Center for Internet Security

cisecurity.org

Center for Internet Security declares 17 subprocessors in its subprocessor list, which we last checked on Oct 26, 2026 (evidence). They include Amazon Web Services, Google Cloud and Microsoft. No published changes since we first read it on Oct 12, 2026.

Subprocessors CSV of Center for Internet Security's subprocessors · Atom feed of Center for Internet Security's subprocessors DORA draft CSV of Center for Internet Security's subprocessors as declared by Center for Internet Security what's this? · 

17 third parties.

NamePurposeLocationListed since
Amazon Web Services, Inc.
Amazon Web Services, Inc. is a cloud service provider.; Cloud Service Provider; Your general personal information will be processed by Amazon Web Services, Inc. for storage purposes for the period necessary to fulfill the purposes outlined in the CIS Privacy Notice and in accordance with applicable law.
United States
Crowdstrike
Crowdstrike provides Intrusion Detection Monitoring.; Intrusion Detection Monitoring; Your information will be processed by Crowdstrike for monitoring for the period necessary to fulfill the purposes outlined in the CIS Privacy Notice and in accordance with applicable law.
United States
Cyware
Cyware provides services to improve security operations, automate cross-functional workflows, and accelerate threat response with Cyware’s vendor-neutral, low-code Security Orchestration, Automation, and Response (SOAR) solution.; Security Orchestration and Automation (SOAR) Platform; Your information will be processed by Cyware for SOAR solutioning for the period necessary to fulfill the purposes outlined in the CIS Privacy Notice and in accordance with applicable law.
United States
Devo
Devo provides a SIEM Platform solution.; SIEM Platform; Your information will be processed by Devo for SIEM solutioning for the period necessary to fulfill the purposes outlined in the CIS Privacy Notice and in accordance with applicable law.
United States
Fivetran
Data integration tools; Fivetran offers data integration tools.; Your general personal information will be processed by Fivetran for storage purposes for the period necessary to fulfill the purposes outlined in the CIS Privacy Notice and in accordance with applicable law.
United States
Google, LLC
Cloud Service Provider and associated products; Google offers a wide range of products, including cloud service products.; Your general personal information will be processed by Google, LLC. for storage purposes for the period necessary to fulfill the purposes outlined in the CIS Privacy Notice and in accordance with applicable law.
United States
LinkedIn Sales Navigator
Lead generation and pipeline management; LinkedIn offers a wide range of products, including lead generation and pipeline management.; Your general personal information will be processed by LinkedIn for storage purposes for the period necessary to fulfill the purposes outlined in the CIS Privacy Notice and in accordance with applicable law.
United States
Matomo
Analytics Tool; Matomo provides the ability to analyze web and application traffic.; Your information will be processed by Matomo relating to the statistical evaluation and analysis of performance and usage behavior on the CIS website and applications for the period necessary to fulfill the purposes outlined in the CIS Privacy Notice and in accordance with applicable law.
New Zealand
Microsoft, Inc
Cloud Service Provider and associated products; Microsoft offers a wide range of products, including cloud service products.; Your general personal information will be processed by Microsoft, Inc. for storage purposes for the period necessary to fulfill the purposes outlined in the CIS Privacy Notice and in accordance with applicable law.
United States
Optimizely
Marketing Tool; Optimizely provides Marketing Tools.; Your information will be processed by Optimizely relating to the marketing experience on the CIS website for the period necessary to fulfill the purposes outlined in the CIS Privacy Notice and in accordance with applicable law.
United States
Oracle
Cloud Service Provider and associated products; Oracle offers a wide range of products, including cloud service products.; Your general personal information will be processed by Oracle for storage purposes for the period necessary to fulfill the purposes outlined the CIS Privacy Notice and in accordance with applicable law.
United States
Qualtrics
Qualtrics provides a Survey Tool.; Survey Tool; Your information will be processed by Qualtrics for surveys for the period necessary to fulfill the purposes outlined in the CIS Privacy Notice and in accordance with applicable law.
United States
Salesforce
Customer relationship management; Salesforce offers customer relationship management.; Your general personal information will be processed by Salesforce for storage purposes for the period necessary to fulfill the purposes outlined in the CIS Privacy Notice and in accordance with applicable law.
United States
Securonix
SIEM Platform; Securonix provides a SIEM Platform solution.; Your information will be processed by Securonix for SIEM solutioning for the period necessary to fulfill the purposes outlined in the CIS Privacy Notice and in accordance with applicable law.
United States
Sitecore
Digital Experience Platform; Sitecore is a digital experience platform.; Your general personal information will be processed by Sitecore, Inc. for storage purposes for the period necessary to fulfill the purposes outlined in the CIS Privacy Notice and in accordance with applicable law.
United States
Snowflake
Data pipeline; Snowflake offers data pipeline products.; Your general personal information will be processed by Snowflake for storage purposes for the period necessary to fulfill the purposes outlined in the CIS Privacy Notice and in accordance with applicable law.
United States
Zoom
Video communications platform; Your general personal information will be processed by Zoom for storage purposes for the period necessary to fulfill the purposes outlined in the CIS Privacy Notice and in accordance with applicable law.; Zoom offers a video communication platform and associated products.
United States

Incidents reported by Center for Internet Security's subprocessorsCSV of incidents reported by vendors Center for Internet Security lists · Atom feed of incidents reported by vendors Center for Internet Security lists

47 reported incidents in the last 30 days, by 4 of the vendors Center for Internet Security lists as subprocessors.

A subprocessor list names a company, not the service an incident touched. This does not show that Center for Internet Security was involved.

DateCompanyIncidentImpactLasted
ZoomService Degradation Affecting Multiple Zoom Services minor46 min
OptimizelyDegraded Performance - CMS Edit Mode in DXP minor1 h 31 min
QualtricsSalesforce Integration issues in all regions minor5 h 14 min
QualtricsCustomer Hub Issues no impact stated12 h
ZoomService Degradation Affecting Zoom Meetings Services in the US. minor22 h 18 min
OptimizelyOptimizely Campaign: Campaign user interface minor3 h 19 min
OptimizelyODP EU Region - Impact due to Snowflake incident minor12 h 29 min
SnowflakeINC20000301 critical5 h 3 min
ZoomService Degradation Affecting Zoom Learning Webpage minor1 h 41 min
SnowflakeINC20000299 minor50 min
SnowflakeINC20000294 critical8 h 52 min
ZoomService Degradation Affecting Meeting Summaries Via Email. minor1 h 50 min
ZoomService Degradation Affecting Zoom Website in UK region minor9 h 58 min
QualtricsDiscover Connector issues minor1 h 13 min
SnowflakeINC20000290 minor44 min
ZoomService Degradation Affecting ZP SMS Australia Mobile Numbers no impact stated16 min
ZoomService Degradation Affecting Zoom Chat Compose and SMS Summarisation with AI Companion minor46 min
SnowflakeINC20000287 critical29 min
OptimizelyDegraded Snippet Publishing Performance minor3 h 4 min
ZoomService degradation affected Zoom AI Companion in US region no impact stated15 min
QualtricsCopied report generation issues in all regions no impact stated6 days
ZoomService Degradation Affected Sandbox Creation in ZoomMate no impact stated5 min
ZoomService Degradation Affecting Zoom Clips minor19 h 38 min
OptimizelyElevated GraphQL API errors and delayed data ingestion in ODP – US region major1 min
SnowflakeINC20000277 minor2 days

And 22 more. All of them: CSV · Who is around them.

ChangesCSV of Center for Internet Security's changes · Atom feed of Center for Internet Security's changes

See the list as we read it on any date: Time machine

None since tracking began.

Rating badge for Center for Internet Security's site

Center for Internet Security transparency rating

It updates with the rating.

<a href="https://thirdpartyindex.com/vendors/center-for-internet-security"><img src="https://thirdpartyindex.com/badge/center-for-internet-security.svg" alt="Center for Internet Security transparency rating on Third Party Index" height="20"></a>
[![Center for Internet Security transparency rating on Third Party Index](https://thirdpartyindex.com/badge/center-for-internet-security.svg)](https://thirdpartyindex.com/vendors/center-for-internet-security)