# Capsule8

Capsule8 declares [35 subprocessors](https://thirdpartyindex.com/vendors/capsule8#subprocessors) in [its subprocessor list](https://www.sophos.com/en-us/legal/sub-processor), which we last checked on 2026-11-11 ([evidence](https://thirdpartyindex.com/evidence/29392)). They include [Amazon Web Services](https://thirdpartyindex.com/vendors/amazon-web-services), [Google Cloud](https://thirdpartyindex.com/vendors/google-cloud) and [Microsoft](https://thirdpartyindex.com/vendors/microsoft). No published changes since we first read it on 2026-09-23.

Capsule8 (capsule8.com): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/capsule8
- Documents last verified: 2026-11-11
- Transparency rating: 93/100 (how much it publishes, not how secure it is): Subprocessor list 30/30; Processing locations 8/8; Purposes 5/7 (partial); Data processing addendum 12/12; Trust center 8/8; Privacy policy 6/6; security.txt 6/6; Security page 0/5 (not found); Status page 5/5; Vulnerability disclosure 5/5; Pages still reachable 8/8
- Supply chain: relies on 23 tracked vendors directly, 163 within two hops, 520 within three; 0 tracked vendors rely on it directly, 0 within two hops, 0 within three
- Cite as: Capsule8, Third Party Index, https://thirdpartyindex.com/vendors/capsule8 (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Trust center | https://www.sophos.com/en-us/trust | 2026-11-11 | 2026-11-11 |
| Subprocessor list | https://www.sophos.com/en-us/legal/sub-processor | 2026-11-11 | 2026-10-01 |
| Data processing addendum | https://www.sophos.com/en-us/legal/data-processing-addendum | 2026-11-11 | 2026-09-25 |
| Privacy policy | https://www.sophos.com/en-us/legal/sophos-group-privacy-notice | 2026-11-11 | 2026-11-11 |
| Terms | https://www.sophos.com/en-us/legal/sophos-website | 2026-11-11 | 2026-11-06 |
| security.txt | https://www.sophos.com/.well-known/security.txt | 2026-11-11 | 2026-09-23 |
| Status page | https://status.sophos.com/ | 2026-11-11 | 2026-11-11 |
| Security advisories | https://www.sophos.com/en-us/security-advisories | 2026-11-11 | 2026-11-09 |

## Subprocessors (35)

As its own list states them.

| Subprocessor | Purpose | Location | Listed since |
|---|---|---|---|
| [Ada Support Inc.](https://thirdpartyindex.com/vendors/ada-support.md) | Technical support and chat bot services. | USA; Canada | 2026-10-10 |
| [Aiven Ltd. \[Apache Kafka\]](https://thirdpartyindex.com/vendors/aiven.md) | Cloud infrastructure services | AWS Regions | 2026-09-23 |
| [Akamai Technologies Inc](https://thirdpartyindex.com/vendors/akamai.md) | Content Delivery Network and edge proxy for Sophos software downloads, UI assets, and APIs | USA | 2026-09-23 |
| [Amazon Web Services, Inc](https://thirdpartyindex.com/vendors/amazon-web-services.md) | Data centre services, cloud infrastructure services, Generative AI and identity access. | USA; UK; Ireland; Germany; Canada; Australia; Japan; India; Brazil; UAE; Switzerland | 2026-10-10 |
| [Atlassian Corporation Limited](https://thirdpartyindex.com/vendors/atlassian.md) | Internal requests and project tracking | Germany; Ireland | 2026-10-10 |
| Benjamin Mosse Consulting Pty Ltd | — | Location: Australia; Location: United States | 2026-09-23 |
| Blue Ocean Contact Centres Inc. | Technical support helpdesk. | Canada | 2026-09-23 |
| [Box Inc](https://thirdpartyindex.com/vendors/box.md) | Secure storage of forensic data and incident-related files | Germany / Ireland, France, Canada, Japan, USA, UK, Australia. | 2026-09-23 |
| [Cleverbridge GmbH](https://thirdpartyindex.com/vendors/cleverbridge.md) | Payment support services | USA; Germany | 2026-10-10 |
| [Constella Intelligence, Inc.](https://thirdpartyindex.com/vendors/constella-intelligence.md) | To detect and alert on compromised credentials and identity threats across the surface, deep, and dark web. | USA; Germany; Ireland | 2026-10-10 |
| Echoworx Corporation | Email encryption services | Canada | 2026-09-23 |
| Fenix24, Inc | — | Location: United States | 2026-09-23 |
| Forvis Mazars Group | — | Location: United Kingdom; Location: United States | 2026-09-23 |
| [Fullstory, Inc](https://thirdpartyindex.com/vendors/fullstory.md) | Session replay, product analytics, and digital experience insights. | USA; Germany | 2026-10-10 |
| [Genesys Telecommunications Laboratories, Inc.](https://thirdpartyindex.com/vendors/genesys.md) | Cloud Based contact centre system, technical support and call routing. | Ireland | 2026-09-23 |
| [Google LLC](https://thirdpartyindex.com/vendors/google-cloud.md) | Data centre services, cloud infrastructure services, analytics tools | USA | 2026-09-23 |
| [Google Cloud EMEA Limited](https://thirdpartyindex.com/vendors/google-cloud.md) | Cloud infrastructure services, analytics tools | USA | 2026-09-23 |
| GRCS INC. | — | Location: India; Location: Japan | 2026-09-23 |
| Hoodwink Consulting LLC | — | Location: United States | 2026-09-23 |
| Invictus Incident Response B.V. | — | Location: The Netherlands | 2026-09-23 |
| Island Technology Inc | Enterprise browser and secure access platform | USA, UK, Germany, Canada and Australia | 2026-09-23 |
| [Logz.io](https://thirdpartyindex.com/vendors/logz-io.md) | Storage of log files, observability | Germany | 2026-09-23 |
| [Microsoft Corporation](https://thirdpartyindex.com/vendors/microsoft.md) | Data centre services, cloud infrastructure services and Generative AI | Germany; Netherlands; United States; Sweden | 2026-10-10 |
| [Raintank Inc, d/b/a Grafana Labs](https://thirdpartyindex.com/vendors/grafana.md) | Operational dashboard (metrics) services | USA; Ireland; UK | 2026-10-10 |
| [Reversing Labs](https://thirdpartyindex.com/vendors/reversinglabs.md) | Threat intelligence and file analysis. | Croatia | 2026-09-23 |
| [Rubrik, Inc.](https://thirdpartyindex.com/vendors/rubrik.md) | Backup and recovery for Microsoft 365 | Microsoft Azure Regions selected by customer | 2026-09-23 |
| Rule 56 | — | Location: United States | 2026-09-23 |
| [Salesforce Inc.](https://thirdpartyindex.com/vendors/salesforce.md) | Customer relationship management services, metrics and technical support services | USA | 2026-09-23 |
| [Sendmarc Inc](https://thirdpartyindex.com/vendors/sendmarc.md) | DMARC email authentication and domain protection | Netherlands | 2026-09-23 |
| [SendSafely Inc (B2B)](https://thirdpartyindex.com/vendors/sendsafely.md) | Technical support helpdesk and filesharing system | Ireland; Germany; USA | 2026-10-10 |
| [Sentry (d/b/a Functional Software, Inc.)](https://thirdpartyindex.com/vendors/sentry.md) | Error reporting and analysis | USA | 2026-09-23 |
| SIE Co.,Ltd | — | Location: Japan; Location: United States | 2026-09-23 |
| [Sierra Technologies Inc](https://thirdpartyindex.com/vendors/sierra-technologies.md) | Conversational AI chat bot for customer support | USA | 2026-09-23 |
| [Tenable, Inc.](https://thirdpartyindex.com/vendors/tenable-holdings.md) | Vulnerability Management Services | USA; Ireland; Germany; Canada; Australia; Japan; India; Brazil | 2026-10-10 |
| [Zendesk, Inc](https://thirdpartyindex.com/vendors/zendesk.md) | Technical support helpdesk | USA | 2026-09-23 |

Read from ([evidence](https://thirdpartyindex.com/evidence/29392)). CSV: https://thirdpartyindex.com/vendors/capsule8/subprocessors.csv

## Web Technologies

Capsule8's homepage made 215 requests to 38 domains, 23 services controlled by another company, and 2 domains not identified. Loaded on 2026-11-09 by a browser that accepted nothing; other visits may load more or less. What a page loads is not a list of who receives customer data.

23 third parties by category: Advertising 7 (Google Cloud, Microsoft, Sovrn, Reddit, Inc.; reviewed: MediaMath; usually detected as Advertising: The Trade Desk, Inc., Xandr); Analytics 6 (Fullstory, Clay, LinkedIn, Cloudflare, Delivr.ai, ZoomInfo); RUM 2 (Akamai; reviewed: New Relic); Marketing automation 1 (6Sense Insights, Inc.); Live chat 1 (Qualified.com, Inc.); Cookie compliance 1 (OneTrust); CMS 1 (reviewed: Contentstack); Issue trackers 1 (usually detected as Issue trackers: Sentry); Recruitment & staffing 1 (reviewed: XING); Unclassified 2 (Report URI Ltd, Oracle). Each company that appears controlled by another organization is counted once, under the main category of the technologies detected from it on this homepage or, when none was, the category recorded from the company's own page (marked reviewed) or else the one it is usually detected as on other published homepages (marked as such); unclassified: none of these.

### Third parties (23)

- Qualified.com, Inc.: 38 requests to qualified.com; Qualified
- Contentstack: 23 requests to contentstack.io
- Google Cloud: 22 requests to googletagmanager.com, google.com, doubleclick.net, google-analytics.com; DoubleClick Floodlight, Google Analytics, Google Tag Manager (its subprocessor list names it too)
- 6Sense Insights, Inc.: 14 requests to 6sc.co, 6sense.com; 6sense
- OneTrust: 11 requests to cookielaw.org, onetrust.com; OneTrust
- Fullstory: 6 requests to fullstory.com; FullStory (its subprocessor list names it too)
- Report URI Ltd: 6 requests to report-uri.com
- Microsoft: 5 requests to bing.com, bing.net; Microsoft Advertising (its subprocessor list names it too)
- Sovrn: 5 requests to lijit.com; Sovrn
- Clay: 4 requests to claydar.com; Clay Web Intent
- Oracle: 4 requests to eloqua.com, en25.com
- Akamai: 3 requests to go-mpulse.net, akstat.io; Akamai mPulse (its subprocessor list names it too)
- LinkedIn: 3 requests to linkedin.com, licdn.com; Linkedin Insight Tag
- MediaMath: 3 requests to mathtag.com
- The Trade Desk, Inc.: 3 requests to adsrvr.org
- New Relic: 2 requests to newrelic.com
- Reddit, Inc.: 2 requests to reddit.com, redditstatic.com; Reddit Ads
- XING: 2 requests to xing.com, xingcdn.com
- Cloudflare: 1 request to cloudflareinsights.com; Cloudflare Browser Insights
- Delivr.ai: 1 request to delivr.ai; Delivr.ai
- Sentry: 1 request to sentry.io (its subprocessor list names it too)
- Xandr: 1 request to adnxs.com
- ZoomInfo: 1 request to zi-scripts.com; Zoominfo

### Unknown (2)

Domains not identified yet: dpmsrv.com, sitelytics.tech

### First party (1)

- Capsule8: 51 requests to sophos.com, capsule8.com; Akamai, Akamai Bot Manager, AppNexus, Boomerang, Cloudflare, Contentstack, Eloqua, HSTS, HTTP/3, Microsoft Clarity, New Relic, Next.js 16.4.2, Next.js App Router, Open Graph, Priority Hints, React, Sentry, Turbopack, Webpack

11 tracked companies loaded by the homepage are not in Capsule8's subprocessor list. A website can use a service without it processing customer data.

## Subprocessor of (0)

No tracked vendor lists it.

## Incidents reported by Capsule8's subprocessors

Incidents reported in the last 30 days on their own status pages by 11 vendors Capsule8 lists as subprocessors. A subprocessor list names a company, not the service an incident touched.

- 2026-11-11: [Grafana](https://thirdpartyindex.com/vendors/grafana#status), which Capsule8 lists as a subprocessor, reported Degraded performance for Grafana Cloud Metrics in prod-us-central-7 (major)
- 2026-11-11: [Grafana](https://thirdpartyindex.com/vendors/grafana#status), which Capsule8 lists as a subprocessor, reported Elevated query errors for Grafana Cloud Metrics in prod-us-east-3 (minor)
- 2026-11-11: [Sentry](https://thirdpartyindex.com/vendors/sentry#status), which Capsule8 lists as a subprocessor, reported US issues feed throwing intermittent errors (minor)
- 2026-11-11: [Sentry](https://thirdpartyindex.com/vendors/sentry#status), which Capsule8 lists as a subprocessor, reported Account emails not being delivered (major)
- 2026-11-10: [Sentry](https://thirdpartyindex.com/vendors/sentry#status), which Capsule8 lists as a subprocessor, reported EU region replay ingestion latency (minor)
- 2026-11-10: [Grafana](https://thirdpartyindex.com/vendors/grafana#status), which Capsule8 lists as a subprocessor, reported Cloud Logs writes - Elevated latency and error rates in prod-eu-central-0 (no impact stated)
- 2026-11-10: [Grafana](https://thirdpartyindex.com/vendors/grafana#status), which Capsule8 lists as a subprocessor, reported Mimir query unexpected response with status code 500 (minor)
- 2026-11-09: [Tenable](https://thirdpartyindex.com/vendors/tenable-holdings#status), which Capsule8 lists as a subprocessor, reported Tenable Cloud Security: Customers Site Access Issues (USGov1) (critical)
- 2026-11-06: [Grafana](https://thirdpartyindex.com/vendors/grafana#status), which Capsule8 lists as a subprocessor, reported Synthetic Monitoring — Jakarta Public Probe Degradation (no impact stated)
- 2026-11-05: [Aiven](https://thirdpartyindex.com/vendors/aiven#status), which Capsule8 lists as a subprocessor, reported API requests failing/timing out (no impact stated)
- 2026-11-04: [Tenable](https://thirdpartyindex.com/vendors/tenable-holdings#status), which Capsule8 lists as a subprocessor, reported Tenable Vulnerability Management: Scan Processing Delays (minor)
- 2026-11-04: [Ada Support](https://thirdpartyindex.com/vendors/ada-support#status), which Capsule8 lists as a subprocessor, reported Complete ada outage (critical)
- 2026-11-04: [Logz.io](https://thirdpartyindex.com/vendors/logz-io#status), which Capsule8 lists as a subprocessor, reported Data Ingestions Delays For Some Customers - Degraded Performance - us-east-1 (minor)
- 2026-11-04: [Sentry](https://thirdpartyindex.com/vendors/sentry#status), which Capsule8 lists as a subprocessor, reported Ingestion delays across all data (minor)
- 2026-11-04: [Fullstory](https://thirdpartyindex.com/vendors/fullstory#status), which Capsule8 lists as a subprocessor, reported Delays in syncing to S3 data warehouses (EU1) (minor)
- 2026-11-04: [Cleverbridge](https://thirdpartyindex.com/vendors/cleverbridge#status), which Capsule8 lists as a subprocessor, reported Platform availability issue (major)
- 2026-11-04: [Tenable](https://thirdpartyindex.com/vendors/tenable-holdings#status), which Capsule8 lists as a subprocessor, reported Tenable Vulnerability Management: Delay in Findings (major)
- 2026-11-04: [Box](https://thirdpartyindex.com/vendors/box#status), which Capsule8 lists as a subprocessor, reported \[Minor\] Issue with Box AI (minor)
- 2026-11-04: [Grafana](https://thirdpartyindex.com/vendors/grafana#status), which Capsule8 lists as a subprocessor, reported GitHub returning 403 for all Git Sync repositories (minor)
- 2026-11-03: [Fullstory](https://thirdpartyindex.com/vendors/fullstory#status), which Capsule8 lists as a subprocessor, reported \[Resolved\] Delayed Session Data Availability (NA1 & EU1 Data Centers) (no impact stated)
- 2026-11-03: [Grafana](https://thirdpartyindex.com/vendors/grafana#status), which Capsule8 lists as a subprocessor, reported October usage report visualization issue (minor)
- 2026-11-03: [Akamai](https://thirdpartyindex.com/vendors/akamai#status), which Capsule8 lists as a subprocessor, reported Property Manager Property Activation Errors (no impact stated)
- 2026-11-03: [Sentry](https://thirdpartyindex.com/vendors/sentry#status), which Capsule8 lists as a subprocessor, reported Delays in spans and transactions processing (major)
- 2026-11-03: [Sentry](https://thirdpartyindex.com/vendors/sentry#status), which Capsule8 lists as a subprocessor, reported Sentry.io dashboard and API is down (critical)
- 2026-11-03: [Grafana](https://thirdpartyindex.com/vendors/grafana#status), which Capsule8 lists as a subprocessor, reported Increased query latency for Logs in GCP US Central (prod-us-central-0) (minor)
- 2026-11-03: [Grafana](https://thirdpartyindex.com/vendors/grafana#status), which Capsule8 lists as a subprocessor, reported Elevated Request Errors for Grafana Across Multiple Regions (minor)
- 2026-11-02: [Grafana](https://thirdpartyindex.com/vendors/grafana#status), which Capsule8 lists as a subprocessor, reported Grafana Cloud: k6 timeouts (no impact stated)
- 2026-11-02: [Sentry](https://thirdpartyindex.com/vendors/sentry#status), which Capsule8 lists as a subprocessor, reported Sentry dashboard is down (critical)
- 2026-11-02: [Tenable](https://thirdpartyindex.com/vendors/tenable-holdings#status), which Capsule8 lists as a subprocessor, reported Tenable Cloud Security: Sync delays (major)
- 2026-11-02: [Grafana](https://thirdpartyindex.com/vendors/grafana#status), which Capsule8 lists as a subprocessor, reported Metrics Alert Rule Evaluation Failures in AWS Australia (prod-au-southeast-1) (minor)
- 2026-11-02: [Grafana](https://thirdpartyindex.com/vendors/grafana#status), which Capsule8 lists as a subprocessor, reported Missing Metrics for Some Synthetic Monitoring Checks using the Montreal, North Virginia, and North California public probes (no impact stated)
- 2026-11-02: [Grafana](https://thirdpartyindex.com/vendors/grafana#status), which Capsule8 lists as a subprocessor, reported IRM Unable to Voice Call Brazil Numbers (major)
- 2026-10-30: [Akamai](https://thirdpartyindex.com/vendors/akamai#status), which Capsule8 lists as a subprocessor, reported Customer Security Advisory: CVE-2026-98432 (no impact stated)
- 2026-10-27: [ReversingLabs](https://thirdpartyindex.com/vendors/reversinglabs#status), which Capsule8 lists as a subprocessor, reported "TCF-0107: Files Scanned for the First Time (APIs)" is Down (major)
- 2026-10-27: [ReversingLabs](https://thirdpartyindex.com/vendors/reversinglabs#status), which Capsule8 lists as a subprocessor, reported "TCA-0404: Analyze URL (APIs)" is Down (major)
- 2026-10-27: [Grafana](https://thirdpartyindex.com/vendors/grafana#status), which Capsule8 lists as a subprocessor, reported Frontend Observability Outage in prod-eu-west-2 (critical)
- 2026-10-27: [Grafana](https://thirdpartyindex.com/vendors/grafana#status), which Capsule8 lists as a subprocessor, reported Degraded Cloud Integrations (minor)
- 2026-10-27: [Akamai](https://thirdpartyindex.com/vendors/akamai#status), which Capsule8 lists as a subprocessor, reported Performance Degradation for Customers in Mumbai and Chennai (no impact stated)
- 2026-10-27: [Akamai](https://thirdpartyindex.com/vendors/akamai#status), which Capsule8 lists as a subprocessor, reported Enterprise Application Access (EAA) Connector Issues (minor)
- 2026-10-26: [Grafana](https://thirdpartyindex.com/vendors/grafana#status), which Capsule8 lists as a subprocessor, reported ingestion errors in mimir-prod-66 (no impact stated)
- 2026-10-25: [Akamai](https://thirdpartyindex.com/vendors/akamai#status), which Capsule8 lists as a subprocessor, reported Edge Delivery issues between Indonesia and Singapore (minor)
- 2026-10-23: [Grafana](https://thirdpartyindex.com/vendors/grafana#status), which Capsule8 lists as a subprocessor, reported Some Grafana Instances Experiencing Issues Coming Online after Restart (minor)
- 2026-10-23: [Akamai](https://thirdpartyindex.com/vendors/akamai#status), which Capsule8 lists as a subprocessor, reported Customer Security Advisory: Brotli Remote Code Execution Vulnerabilities \[CVE-2026-111497\] (no impact stated)
- 2026-10-23: [Grafana](https://thirdpartyindex.com/vendors/grafana#status), which Capsule8 lists as a subprocessor, reported Elevated Trace Ingestion Latency and Errors for Grafana Cloud Traces in AWS Germany (major)
- 2026-10-22: [Akamai](https://thirdpartyindex.com/vendors/akamai#status), which Capsule8 lists as a subprocessor, reported Customer Security Advisory: Critical F5/NGINX Out-of-Band Vulnerabilities (no impact stated)
- 2026-10-21: [Ada Support](https://thirdpartyindex.com/vendors/ada-support#status), which Capsule8 lists as a subprocessor, reported Messages not being delivered (US region) (major)
- 2026-10-21: [Akamai](https://thirdpartyindex.com/vendors/akamai#status), which Capsule8 lists as a subprocessor, reported Edge Delivery Secure CDN platform at Risk of Capacity Issues (no impact stated)
- 2026-10-21: [Sentry](https://thirdpartyindex.com/vendors/sentry#status), which Capsule8 lists as a subprocessor, reported Increased latency processing integration webhooks (minor)
- 2026-10-21: [Tenable](https://thirdpartyindex.com/vendors/tenable-holdings#status), which Capsule8 lists as a subprocessor, reported Tenable Vulnerability Management: Scheduled Scans Not Launching (major)
- 2026-10-21: [Akamai](https://thirdpartyindex.com/vendors/akamai#status), which Capsule8 lists as a subprocessor, reported Web Security Analytics, Reporting and Configuration Deployment Issues (minor)
- 2026-10-21: [Akamai](https://thirdpartyindex.com/vendors/akamai#status), which Capsule8 lists as a subprocessor, reported Customer Security Advisory: PHP Remote Code Execution Vulnerabilities (no impact stated)
- 2026-10-21: [Akamai](https://thirdpartyindex.com/vendors/akamai#status), which Capsule8 lists as a subprocessor, reported NetStorage issues in Los Angeles (minor)
- 2026-10-21: [Grafana](https://thirdpartyindex.com/vendors/grafana#status), which Capsule8 lists as a subprocessor, reported Some GCK6 App Project Pages are Failing to Load (major)
- 2026-10-21: [Grafana](https://thirdpartyindex.com/vendors/grafana#status), which Capsule8 lists as a subprocessor, reported Increased timeout errors in alert rule evaluations (AWS Germany, prod-eu-west-2) (minor)
- 2026-10-21: [Sentry](https://thirdpartyindex.com/vendors/sentry#status), which Capsule8 lists as a subprocessor, reported Sentry.io not loading in US region (critical)
- 2026-10-21: [Grafana](https://thirdpartyindex.com/vendors/grafana#status), which Capsule8 lists as a subprocessor, reported Possible incorrect evaluation of Synthetic Monitoring alert rules in cluster prod-us-east-3 (no impact stated)
- 2026-10-20: [Grafana](https://thirdpartyindex.com/vendors/grafana#status), which Capsule8 lists as a subprocessor, reported DB issues in prod-sa-east-1 (no impact stated)
- 2026-10-20: [Sentry](https://thirdpartyindex.com/vendors/sentry#status), which Capsule8 lists as a subprocessor, reported Sentry.io not loading (major)
- 2026-10-20: [Grafana](https://thirdpartyindex.com/vendors/grafana#status), which Capsule8 lists as a subprocessor, reported Some GCK6 App Project Pages are Failing to Load (major)
- 2026-10-20: [Grafana](https://thirdpartyindex.com/vendors/grafana#status), which Capsule8 lists as a subprocessor, reported IRM outage in the region prod-gb-south-0 and prod-eu-west-0 (no impact stated)
- 2026-10-20: [Grafana](https://thirdpartyindex.com/vendors/grafana#status), which Capsule8 lists as a subprocessor, reported Grafana Cloud unavailibity in the prod-gb-south-0 region (minor)
- 2026-10-20: [Aiven](https://thirdpartyindex.com/vendors/aiven#status), which Capsule8 lists as a subprocessor, reported Google Cloud VPN incident affecting services (minor)
- 2026-10-20: [Box](https://thirdpartyindex.com/vendors/box#status), which Capsule8 lists as a subprocessor, reported \[Medium\] Issue with multiple Box Services (major)
- 2026-10-19: [Sentry](https://thirdpartyindex.com/vendors/sentry#status), which Capsule8 lists as a subprocessor, reported Sentry is down (critical)
- 2026-10-19: [Grafana](https://thirdpartyindex.com/vendors/grafana#status), which Capsule8 lists as a subprocessor, reported Metrics: Evelvated Read and Ruler Errors. (major)
- 2026-10-18: [Aiven](https://thirdpartyindex.com/vendors/aiven#status), which Capsule8 lists as a subprocessor, reported Unable to spin up nodes in vultr-ewr (no impact stated)
- 2026-10-17: [Tenable](https://thirdpartyindex.com/vendors/tenable-holdings#status), which Capsule8 lists as a subprocessor, reported Tenable Cloud Security: Service Degradation on All Sites (major)
- 2026-10-16: [Grafana](https://thirdpartyindex.com/vendors/grafana#status), which Capsule8 lists as a subprocessor, reported Metric reads and rule evaluations are degraded in mimir-prod-66 (minor)
- 2026-10-16: [Ada Support](https://thirdpartyindex.com/vendors/ada-support#status), which Capsule8 lists as a subprocessor, reported Issues with a ticketing integration (minor)
- 2026-10-16: [Aiven](https://thirdpartyindex.com/vendors/aiven#status), which Capsule8 lists as a subprocessor, reported Issues starting new service nodes (no impact stated)
- 2026-10-15: [Grafana](https://thirdpartyindex.com/vendors/grafana#status), which Capsule8 lists as a subprocessor, reported Tempo Write Failures in prod-us-central-0 (major)
- 2026-10-15: [Grafana](https://thirdpartyindex.com/vendors/grafana#status), which Capsule8 lists as a subprocessor, reported Tempo: High Latency in prod-eu-west-2 (minor)
- 2026-10-15: [Box](https://thirdpartyindex.com/vendors/box#status), which Capsule8 lists as a subprocessor, reported \[Major\] Issue with Box Drive (major)
- 2026-10-14: [ReversingLabs](https://thirdpartyindex.com/vendors/reversinglabs#status), which Capsule8 lists as a subprocessor, reported Component "Spectra Assure CLI updater service (APIs)" and a few other components are Down (major)
- 2026-10-14: [Grafana](https://thirdpartyindex.com/vendors/grafana#status), which Capsule8 lists as a subprocessor, reported Authentication errors in prod-us-west-0 (minor)
- 2026-10-14: [Tenable](https://thirdpartyindex.com/vendors/tenable-holdings#status), which Capsule8 lists as a subprocessor, reported Tenable One: Delay in Tenable Exposure Management data (major)
- 2026-10-14: [Sentry](https://thirdpartyindex.com/vendors/sentry#status), which Capsule8 lists as a subprocessor, reported Ingestion Halted for EAP data in EU (major)
- 2026-10-14: [Tenable](https://thirdpartyindex.com/vendors/tenable-holdings#status), which Capsule8 lists as a subprocessor, reported Tenable Vulnerability Management: Unresponsive Cyber Exposure Feed (no impact stated)
- 2026-10-13: [Grafana](https://thirdpartyindex.com/vendors/grafana#status), which Capsule8 lists as a subprocessor, reported Errors when querying Prometheus datasource (minor)
- 2026-10-13: [Grafana](https://thirdpartyindex.com/vendors/grafana#status), which Capsule8 lists as a subprocessor, reported Phone call notifications to numbers in Russia and Kazakhstan are blocked (minor)

The subprocessor list as we read it on any date: https://thirdpartyindex.com/labs/time-machine/capsule8

## Security contact

From its security.txt (https://www.sophos.com/.well-known/security.txt) ([evidence](https://thirdpartyindex.com/evidence/5870)):

- Contact: mailto:security-alert@sophos.com
- Contact: tel:https://www.sophos.com/security
- Disclosure policy: https://www.sophos.com/security
- Acknowledgments: https://www.sophos.com/en-us/legal/sophos-responsible-disclosure-policy/thanks
- No expiry date

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api
