# Alcon

Alcon (alcon.com): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/alcon
- Documents last verified: 2026-10-07
- Transparency rating: 16/100 (how much it publishes, not how secure it is): Subprocessor list 0/30 (published; no entries could be read); Processing locations 0/8 (no list); Purposes 0/7 (no list); Data processing addendum 0/12 (not found); Trust center 8/8; Privacy policy 0/6 (not found); security.txt 0/6 (not found); Security page 0/5 (not found); Status page 0/5 (not found); Vulnerability disclosure 0/5 (not found); Pages still reachable 8/8
- Cite as: Alcon, Third Party Index, https://thirdpartyindex.com/vendors/alcon (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Trust center | https://trust.alcon.com/ | 2026-10-07 | 2026-09-28 |
| Subprocessor list | https://preferences.myalcon.com/data-processing-agreement-annex/ | 2026-10-07 | 2026-10-07 |

## Subprocessors (0)

No subprocessor list has been found or read for this vendor.

## Compliance

As its trust center lists them.

- Audited: SOC 2 Type II, Cyber Essentials ([evidence](https://thirdpartyindex.com/evidence/11657))

## Security program

What ALCON INC's Form 20-F for fiscal 2025, filed Feb 24, 2026 (Item 16K) says, in its words (https://www.sec.gov/Archives/edgar/data/1167379/000116737926000014/0001167379-26-000014-index.htm).

- Led by: Chief Information Security Officer
- Leader's experience: 30+ years
- Board oversight: Audit and Risk Committee
- Frameworks named: NIST, ISO 27001
- Practices named: Incident response plan, Tabletop exercises, Penetration testing, Vulnerability management, Phishing simulations, Cyber insurance
- Engages outside assessors or consultants
- Reviews its suppliers' security
- Since the fiscal 2024 report: board oversight by the Audit and Risk Committee (was the Audit and Risk Committee, Risk Committee); ISO 27001 now named.

## Subprocessor of (0)

No tracked vendor lists it.

## Security record

Breaches listed by Have I Been Pwned (CC BY 4.0, haveibeenpwned.com):

- Alcon, 2026-08-01: 218395 accounts; data: Email addresses, Names, Phone numbers, Physical addresses

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api