Snapshot 91560
Parsed
What we read from this document, as JSON. Each entry names the snapshot it was read from.
{
"entries": [
{
"kind": "subprocessor",
"vendor": "amazon",
"evidence_id": 91560,
"data": {
"name": "Amazon",
"purposes": [
"Amazon Web Services (for hosting, connectivity layer and middleware)"
],
"sections": [
"NCC Group Sub-processors"
],
"services": [
"Managed Services"
],
"locations": [
"APAC",
"Asia Pacific (Singapore) Region",
"Australia (Sydney) Region",
"Europe",
"Europe (Frankfurt) Region",
"Europe (Ireland) Region",
"Europe (London) Region",
"Europe (Paris) Region",
"Multi-region: EU, UK, US and APAC",
"US East (Northern Virginia) Region",
"US East (Ohio) Region",
"US West (Northern California) Region",
"US West (Oregon) Region",
"United States"
]
}
},
{
"kind": "subprocessor",
"vendor": "broadcom",
"evidence_id": 91560,
"data": {
"name": "Broadcom (VMWare Carbon Black)",
"purposes": [
"Security data analytics service (Endpoint protection)"
],
"sections": [
"NCC Group Sub-processors"
],
"locations": [
"& GCP-hosted: by default Europe West (Belgium) Region",
"AWS-hosted: by default Europe (Frankfurt) Region",
"NA and APAC customers: US Central (Iowa) Region",
"NA and APAC customers: US East (South Carolina) Region"
]
}
},
{
"kind": "subprocessor",
"vendor": "crowdstrike",
"evidence_id": 91560,
"data": {
"name": "CrowdStrike",
"purposes": [
"Security data analytics service (Endpoint protection)"
],
"sections": [
"NCC Group Sub-processors"
],
"locations": [
"By default: Europe (Frankfurt) Region",
"NA and APAC NA customers: US Central (Iowa) Region"
]
}
},
{
"kind": "subprocessor",
"vendor": "cycognito",
"evidence_id": 91560,
"data": {
"name": "CyCognito",
"purposes": [
"External Attack Surface Management Service"
],
"sections": [
"NCC Group Sub-processors"
],
"locations": [
"(potentially also in Israel in case of support)",
"GCP-hosted: Europe West (Belgium) Region"
]
}
},
{
"kind": "subprocessor",
"vendor": "digitalocean",
"evidence_id": 91560,
"data": {
"name": "Digital Ocean",
"purposes": [
"Hosting (Digital Ocean Cloud)",
"Self service linux machines for short term projects"
],
"sections": [
"NCC Group Sub-processors"
],
"services": [
"Technical Assurance Services"
],
"locations": [
"APAC: Australia (Sydney), Singapore",
"EU: Europe (Frankfurt) or Amsterdam)",
"Multi region: EU, UK, US and APAC",
"NA: US (New York or San Francisco), Canada (Toronto)",
"UK: Europe (London)"
]
}
},
{
"kind": "subprocessor",
"vendor": "horizon3-ai",
"evidence_id": 91560,
"data": {
"name": "Horizon3.ai (NodeZero)",
"purposes": [
"Providing automated testing services"
],
"sections": [
"NCC Group Sub-processors"
],
"locations": [
"EU: Europe (Frankfurt) Region",
"NA: US West (Oregon) Region"
]
}
},
{
"kind": "subprocessor",
"vendor": "iasme",
"evidence_id": 91560,
"data": {
"name": "IASME",
"purposes": [
"Vulnerability scan & audit platform service"
],
"sections": [
"NCC Group Sub-processors"
],
"locations": [
"Azure-hosted: UK (London) Region"
]
}
},
{
"kind": "subprocessor",
"evidence_id": 91560,
"data": {
"name": "Intermax Cloudsourcing",
"purposes": [
"Private hosting service"
],
"sections": [
"NCC Group Sub-processors"
],
"locations": [
"NL (Amsterdam, Rotterdam, Delft)"
]
}
},
{
"kind": "subprocessor",
"vendor": "microsoft",
"evidence_id": 91560,
"data": {
"name": "Microsoft",
"purposes": [
"Azure (for hosting, security data analytics and connectivity layer), Office 365 (several office applications) and EntraID (for active directory)",
"Hosting (Azure Cloud), security data analytics service (Azure Sentinel), connectivity layer (Azure Lighthouse), and active directory (EntraID)"
],
"sections": [
"NCC Group Sub-processors"
],
"locations": [
"Mentioned regions are the primary choice by default. Other regions are dependent on client choice",
"Multi-region: EU, UK and US",
"North Europe (Ireland) Region",
"UK South (London) Region (regarding all e-mail data)",
"West Europe (Netherlands) Region",
"West Europe (Netherlands) Region, North Europe (Ireland) Region, UK South (London) Region"
]
}
},
{
"kind": "subprocessor",
"evidence_id": 91560,
"data": {
"name": "Mindgame",
"purposes": [
"Awareness campaign tool"
],
"sections": [
"NCC Group Sub-processors"
],
"services": [
"Consulting and Implementation"
],
"locations": [
"DigitalOcean-hosted: Europe (Amsterdam) Region"
]
}
},
{
"kind": "subprocessor",
"vendor": "qualys",
"evidence_id": 91560,
"data": {
"name": "Qualys",
"purposes": [
"Internal & External Attack Surface Management Services"
],
"sections": [
"NCC Group Sub-processors"
],
"locations": [
"APAC: Australia (Sydney) Region",
"EU: Europe (Amsterdam) Region",
"NA: US (Phoenix) Region",
"Oracle-hosted: Region by choice of Client",
"Qualys support: India and the US",
"UK: UK (London) Region"
]
}
},
{
"kind": "subprocessor",
"evidence_id": 91560,
"data": {
"name": "Reveal Data Corporation",
"purposes": [
"eDiscovery platform service"
],
"sections": [
"NCC Group Sub-processors"
],
"services": [
"Digital Forensic Incident Response"
],
"locations": [
"(potentially also in UK and US for support on a case-by-case basis)",
"AWS-hosted: Europe (Frankfurt) Region"
]
}
},
{
"kind": "subprocessor",
"vendor": "searchlight-cyber",
"evidence_id": 91560,
"data": {
"name": "Searchlight Cyber",
"purposes": [
"Web monitoring service"
],
"sections": [
"NCC Group Sub-processors"
],
"locations": [
"Digital Ocean & AWS hosted: Europe (London) Region"
]
}
},
{
"kind": "subprocessor",
"vendor": "sentinelone",
"evidence_id": 91560,
"data": {
"name": "SentinelOne",
"purposes": [
"Security data analytics service (Endpoint protection)"
],
"sections": [
"NCC Group Sub-processors"
],
"locations": [
"By default: Europe (Frankfurt) Region",
"NA and APAC customers: US East (Virginia) Region"
]
}
},
{
"kind": "subprocessor",
"vendor": "servicenow",
"evidence_id": 91560,
"data": {
"name": "ServiceNow",
"purposes": [
"Security incident management platform service"
],
"sections": [
"NCC Group Sub-processors"
],
"locations": [
"Azure-hosted: UK South (London) Region",
"For EU-only clients, the option for onboarding in West Europe (NL) region and North Europa (Ireland) Region is available"
]
}
},
{
"kind": "subprocessor",
"vendor": "splunk",
"evidence_id": 91560,
"data": {
"name": "Splunk",
"purposes": [
"Security data analytics (SIEM) service"
],
"sections": [
"NCC Group Sub-processors"
],
"locations": [
"APAC: Asia Pacific (Sydney) Region",
"AWS hosted: Region by choice of Client.",
"EU: Europe (Frankfurt) Region",
"NA: US West (N. California) Region",
"UK: Europe (London) Region"
]
}
},
{
"kind": "subprocessor",
"evidence_id": 91560,
"data": {
"name": "Thinkst Canary",
"purposes": [
"Threat detection and deception service"
],
"sections": [
"NCC Group Sub-processors"
],
"locations": [
"APAC: Asia Pacific (Sydney) Region",
"AWS-hosted: Region by choice of Client.",
"EU: Europe (Ireland) Region,",
"NA: US West (N. California) Region",
"UK: Europe (London) Region"
]
}
},
{
"kind": "subprocessor",
"vendor": "umbrio",
"evidence_id": 91560,
"data": {
"name": "Umbrio (Davinsi)",
"purposes": [
"Support service"
],
"sections": [
"NCC Group Sub-processors"
],
"locations": [
"Azure-hosted: West Europe Region (NL)"
]
}
},
{
"kind": "subprocessor",
"evidence_id": 91560,
"data": {
"name": "ZyLAB ONE",
"purposes": [
"eDiscovery platform service"
],
"sections": [
"NCC Group Sub-processors"
],
"locations": [
"Azure-hosted: West Europe (Netherlands) Region"
]
}
}
]
}