages Rubrik Affiliates in the table below to perform limited activities in connection with Rubrik Services. The table
shows the entity relevant to our Rubrik Service and limited processing activity each entity is authorized to perform with
respect to customer personal data.

In the course of performing this activity, the Rubrik Affiliate may require limited, authorized access to customer personal data
to respond to customer-initiated requests or as needed to maintain security and integrity of our Services.

The ultimate parent company for all Rubrik Affiliates listed below is Rubrik, Inc.

                                                                                          Location of
 Legal Entity/Affiliate                 Limited Processing Activity                                            Business
                                                                                          Processing

 Rubrik Australia Pty Ltd               Engineering may be engaged for customer           Australia             • Engineering
                                        support issues.
Rubrik Cloud Data Management Inc.   Customer support may be engaged for                Canada           • Customer Support
                                    customer support issues.                                            • Information Security
                                    Information Security is engaged to maintain
                                    infrastructure security and monitor business and
                                    enterprise applications.

Rubrik Cloud Data Management        Customer support and/or engineering may be         Ireland          • Customer Support
Limited                             engaged for customer support issues.                                • Information Security
                                    Information Security is engaged to maintain
                                    infrastructure security and monitor business and
                                    enterprise applications.

Rubrik India Private Limited        Customer support and/or engineering may be         India            • Customer Support
                                    engaged for customer support issues.                                • Engineering
                                                                                                        • Information Security
                                    Information Security is engaged to maintain
                                    infrastructure security and monitor business and
                                    enterprise applications.

Laminar Israel Ltd.                 Customer Support and/or engineering may be         Israel           • Customer Support
                                    engaged for customer support issues.                                • Engineering

Rubrik Japan KK                     Customer support may be engaged for                Japan            • Customer Support
                                    customer support issues.

Rubrik The Netherlands B.V.         Customer support may be engaged for                Netherlands      • Customer Support
                                    customer support issues.                                            • Information Security
                                    Information Security is engaged to maintain
                                    infrastructure security and monitor business and
                                    enterprise applications.

Rubrik Singapore Pte Limited        Customer support may be engaged for                Singapore        • Customer Support
                                    customer support issues.

Rubrik UK Limited.                  Information Security is engaged to maintain        United Kingdom   • Information Security
                                    infrastructure security and monitor business and
                                    enterprise applications.

Rubrik, Inc.                        Customer support and/or engineering may be         USA              • Customer Support
                                    engaged for customer support issues.                                • Engineering
                                                                                                        • Information Security
                                    Information Security is engaged to maintain
                                                                                                        • Information
                                    infrastructure security and monitor business and
                                                                                                          Technology
                                    enterprise applications.
                                    Information Technology is engaged to
                                    administer and manage FTP file-sharing
                                    applications.