Labs / Time machine / NCC Group

NCC Group

The subprocessor list as we last read it, on Oct 26, 2026.

Dates are when we read the list (UTC), not when NCC Group changed it. Between two readings we don't know what it said.

Oct 13 on Oct 13: first reading Oct 14: read, list unchanged Oct 15: read, list unchanged Oct 16: read, list unchanged Oct 17: read, list unchanged Oct 18: read, list unchanged Oct 19: read, list unchanged Oct 20: read, list unchanged Oct 21: read, list unchanged Oct 22: read, list unchanged Oct 23: read, list unchanged Oct 24: read, list unchanged Oct 25: read, list unchanged Oct 26: read, list unchanged Oct 13 on Oct 13: first reading Oct 14: read, list unchanged Oct 15: read, list unchanged Oct 16: read, list unchanged Oct 17: read, list unchanged Oct 18: read, list unchanged Oct 19: read, list unchanged Oct 20: read, list unchanged Oct 21: read, list unchanged Oct 22: read, list unchanged Oct 23: read, list unchanged Oct 24: read, list unchanged Oct 25: read, list unchanged Oct 26: read, list unchanged

tall: list changed · medium: document changed · short: read, no change · x: check failed · dotted: change dates only. Tap a tick or use the date box.

We have published no changes to this vendor's list; our first reading was Oct 13, 2026.
Read Oct 26, 2026 · 19 companies named as a subprocessor · stored document

NamePurposeLocationFirst read
Amazon Amazon Web Services (for hosting, connectivity layer and middleware)
APAC; Asia Pacific (Singapore) Region; Australia (Sydney) Region; Europe; Europe (Frankfurt) Region; Europe (Ireland) Region; Europe (London) Region; Europe (Paris) Region; Multi-region: EU, UK, US and APAC; US East (Northern Virginia) Region; US East (Ohio) Region; US West (Northern California) Region; US West (Oregon) Region; United States
Broadcom (VMWare Carbon Black) Security data analytics service (Endpoint protection)
& GCP-hosted: by default Europe West (Belgium) Region; AWS-hosted: by default Europe (Frankfurt) Region; NA and APAC customers: US Central (Iowa) Region; NA and APAC customers: US East (South Carolina) Region
CrowdStrike Security data analytics service (Endpoint protection)By default: Europe (Frankfurt) Region; NA and APAC NA customers: US Central (Iowa) Region
CyCognito External Attack Surface Management Service(potentially also in Israel in case of support); GCP-hosted: Europe West (Belgium) Region
Digital Ocean Hosting (Digital Ocean Cloud); Self service linux machines for short term projects
APAC: Australia (Sydney), Singapore; EU: Europe (Frankfurt) or Amsterdam); Multi region: EU, UK, US and APAC; NA: US (New York or San Francisco), Canada (Toronto); UK: Europe (London)
Horizon3.ai (NodeZero) Providing automated testing servicesEU: Europe (Frankfurt) Region; NA: US West (Oregon) Region
IASME Vulnerability scan & audit platform serviceAzure-hosted: UK (London) Region
Intermax Cloudsourcing Private hosting serviceNL (Amsterdam, Rotterdam, Delft)
Microsoft
Azure (for hosting, security data analytics and connectivity layer), Office 365 (several office applications) and EntraID (for active directory); Hosting (Azure Cloud), security data analytics service (Azure Sentinel), connectivity layer (Azure Lighthouse), and active directory (EntraID)
Mentioned regions are the primary choice by default. Other regions are dependent on client choice; Multi-region: EU, UK and US; North Europe (Ireland) Region; UK South (London) Region (regarding all e-mail data); West Europe (Netherlands) Region; West Europe (Netherlands) Region, North Europe (Ireland) Region, UK South (London) Region
Mindgame Awareness campaign toolDigitalOcean-hosted: Europe (Amsterdam) Region
Qualys Internal & External Attack Surface Management Services
APAC: Australia (Sydney) Region; EU: Europe (Amsterdam) Region; NA: US (Phoenix) Region; Oracle-hosted: Region by choice of Client; Qualys support: India and the US; UK: UK (London) Region
Reveal Data Corporation eDiscovery platform service(potentially also in UK and US for support on a case-by-case basis); AWS-hosted: Europe (Frankfurt) Region
Searchlight Cyber Web monitoring serviceDigital Ocean & AWS hosted: Europe (London) Region
SentinelOne Security data analytics service (Endpoint protection)By default: Europe (Frankfurt) Region; NA and APAC customers: US East (Virginia) Region
ServiceNow Security incident management platform serviceAzure-hosted: UK South (London) Region; For EU-only clients, the option for onboarding in West Europe (NL) region and North Europa (Ireland) Region is available
Splunk Security data analytics (SIEM) serviceAPAC: Asia Pacific (Sydney) Region; AWS hosted: Region by choice of Client.; EU: Europe (Frankfurt) Region; NA: US West (N. California) Region; UK: Europe (London) Region
Thinkst Canary Threat detection and deception serviceAPAC: Asia Pacific (Sydney) Region; AWS-hosted: Region by choice of Client.; EU: Europe (Ireland) Region,; NA: US West (N. California) Region; UK: Europe (London) Region
Umbrio (Davinsi) Support serviceAzure-hosted: West Europe Region (NL)
ZyLAB ONE eDiscovery platform serviceAzure-hosted: West Europe (Netherlands) Region

Built from the changes we published; changes we recorded without an alert (parser fixes, entries approved after review) don't appear. Where we later improved how we read a list, an earlier list may look different from the vendor's page at the time.

Gaps in our readings

No gaps since Oct 13, 2026.

All readings (14)
DateResult
read, unchangedview compare
read, unchangedview compare
read, unchangedview compare
read, unchangedview compare
read, unchangedview compare
read, unchangedview compare
read, unchangedview compare
read, unchangedview compare
read, unchangedview compare
read, unchangedview compare
read, unchangedview compare
read, unchangedview compare
read, unchangedview compare
first readingview compare

History starts Oct 13, 2026. Dates are UTC. Data CC BY 4.0. Shown as stored when this page was built.