# Coalfire

Coalfire (coalfire.com): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/coalfire
- Documents last verified: 2026-09-30
- Transparency rating: 95/100 (how much it publishes, not how secure it is)
- Cite as: Coalfire, Third Party Index, https://thirdpartyindex.com/vendors/coalfire (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Trust center | https://trust.coalfire.com/ | 2026-09-30 | 2026-09-30 |
| Subprocessor list | https://coalfire.com/legal/sub-processor-list | 2026-09-30 | 2026-09-30 |
| Data processing addendum | https://assets.coalfire.com/prod/resources/Agreements/Coalfire-DPA.pdf | 2026-09-30 | 2026-09-30 |
| Privacy policy | https://coalfire.com/privacy | 2026-09-30 | 2026-09-30 |
| Terms | https://coalfire.com/coalfire-website-terms-of-use | 2026-09-30 | 2026-09-30 |
| Security page | https://coalfire.com/services/security | 2026-09-30 | 2026-09-30 |
| security.txt | https://coalfire.com/.well-known/security.txt | 2026-09-30 | 2026-09-30 |
| Security advisories | https://coalfire.com/vulnerability-disclosure-policy | 2026-09-30 | 2026-09-30 |

## Subprocessors (42)

As its own list states them.

| Subprocessor | Purpose | Location | Listed since |
|---|---|---|---|
| [Amazon Web Services](https://thirdpartyindex.com/vendors/amazon-web-services.md) | Data storage and collaboration | United States | 2026-09-30 |
| [Atlassian JIRA](https://thirdpartyindex.com/vendors/atlassian.md) | CF1 User Support Platform | United States | 2026-09-30 |
| [Avalara](https://thirdpartyindex.com/vendors/avalara.md) | Sales tax software | United States | 2026-09-30 |
| Bizable/Adobe | Marketing | United States | 2026-09-30 |
| Box.Com | Data storage and collaboration | United States | 2026-09-30 |
| [Checkmarx](https://thirdpartyindex.com/vendors/checkmarx.md) | Services Support | United States | 2026-09-30 |
| [Crossbeam](https://thirdpartyindex.com/vendors/crossbeam.md) | Customer Relationship Management | United States | 2026-09-30 |
| [Cvent, Inc.](https://thirdpartyindex.com/vendors/cvent.md) | Marketing | United States | 2026-09-30 |
| Cyberhelm Technologies, LLC | Services Support | United States | 2026-09-30 |
| [Cyera](https://thirdpartyindex.com/vendors/cyera.md) | Security monitoring | United States | 2026-09-30 |
| Delighted | Customer Satisfaction | United States | 2026-09-30 |
| [DemandBase](https://thirdpartyindex.com/vendors/demandbase.md) | Marketing | United States | 2026-09-30 |
| [Everlaw](https://thirdpartyindex.com/vendors/everlaw.md) | E-discovery / litigation support | United States | 2026-09-30 |
| First Information Technology Services | Services Support | United States | 2026-09-30 |
| GlobalLogic Inc. | Services Support | United States, Argentina | 2026-09-30 |
| [Google](https://thirdpartyindex.com/vendors/google-cloud.md) | Data storage and collaboration | United States | 2026-09-30 |
| Growth \[period\] | Services Support | United States | 2026-09-30 |
| Infogain Corporation | Services Support | United States, India | 2026-09-30 |
| IRM Authority Inc. | Services Support | United States | 2026-09-30 |
| [Ironclad](https://thirdpartyindex.com/vendors/ironclad.md) | Contract Management | United States | 2026-09-30 |
| LEET Security SLU | Services Support | Spain | 2026-09-30 |
| Meta Defence Labs Ltd | Services Support | United Kingdom | 2026-09-30 |
| [Microsoft Azure](https://thirdpartyindex.com/vendors/microsoft.md) | Data storage and collaboration | United States | 2026-09-30 |
| [Microsoft Office 365](https://thirdpartyindex.com/vendors/microsoft.md) | Communication | United States | 2026-09-30 |
| Miller Jones | Services Support | United States | 2026-09-30 |
| Mitchell Martin Inc. | Services Support | United States | 2026-09-30 |
| [MongoDB, Inc.](https://thirdpartyindex.com/vendors/mongodb.md) | Database backend for CE, CF1, and Hexeon platforms | United States | 2026-09-30 |
| [NewRelic](https://thirdpartyindex.com/vendors/new-relic.md) | User Platform Support | United States | 2026-09-30 |
| [Outreach](https://thirdpartyindex.com/vendors/outreach.md) | Customer Relationship Management | United States | 2026-09-30 |
| [Paramify](https://thirdpartyindex.com/vendors/paramify.md) | Compliance automation | United States | 2026-09-30 |
| [Pardot](https://thirdpartyindex.com/vendors/salesforce.md) | Marketing | United States | 2026-09-30 |
| Piper Companies | Services Support | United States | 2026-09-30 |
| [Proofpoint](https://thirdpartyindex.com/vendors/proofpoint.md) | Email Security Gateway | United States | 2026-09-30 |
| Rarefied Inc. | Services Support | United States | 2026-09-30 |
| Rootshell Security | Services Support | United States, United Kingdom | 2026-09-30 |
| [Salesforce](https://thirdpartyindex.com/vendors/salesforce.md) | CRM | United States | 2026-09-30 |
| The SecOps Inc | Services Support | United States | 2026-09-30 |
| Sekuro Operations Pty Ltd (fka Privasec Pte Ltd) | QSA Services | Australia | 2026-09-30 |
| SGS North America Inc. | Services Support | Switzerland | 2026-09-30 |
| Shared Assessments | Services Support | United States | 2026-09-30 |
| [Splunk](https://thirdpartyindex.com/vendors/splunk.md) | Security monitoring /SIEM | United States | 2026-09-30 |
| Zoom Info | Communication | United States | 2026-09-30 |

Read from ([evidence](https://thirdpartyindex.com/evidence/21403)). CSV: https://thirdpartyindex.com/vendors/coalfire/subprocessors.csv

## Compliance

As its trust center lists them.

- Audited: SOC 2 Type II, ISO/IEC 27001, ISO/IEC 27701, ISO 9001 ([evidence](https://thirdpartyindex.com/evidence/21398))
- Claimed: GDPR, CCPA/CPRA ([evidence](https://thirdpartyindex.com/evidence/21398))

## Listed as a subprocessor by (1)

Tracked vendors whose own subprocessor lists name it, and what they say they use it for.

- [UserTesting](https://thirdpartyindex.com/vendors/usertesting.md): SOC 2 & ISO auditor

## Security contact

From its security.txt (https://coalfire.com/.well-known/security.txt):

- Contact: mailto:info@imarc.com
- Disclosure policy: https://coalfire.com/security-policy
- Encryption key: https://coalfire.com/pgp-key.txt
- Acknowledgments: https://coalfire.com/hall-of-fame

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api