CrowdStrike
Certifications and attestations: SOC 2ISO/IEC 27001ISO/IEC 27017ISO/IEC 42001ISO 22301PCI DSSFedRAMPStateRAMPCSA STARBSI C5TISAXCyber EssentialsENS (Spain)APEC CBPR
Says it complies with: GDPR, Data Privacy Framework, DORA
As listed on CrowdStrike's trust center (evidence) ; reports themselves are usually shared on request.
Transparency
Breakdown
| Subprocessor list | not found | 0 / 30 |
| Processing locations | no list | 0 / 8 |
| Purposes | no list | 0 / 7 |
| Data processing addendum | not found | 0 / 12 |
| Trust center | 8 / 8 | |
| Privacy policy | 6 / 6 | |
| security.txt | 6 / 6 | |
| Security page | not found | 0 / 5 |
| Status page | not found | 0 / 5 |
| Vulnerability disclosure | not found | 0 / 5 |
| Pages still reachable | 8 / 8 | |
| Total | 28 / 100 |
Only documents we can retrieve count: a page behind a login or a broken link scores nothing.
Badge
For CrowdStrike's own site; it updates with the rating.
<a href="https://thirdpartyindex.com/vendors/crowdstrike"><img src="https://thirdpartyindex.com/badge/crowdstrike.svg" alt="CrowdStrike transparency rating on Third Party Index" height="20"></a>[](https://thirdpartyindex.com/vendors/crowdstrike)No tracked subprocessors.
Documents
| Document | Verified | Changed | Evidence |
|---|---|---|---|
| Trust center safebase | snapshot | ||
| Privacy policy | snapshot | ||
| Terms | snapshot | ||
| security.txt | snapshot |
Subprocessors
None extracted.
Listed as a subprocessor by (14)
Purposes as each company states them.
Adobe adobe.com Crowdstrike provides endpoint threat detection as part of the Adobe Operational Security Stack (OSS). This is a monitoring solution that examines relevant devices to detect and respond to cyber threats (like ransomware and malware). It works by recording limited data points (binaries, devices, files, systems, software inventory statuses, and other data) to monitor particular sequences of events that may indicate a malicious action. Some of the information collected could potentially identify a unique user. However, this is only a remote possibility - it is extremely unlikely that customer personal data will be processed by Crowdstrike as part of this monitoring solution.
Atlassian atlassian.com
CITCON citcon.com
Collibra collibra.com Security support services
Guesty guesty.com
Helios gethelios.dev CrowdStrike provides cybersecurity services to Snyk, including threat intelligence and endpoint protection, to safeguard Snyk's digital infrastructure, products and services. Processing of developer personal data is not its primary purpose, but may occur incidentally as part of the services.; Security
Mistral mistral.ai Products: All; Security
Netlify netlify.com Log Analysis
OpenSesame opensesame.com Cybersecurity
PagerDuty pagerduty.com Security/Production SIEM (Security)/Production Logging (Security)
Second Front Systems secondfront.com Advanced endpoint threat detection and response for our corporate servers and laptops
Snyk snyk.io CrowdStrike provides cybersecurity services to Snyk, including threat intelligence and endpoint protection, to safeguard Snyk's digital infrastructure, products and services. Processing of developer personal data is not its primary purpose, but may occur incidentally as part of the services.; Security
Statuspage statuspage.io
TeleMessage telemessage.com
Changes
None since tracking began.