# Center for Internet Security

Center for Internet Security declares [17 subprocessors](https://thirdpartyindex.com/vendors/center-for-internet-security#subprocessors) in [its subprocessor list](https://www.cisecurity.org/privacy-notice/third-party-subprocessors), which we last checked on 2026-10-26 ([evidence](https://thirdpartyindex.com/evidence/148519)). They include [Amazon Web Services](https://thirdpartyindex.com/vendors/amazon-web-services), [Google Cloud](https://thirdpartyindex.com/vendors/google-cloud) and [Microsoft](https://thirdpartyindex.com/vendors/microsoft). No published changes since we first read it on 2026-10-12.

Center for Internet Security (cisecurity.org): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/center-for-internet-security
- Documents last verified: 2026-10-26
- Transparency rating: 65/100 (how much it publishes, not how secure it is): Subprocessor list 30/30; Processing locations 8/8; Purposes 7/7; Data processing addendum 0/12 (not found); Trust center 0/8 (not found); Privacy policy 6/6; security.txt 6/6; Security page 0/5 (not found); Status page 0/5 (not found); Vulnerability disclosure 0/5 (not found); Pages still reachable 8/8
- Supply chain: relies on 17 tracked vendors directly, 148 within two hops, 433 within three; 0 tracked vendors rely on it directly, 0 within two hops, 0 within three
- Cite as: Center for Internet Security, Third Party Index, https://thirdpartyindex.com/vendors/center-for-internet-security (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Subprocessor list | https://www.cisecurity.org/privacy-notice/third-party-subprocessors | 2026-10-26 | 2026-10-24 |
| Privacy policy | https://www.cisecurity.org/privacy-notice | 2026-10-26 | 2026-10-25 |
| security.txt | https://www.cisecurity.org/.well-known/security.txt | 2026-10-26 | 2026-10-12 |

## Subprocessors (17)

As its own list states them.

| Subprocessor | Purpose | Location | Listed since |
|---|---|---|---|
| [Amazon Web Services, Inc.](https://thirdpartyindex.com/vendors/amazon-web-services.md) | Amazon Web Services, Inc. is a cloud service provider.; Cloud Service Provider; Your general personal information will be processed by Amazon Web Services, Inc. for storage purposes for the period necessary to fulfill the purposes outlined in the CIS Privacy Notice and in accordance with applicable law. | United States | 2026-10-12 |
| [Crowdstrike](https://thirdpartyindex.com/vendors/crowdstrike.md) | Crowdstrike provides Intrusion Detection Monitoring.; Intrusion Detection Monitoring; Your information will be processed by Crowdstrike for monitoring for the period necessary to fulfill the purposes outlined in the CIS Privacy Notice and in accordance with applicable law. | United States | 2026-10-12 |
| [Cyware](https://thirdpartyindex.com/vendors/cyware.md) | Cyware provides services to improve security operations, automate cross-functional workflows, and accelerate threat response with Cyware’s vendor-neutral, low-code Security Orchestration, Automation, and Response (SOAR) solution.; Security Orchestration and Automation (SOAR) Platform; Your information will be processed by Cyware for SOAR solutioning for the period necessary to fulfill the purposes outlined in the CIS Privacy Notice and in accordance with applicable law. | United States | 2026-10-12 |
| [Devo](https://thirdpartyindex.com/vendors/devo-com.md) | Devo provides a SIEM Platform solution.; SIEM Platform; Your information will be processed by Devo for SIEM solutioning for the period necessary to fulfill the purposes outlined in the CIS Privacy Notice and in accordance with applicable law. | United States | 2026-10-12 |
| [Fivetran](https://thirdpartyindex.com/vendors/fivetran.md) | Data integration tools; Fivetran offers data integration tools.; Your general personal information will be processed by Fivetran for storage purposes for the period necessary to fulfill the purposes outlined in the CIS Privacy Notice and in accordance with applicable law. | United States | 2026-10-12 |
| [Google, LLC](https://thirdpartyindex.com/vendors/google-cloud.md) | Cloud Service Provider and associated products; Google offers a wide range of products, including cloud service products.; Your general personal information will be processed by Google, LLC. for storage purposes for the period necessary to fulfill the purposes outlined in the CIS Privacy Notice and in accordance with applicable law. | United States | 2026-10-12 |
| [LinkedIn Sales Navigator](https://thirdpartyindex.com/vendors/linkedin.md) | Lead generation and pipeline management; LinkedIn offers a wide range of products, including lead generation and pipeline management.; Your general personal information will be processed by LinkedIn for storage purposes for the period necessary to fulfill the purposes outlined in the CIS Privacy Notice and in accordance with applicable law. | United States | 2026-10-12 |
| [Matomo](https://thirdpartyindex.com/vendors/matomo.md) | Analytics Tool; Matomo provides the ability to analyze web and application traffic.; Your information will be processed by Matomo relating to the statistical evaluation and analysis of performance and usage behavior on the CIS website and applications for the period necessary to fulfill the purposes outlined in the CIS Privacy Notice and in accordance with applicable law. | New Zealand | 2026-10-12 |
| [Microsoft, Inc](https://thirdpartyindex.com/vendors/microsoft.md) | Cloud Service Provider and associated products; Microsoft offers a wide range of products, including cloud service products.; Your general personal information will be processed by Microsoft, Inc. for storage purposes for the period necessary to fulfill the purposes outlined in the CIS Privacy Notice and in accordance with applicable law. | United States | 2026-10-12 |
| [Optimizely](https://thirdpartyindex.com/vendors/optimizely.md) | Marketing Tool; Optimizely provides Marketing Tools.; Your information will be processed by Optimizely relating to the marketing experience on the CIS website for the period necessary to fulfill the purposes outlined in the CIS Privacy Notice and in accordance with applicable law. | United States | 2026-10-12 |
| [Oracle](https://thirdpartyindex.com/vendors/oracle.md) | Cloud Service Provider and associated products; Oracle offers a wide range of products, including cloud service products.; Your general personal information will be processed by Oracle for storage purposes for the period necessary to fulfill the purposes outlined the CIS Privacy Notice and in accordance with applicable law. | United States | 2026-10-12 |
| [Qualtrics](https://thirdpartyindex.com/vendors/qualtrics.md) | Qualtrics provides a Survey Tool.; Survey Tool; Your information will be processed by Qualtrics for surveys for the period necessary to fulfill the purposes outlined in the CIS Privacy Notice and in accordance with applicable law. | United States | 2026-10-12 |
| [Salesforce](https://thirdpartyindex.com/vendors/salesforce.md) | Customer relationship management; Salesforce offers customer relationship management.; Your general personal information will be processed by Salesforce for storage purposes for the period necessary to fulfill the purposes outlined in the CIS Privacy Notice and in accordance with applicable law. | United States | 2026-10-12 |
| [Securonix](https://thirdpartyindex.com/vendors/securonix.md) | SIEM Platform; Securonix provides a SIEM Platform solution.; Your information will be processed by Securonix for SIEM solutioning for the period necessary to fulfill the purposes outlined in the CIS Privacy Notice and in accordance with applicable law. | United States | 2026-10-12 |
| [Sitecore](https://thirdpartyindex.com/vendors/sitecore.md) | Digital Experience Platform; Sitecore is a digital experience platform.; Your general personal information will be processed by Sitecore, Inc. for storage purposes for the period necessary to fulfill the purposes outlined in the CIS Privacy Notice and in accordance with applicable law. | United States | 2026-10-12 |
| [Snowflake](https://thirdpartyindex.com/vendors/snowflake.md) | Data pipeline; Snowflake offers data pipeline products.; Your general personal information will be processed by Snowflake for storage purposes for the period necessary to fulfill the purposes outlined in the CIS Privacy Notice and in accordance with applicable law. | United States | 2026-10-12 |
| [Zoom](https://thirdpartyindex.com/vendors/zoom.md) | Video communications platform; Your general personal information will be processed by Zoom for storage purposes for the period necessary to fulfill the purposes outlined in the CIS Privacy Notice and in accordance with applicable law.; Zoom offers a video communication platform and associated products. | United States | 2026-10-12 |

Read from ([evidence](https://thirdpartyindex.com/evidence/85272)). CSV: https://thirdpartyindex.com/vendors/center-for-internet-security/subprocessors.csv

## Subprocessor of (0)

No tracked vendor lists it.

## Incidents reported by Center for Internet Security's subprocessors

Incidents reported in the last 30 days on their own status pages by 4 vendors Center for Internet Security lists as subprocessors. A subprocessor list names a company, not the service an incident touched.

- 2026-10-23: [Zoom](https://thirdpartyindex.com/vendors/zoom#status), which Center for Internet Security lists as a subprocessor, reported Service Degradation Affecting Multiple Zoom Services (minor)
- 2026-10-23: [Optimizely](https://thirdpartyindex.com/vendors/optimizely#status), which Center for Internet Security lists as a subprocessor, reported Degraded Performance - CMS Edit Mode in DXP (minor)
- 2026-10-23: [Qualtrics](https://thirdpartyindex.com/vendors/qualtrics#status), which Center for Internet Security lists as a subprocessor, reported Salesforce Integration issues in all regions (minor)
- 2026-10-23: [Qualtrics](https://thirdpartyindex.com/vendors/qualtrics#status), which Center for Internet Security lists as a subprocessor, reported Customer Hub Issues (no impact stated)
- 2026-10-22: [Zoom](https://thirdpartyindex.com/vendors/zoom#status), which Center for Internet Security lists as a subprocessor, reported Service Degradation Affecting Zoom Meetings Services in the US. (minor)
- 2026-10-22: [Optimizely](https://thirdpartyindex.com/vendors/optimizely#status), which Center for Internet Security lists as a subprocessor, reported Optimizely Campaign: Campaign user interface (minor)
- 2026-10-21: [Optimizely](https://thirdpartyindex.com/vendors/optimizely#status), which Center for Internet Security lists as a subprocessor, reported ODP EU Region - Impact due to Snowflake incident (minor)
- 2026-10-21: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which Center for Internet Security lists as a subprocessor, reported INC20000301 (critical)
- 2026-10-21: [Zoom](https://thirdpartyindex.com/vendors/zoom#status), which Center for Internet Security lists as a subprocessor, reported Service Degradation Affecting Zoom Learning Webpage (minor)
- 2026-10-21: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which Center for Internet Security lists as a subprocessor, reported INC20000299 (minor)
- 2026-10-20: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which Center for Internet Security lists as a subprocessor, reported INC20000294 (critical)
- 2026-10-19: [Zoom](https://thirdpartyindex.com/vendors/zoom#status), which Center for Internet Security lists as a subprocessor, reported Service Degradation Affecting Meeting Summaries Via Email. (minor)
- 2026-10-19: [Zoom](https://thirdpartyindex.com/vendors/zoom#status), which Center for Internet Security lists as a subprocessor, reported Service Degradation Affecting Zoom Website in UK region (minor)
- 2026-10-19: [Qualtrics](https://thirdpartyindex.com/vendors/qualtrics#status), which Center for Internet Security lists as a subprocessor, reported Discover Connector issues (minor)
- 2026-10-19: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which Center for Internet Security lists as a subprocessor, reported INC20000290 (minor)
- 2026-10-19: [Zoom](https://thirdpartyindex.com/vendors/zoom#status), which Center for Internet Security lists as a subprocessor, reported Service Degradation Affecting ZP SMS Australia Mobile Numbers (no impact stated)
- 2026-10-17: [Zoom](https://thirdpartyindex.com/vendors/zoom#status), which Center for Internet Security lists as a subprocessor, reported Service Degradation Affecting Zoom Chat Compose and SMS Summarisation with AI Companion (minor)
- 2026-10-16: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which Center for Internet Security lists as a subprocessor, reported INC20000287 (critical)
- 2026-10-15: [Optimizely](https://thirdpartyindex.com/vendors/optimizely#status), which Center for Internet Security lists as a subprocessor, reported Degraded Snippet Publishing Performance (minor)
- 2026-10-14: [Zoom](https://thirdpartyindex.com/vendors/zoom#status), which Center for Internet Security lists as a subprocessor, reported Service degradation affected Zoom AI Companion in US region (no impact stated)
- 2026-10-14: [Qualtrics](https://thirdpartyindex.com/vendors/qualtrics#status), which Center for Internet Security lists as a subprocessor, reported Copied report generation issues in all regions (no impact stated)
- 2026-10-14: [Zoom](https://thirdpartyindex.com/vendors/zoom#status), which Center for Internet Security lists as a subprocessor, reported Service Degradation Affected Sandbox Creation in ZoomMate (no impact stated)
- 2026-10-14: [Zoom](https://thirdpartyindex.com/vendors/zoom#status), which Center for Internet Security lists as a subprocessor, reported Service Degradation Affecting Zoom Clips (minor)
- 2026-10-13: [Optimizely](https://thirdpartyindex.com/vendors/optimizely#status), which Center for Internet Security lists as a subprocessor, reported Elevated GraphQL API errors and delayed data ingestion in ODP – US region (major)
- 2026-10-13: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which Center for Internet Security lists as a subprocessor, reported INC20000277 (minor)
- 2026-10-13: [Zoom](https://thirdpartyindex.com/vendors/zoom#status), which Center for Internet Security lists as a subprocessor, reported Service degradation affecting Zoom Meeting API in US region (no impact stated)
- 2026-10-12: [Zoom](https://thirdpartyindex.com/vendors/zoom#status), which Center for Internet Security lists as a subprocessor, reported Service degradation affecting Zoom AI Companion in US region (no impact stated)
- 2026-10-11: [Zoom](https://thirdpartyindex.com/vendors/zoom#status), which Center for Internet Security lists as a subprocessor, reported Service Degradation Affecting Zoom Scheduler. (minor)
- 2026-10-10: [Zoom](https://thirdpartyindex.com/vendors/zoom#status), which Center for Internet Security lists as a subprocessor, reported Service Degradation Affecting File Uploads and Downloads in Zoom Chat (no impact stated)
- 2026-10-09: [Zoom](https://thirdpartyindex.com/vendors/zoom#status), which Center for Internet Security lists as a subprocessor, reported Service Degradation Affecting Zoom Phone and Zoom Contact Center PCI Integration in North America (no impact stated)
- 2026-10-09: [Optimizely](https://thirdpartyindex.com/vendors/optimizely#status), which Center for Internet Security lists as a subprocessor, reported Content Graph Performance Degradation (minor)
- 2026-10-07: [Zoom](https://thirdpartyindex.com/vendors/zoom#status), which Center for Internet Security lists as a subprocessor, reported Service Degradation Affected Inbound and Outbound Calls for Zoom Contact Center (no impact stated)
- 2026-10-07: [Zoom](https://thirdpartyindex.com/vendors/zoom#status), which Center for Internet Security lists as a subprocessor, reported Service Degradation Affecting Zoom Calendar (minor)
- 2026-10-07: [Zoom](https://thirdpartyindex.com/vendors/zoom#status), which Center for Internet Security lists as a subprocessor, reported Service Degradation Affecting Zoom Slides Generation in US Region (minor)
- 2026-10-06: [Optimizely](https://thirdpartyindex.com/vendors/optimizely#status), which Center for Internet Security lists as a subprocessor, reported Data processing delays in EMEA (minor)
- 2026-10-06: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which Center for Internet Security lists as a subprocessor, reported INC20000263 (major)
- 2026-10-05: [Zoom](https://thirdpartyindex.com/vendors/zoom#status), which Center for Internet Security lists as a subprocessor, reported Service Degradation Affecting ZoomMate (minor)
- 2026-10-04: [Zoom](https://thirdpartyindex.com/vendors/zoom#status), which Center for Internet Security lists as a subprocessor, reported Service Degradation Affecting Zoom Rooms Management and Workspaces Management in SA01. (minor)
- 2026-10-04: [Zoom](https://thirdpartyindex.com/vendors/zoom#status), which Center for Internet Security lists as a subprocessor, reported Service Degradation Affected Inbound and Outbound Calls of Zoom Phone and Contact Center in North America Region (no impact stated)
- 2026-10-03: [Zoom](https://thirdpartyindex.com/vendors/zoom#status), which Center for Internet Security lists as a subprocessor, reported Service degradation affecting Developer Documentation Website (minor)
- 2026-10-01: [Qualtrics](https://thirdpartyindex.com/vendors/qualtrics#status), which Center for Internet Security lists as a subprocessor, reported Receipt Scanner question issues in all regions (minor)
- 2026-10-01: [Zoom](https://thirdpartyindex.com/vendors/zoom#status), which Center for Internet Security lists as a subprocessor, reported Service Degradation Affected Incoming and Outgoing Calls of Zoom Contact Center, Virtual Agents, Mail, Calendar, Meetings, Cloud Meeting Recordings, Webinars and Events (no impact stated)
- 2026-10-01: [Zoom](https://thirdpartyindex.com/vendors/zoom#status), which Center for Internet Security lists as a subprocessor, reported Service Degradation Affecting Zoom for Google Workspace Add-On (minor)
- 2026-09-30: [Optimizely](https://thirdpartyindex.com/vendors/optimizely#status), which Center for Internet Security lists as a subprocessor, reported Optimizely Graph - All region's production clusters experienced failed stored queries (no impact stated)
- 2026-09-29: [Qualtrics](https://thirdpartyindex.com/vendors/qualtrics#status), which Center for Internet Security lists as a subprocessor, reported Survey taking issues in Europe, Africa, and the Middle East (no impact stated)
- 2026-09-28: [Zoom](https://thirdpartyindex.com/vendors/zoom#status), which Center for Internet Security lists as a subprocessor, reported Service Degradation Affecting Zoom Canvas, My Notes, Sheets, In App Purchases, Billing Hub, and Clips. (minor)
- 2026-09-27: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which Center for Internet Security lists as a subprocessor, reported INC20000239 (critical)

The subprocessor list as we read it on any date: https://thirdpartyindex.com/labs/time-machine/center-for-internet-security

## Security contact

From its security.txt (https://www.cisecurity.org/.well-known/security.txt) ([evidence](https://thirdpartyindex.com/evidence/85275)):

- Contact: https://learn.cisecurity.org/contact-us
- Valid until 2026-12-31

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api