# Darktrace Federal

Darktrace Federal declares [17 subprocessors](https://thirdpartyindex.com/vendors/darktrace-federal#subprocessors) in [its subprocessor list](https://www.darktrace.com/legal/darktrace-product-sub-processors), which we last checked on 2026-11-12 ([evidence](https://thirdpartyindex.com/evidence/12154)). They include [Amazon Web Services](https://thirdpartyindex.com/vendors/amazon-web-services), [Google Cloud](https://thirdpartyindex.com/vendors/google-cloud) and [Microsoft](https://thirdpartyindex.com/vendors/microsoft). No published changes since we first read it on 2026-09-28.

Darktrace Federal (darktracefederal.com): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/darktrace-federal
- Documents last verified: 2026-11-12
- Transparency rating: 88/100 (how much it publishes, not how secure it is): Subprocessor list 30/30; Processing locations 6/8 (partial); Purposes 7/7; Data processing addendum 12/12; Trust center 8/8; Privacy policy 6/6; security.txt 6/6; Security page 0/5 (not found); Status page 0/5 (not found); Vulnerability disclosure 5/5; Pages still reachable 8/8
- Part of: [Darktrace](https://thirdpartyindex.com/vendors/darktrace)
- Supply chain: relies on 12 tracked vendors directly, 155 within two hops, 433 within three; 0 tracked vendors rely on it directly, 0 within two hops, 0 within three
- Cite as: Darktrace Federal, Third Party Index, https://thirdpartyindex.com/vendors/darktrace-federal (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Trust center | https://trust.darktrace.com/ | 2026-11-12 | 2026-10-28 |
| Subprocessor list | https://www.darktrace.com/legal/darktrace-product-sub-processors | 2026-11-12 | 2026-09-28 |
| Data processing addendum | https://www.darktrace.com/federal/legal/data-processing-addendum | 2026-11-12 | 2026-11-09 |
| Privacy policy | https://www.darktrace.com/legal/privacy-policy | 2026-11-12 | 2026-11-09 |
| security.txt | https://www.darktrace.com/.well-known/security.txt | 2026-11-12 | 2026-09-28 |
| Security advisories | https://www.darktrace.com/legal/vulnerability-disclosure-policy | 2026-11-12 | 2026-11-09 |

## Subprocessors (17)

As its own list states them.

| Subprocessor | Purpose | Location | Listed since |
|---|---|---|---|
| [Amazon Web Services, Inc.](https://thirdpartyindex.com/vendors/amazon-web-services.md) | Secure cloud service provider for Darktrace products and services | US, Canada, UK, Ireland, Netherlands, Australia and Singapore based upon the customer’s choice | 2026-10-03 |
| [Atlassian Pty Ltd.](https://thirdpartyindex.com/vendors/atlassian.md) | Production issues/incidents tracking and communication | Netherlands | 2026-09-28 |
| Australia Pty Ltd. | 24/7 customer support services | — | 2026-09-28 |
| [Darktrace, Inc.](https://thirdpartyindex.com/vendors/darktrace.md) | Darktrace services and; Darktrace services and 24/7 customer support services | Australia; Japan; Korea; Singapore; South Africa; US | 2026-09-28 |
| [Gainsight](https://thirdpartyindex.com/vendors/gainsight-software.md) | Customer engagement and analytics tracking | Frankfurt | 2026-09-28 |
| [Gitlab](https://thirdpartyindex.com/vendors/gitlab.md) | Production issues/incidents tracking and communication | UK | 2026-09-28 |
| [Google LLC](https://thirdpartyindex.com/vendors/google-cloud.md) | Secure cloud service provider (Google Cloud Platform) for Darktrace products and services | US and Netherlands | 2026-09-28 |
| [Hubspot](https://thirdpartyindex.com/vendors/hubspot.md) | Marketing and communication management with customers | Germany | 2026-09-28 |
| Japan K.K | 24/7 customer support services | — | 2026-09-28 |
| [Korea Ltd.](https://thirdpartyindex.com/vendors/darktrace.md) | 24/7 customer support services | — | 2026-09-28 |
| [Mailgun](https://thirdpartyindex.com/vendors/mailgun.md) | Mass mailing capability | EU, US | 2026-09-28 |
| [Microsoft Corporation](https://thirdpartyindex.com/vendors/microsoft.md) | Microsoft 365 and Secure cloud service provider (Azure) for Darktrace products and services | US, UK, Netherlands, Canada, Singapore, Ireland, UAE, South Africa and Australia based upon the customer’s choice | 2026-09-28 |
| [Pylon](https://thirdpartyindex.com/vendors/pylon.md) | Processing and analysing user engagement and operational data | US | 2026-09-28 |
| [Salesforce](https://thirdpartyindex.com/vendors/salesforce.md) | Customer relationship and sales data management | UK, Stockholm, Amsterdam | 2026-09-28 |
| Singapore Pte Ltd. | 24/7 customer support services | — | 2026-09-28 |
| South Africa Pty Ltd. | 24/7 customer support services | — | 2026-09-28 |
| [Zendesk](https://thirdpartyindex.com/vendors/zendesk.md) | Managing customer support interactions and tickets | UK, US, Ireland, EU, Japan, Australia | 2026-09-28 |

Read from ([evidence](https://thirdpartyindex.com/evidence/12154)). CSV: https://thirdpartyindex.com/vendors/darktrace-federal/subprocessors.csv

## Compliance

As its trust center lists them.

- Audited: ISO/IEC 27001, ISO/IEC 27018, ISO/IEC 42001, Cyber Essentials, IRAP ([evidence](https://thirdpartyindex.com/evidence/12146))
- Claimed: GDPR ([evidence](https://thirdpartyindex.com/evidence/12146))
- FedRAMP Marketplace: High · 1 agency authorization · since Apr 25, 2025

## Web Technologies

Darktrace Federal's homepage made 191 requests to 41 domains, 15 services controlled by another company, and 1 domain not identified. Loaded on 2026-11-10 by a browser that accepted nothing; other visits may load more or less. What a page loads is not a list of who receives customer data.

15 third parties by category: Advertising 6 (Google Cloud, Microsoft, The Trade Desk, Inc., Reddit, Inc.; usually detected as Advertising: Xandr, Magnite, Inc.); Analytics 3 (LinkedIn, ZoomInfo, Meta); Marketing automation 2 (HubSpot, Spotler); A/B Testing 1 (Webflow); Cookie compliance 1 (OneTrust); Video players 1 (reviewed: Vimeo); Unclassified 1 (Gravity). Each company that appears controlled by another organization is counted once, under the main category of the technologies detected from it on this homepage or, when none was, the category recorded from the company's own page (marked reviewed) or else the one it is usually detected as on other published homepages (marked as such); unclassified: none of these.

### Third parties (15)

- Google Cloud: 45 requests to google.com, googletagmanager.com, doubleclick.net, gstatic.com, googleadservices.com; DoubleClick Floodlight, Google Analytics, Google Tag Manager, reCAPTCHA (its subprocessor list names it too)
- Webflow: 36 requests to website-files.com, d3e54v103j8qbb.cloudfront.net, intellimize.co; Intellimize, Webflow 1.6.0, jQuery 3.5.1
- HubSpot: 27 requests to hsappstatic.net, hubspot.com, hs-analytics.net, hs-banner.com, hs-scripts.com, hsadspixel.net, hsforms.com, hubapi.com, hubspotusercontent-eu1.net, usemessages.com; HubSpot (its subprocessor list names it too)
- Microsoft: 18 requests to bing.com, clarity.ms, bing.net; Microsoft Advertising (its subprocessor list names it too)
- OneTrust: 12 requests to cookielaw.org, onetrust.com; OneTrust
- The Trade Desk, Inc.: 8 requests to adsrvr.org; theTradeDesk
- LinkedIn: 5 requests to linkedin.com, licdn.com; Linkedin Insight Tag
- Reddit, Inc.: 5 requests to reddit.com, redditstatic.com; Reddit Ads
- ZoomInfo: 5 requests to zoominfo.com, zi-scripts.com; Zoominfo
- Meta: 3 requests to facebook.net, facebook.com; Facebook Pixel 2.9.439
- Spotler: 2 requests to gatorleads.co.uk; GatorLeads
- Xandr: 2 requests to adnxs.com
- Gravity: 1 request to trygravity.com
- Magnite, Inc.: 1 request to rubiconproject.com
- Vimeo: 1 request to vimeo.com

### Affiliates (1)

- Darktrace: 1 request to antigena.com (its subprocessor list names it too)

### Unknown (1)

Domains not identified yet: hubspotonwebflow.com

### First party (1)

- Darktrace Federal: 17 requests to darktrace.com, darktracefederal.com; Amazon ALB, Amazon Web Services, Cloudflare, GSAP 3.15.0, HSTS, HubSpot Chat, Microsoft Clarity, Open Graph, Priority Hints, Vimeo, Webpack, core-js 3.32.2

8 tracked companies loaded by the homepage are not in Darktrace Federal's subprocessor list. A website can use a service without it processing customer data.

## Subprocessor of (0)

No tracked vendor lists it.

## Incidents reported by Darktrace Federal's subprocessors

Incidents reported in the last 30 days on their own status pages by 4 vendors Darktrace Federal lists as subprocessors. A subprocessor list names a company, not the service an incident touched.

- 2026-11-12: [Mailgun](https://thirdpartyindex.com/vendors/mailgun#status), which Darktrace Federal lists as a subprocessor, reported Message Delays in US Regions (minor)
- 2026-11-11: [Pylon](https://thirdpartyindex.com/vendors/pylon#status), which Darktrace Federal lists as a subprocessor, reported Slack Integration Connection Issues (major)
- 2026-11-10: [HubSpot](https://thirdpartyindex.com/vendors/hubspot#status), which Darktrace Federal lists as a subprocessor, reported Some HubSpot tools may be unavailable for some users (no impact stated)
- 2026-11-05: [Pylon](https://thirdpartyindex.com/vendors/pylon#status), which Darktrace Federal lists as a subprocessor, reported Delay in Analytics Data (minor)
- 2026-11-04: [Pylon](https://thirdpartyindex.com/vendors/pylon#status), which Darktrace Federal lists as a subprocessor, reported Inbound Email Delays (minor)
- 2026-11-02: [HubSpot](https://thirdpartyindex.com/vendors/hubspot#status), which Darktrace Federal lists as a subprocessor, reported HubSpot is experiencing issues (no impact stated)
- 2026-10-28: [Mailgun](https://thirdpartyindex.com/vendors/mailgun#status), which Darktrace Federal lists as a subprocessor, reported Route delays in EU Region (minor)
- 2026-10-23: [Gainsight Software](https://thirdpartyindex.com/vendors/gainsight-software#status), which Darktrace Federal lists as a subprocessor, reported Industry-wide PHP and Node.js security update (no impact stated)
- 2026-10-23: [HubSpot](https://thirdpartyindex.com/vendors/hubspot#status), which Darktrace Federal lists as a subprocessor, reported Some HubSpot tools may be unavailable for some users (no impact stated)
- 2026-10-23: [Gainsight Software](https://thirdpartyindex.com/vendors/gainsight-software#status), which Darktrace Federal lists as a subprocessor, reported Elevated SFDC errors for few customers (no impact stated)
- 2026-10-22: [HubSpot](https://thirdpartyindex.com/vendors/hubspot#status), which Darktrace Federal lists as a subprocessor, reported Update on PHP security vulnerability (no impact stated)
- 2026-10-14: [Pylon](https://thirdpartyindex.com/vendors/pylon#status), which Darktrace Federal lists as a subprocessor, reported Platform loading issues (no impact stated)

The subprocessor list as we read it on any date: https://thirdpartyindex.com/labs/time-machine/darktrace-federal

## Security contact

From its security.txt (https://www.darktrace.com/.well-known/security.txt) ([evidence](https://thirdpartyindex.com/evidence/12151)):

- Contact: mailto:vulnerability-disclosure@darktrace.com
- Disclosure policy: https://www.darktrace.com/en/legal/vulnerability-disclosure-policy
- Security jobs: https://www.darktrace.com/en/careers/
- No expiry date

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api