# Darktrace Darktrace declares [16 subprocessors](https://thirdpartyindex.com/vendors/darktrace#subprocessors), plus 1 of its own affiliates, in [its subprocessor list](https://www.darktrace.com/legal/darktrace-product-sub-processors), which we last checked on 2026-11-12 ([evidence](https://thirdpartyindex.com/evidence/12633)). They include [Amazon Web Services](https://thirdpartyindex.com/vendors/amazon-web-services), [Google Cloud](https://thirdpartyindex.com/vendors/google-cloud) and [Microsoft](https://thirdpartyindex.com/vendors/microsoft). No published changes since we first read it on 2026-09-28. [1 tracked vendor](https://thirdpartyindex.com/vendors/darktrace#used-by), [Darktrace Federal](https://thirdpartyindex.com/vendors/darktrace-federal), names Darktrace as a subprocessor. Darktrace (darktrace.com): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index. - Page: https://thirdpartyindex.com/vendors/darktrace - Documents last verified: 2026-11-12 - Transparency rating: 76/100 (how much it publishes, not how secure it is): Subprocessor list 30/30; Processing locations 6/8 (partial); Purposes 7/7; Data processing addendum 0/12 (not found); Trust center 8/8; Privacy policy 6/6; security.txt 6/6; Security page 0/5 (not found); Status page 0/5 (not found); Vulnerability disclosure 5/5; Pages still reachable 8/8 - Companies part of it: [Darktrace Federal](https://thirdpartyindex.com/vendors/darktrace-federal), [Mira Security](https://thirdpartyindex.com/vendors/mira-security) - Supply chain: relies on 11 tracked vendors directly, 154 within two hops, 432 within three; 1 tracked vendors rely on it directly, 1 within two hops, 1 within three - Cite as: Darktrace, Third Party Index, https://thirdpartyindex.com/vendors/darktrace (data CC BY 4.0) ## Documents | Document | URL | Last verified | Last changed | |---|---|---|---| | Trust center | https://trust.darktrace.com/ | 2026-11-12 | 2026-10-28 | | Subprocessor list | https://www.darktrace.com/legal/darktrace-product-sub-processors | 2026-11-12 | 2026-09-28 | | Privacy policy | https://www.darktrace.com/legal/privacy-policy | 2026-11-12 | 2026-11-09 | | security.txt | https://www.darktrace.com/.well-known/security.txt | 2026-11-12 | 2026-09-28 | | Security advisories | https://www.darktrace.com/legal/vulnerability-disclosure-policy | 2026-11-12 | 2026-11-09 | ## Subprocessors (16) As its own list states them. | Subprocessor | Purpose | Location | Listed since | |---|---|---|---| | [Amazon Web Services, Inc.](https://thirdpartyindex.com/vendors/amazon-web-services.md) | Secure cloud service provider for Darktrace products and services | US, Canada, UK, Ireland, Netherlands, Australia and Singapore based upon the customer’s choice | 2026-10-03 | | [Atlassian Pty Ltd.](https://thirdpartyindex.com/vendors/atlassian.md) | Production issues/incidents tracking and communication | Netherlands | 2026-09-28 | | Australia Pty Ltd. | 24/7 customer support services | — | 2026-09-28 | | [Gainsight](https://thirdpartyindex.com/vendors/gainsight-software.md) | Customer engagement and analytics tracking | Frankfurt | 2026-09-28 | | [Gitlab](https://thirdpartyindex.com/vendors/gitlab.md) | Production issues/incidents tracking and communication | UK | 2026-09-28 | | [Google LLC](https://thirdpartyindex.com/vendors/google-cloud.md) | Secure cloud service provider (Google Cloud Platform) for Darktrace products and services | US and Netherlands | 2026-09-28 | | [Hubspot](https://thirdpartyindex.com/vendors/hubspot.md) | Marketing and communication management with customers | Germany | 2026-09-28 | | Japan K.K | 24/7 customer support services | — | 2026-09-28 | | Korea Ltd. | 24/7 customer support services | — | 2026-09-28 | | [Mailgun](https://thirdpartyindex.com/vendors/mailgun.md) | Mass mailing capability | EU, US | 2026-09-28 | | [Microsoft Corporation](https://thirdpartyindex.com/vendors/microsoft.md) | Microsoft 365 and Secure cloud service provider (Azure) for Darktrace products and services | US, UK, Netherlands, Canada, Singapore, Ireland, UAE, South Africa and Australia based upon the customer’s choice | 2026-09-28 | | [Pylon](https://thirdpartyindex.com/vendors/pylon.md) | Processing and analysing user engagement and operational data | US | 2026-09-28 | | [Salesforce](https://thirdpartyindex.com/vendors/salesforce.md) | Customer relationship and sales data management | UK, Stockholm, Amsterdam | 2026-09-28 | | Singapore Pte Ltd. | 24/7 customer support services | — | 2026-09-28 | | South Africa Pty Ltd. | 24/7 customer support services | — | 2026-09-28 | | [Zendesk](https://thirdpartyindex.com/vendors/zendesk.md) | Managing customer support interactions and tickets | UK, US, Ireland, EU, Japan, Australia | 2026-09-28 | Read from ([evidence](https://thirdpartyindex.com/evidence/12633)). CSV: https://thirdpartyindex.com/vendors/darktrace/subprocessors.csv ### Its own affiliates (1) - Darktrace, Inc. (Australia; Japan; Korea; Singapore; South Africa; US) ## Compliance As its trust center lists them. - Audited: ISO/IEC 27001, ISO/IEC 27018, ISO/IEC 42001, Cyber Essentials, IRAP ([evidence](https://thirdpartyindex.com/evidence/12625)) - Claimed: GDPR ([evidence](https://thirdpartyindex.com/evidence/12625)) ## Web Technologies Darktrace's homepage made 207 requests to 40 domains, 15 services controlled by another company, and 1 domain not identified. Loaded on 2026-11-11 by a browser that accepted nothing; other visits may load more or less. What a page loads is not a list of who receives customer data. 15 third parties by category: Advertising 6 (Google Cloud, Microsoft, The Trade Desk, Inc., Reddit, Inc.; usually detected as Advertising: Xandr, Magnite, Inc.); Analytics 3 (LinkedIn, ZoomInfo, Meta); Marketing automation 2 (HubSpot, Spotler); A/B Testing 1 (Webflow); Cookie compliance 1 (OneTrust); Video players 1 (reviewed: Vimeo); Unclassified 1 (Gravity). Each company that appears controlled by another organization is counted once, under the main category of the technologies detected from it on this homepage or, when none was, the category recorded from the company's own page (marked reviewed) or else the one it is usually detected as on other published homepages (marked as such); unclassified: none of these. ### Third parties (15) - Webflow: 50 requests to website-files.com, d3e54v103j8qbb.cloudfront.net, intellimize.co; Intellimize, Webflow 1.6.0, jQuery 3.5.1 - Google Cloud: 46 requests to google.com, googletagmanager.com, doubleclick.net, gstatic.com, googleadservices.com; DoubleClick Floodlight, Google Analytics, Google Tag Manager, reCAPTCHA (its subprocessor list names it too) - HubSpot: 27 requests to hsappstatic.net, hubspot.com, hs-analytics.net, hs-banner.com, hs-scripts.com, hsadspixel.net, hsforms.com, hubapi.com, hubspotusercontent-eu1.net, usemessages.com; HubSpot (its subprocessor list names it too) - Microsoft: 18 requests to bing.com, clarity.ms, bing.net; Microsoft Advertising (its subprocessor list names it too) - OneTrust: 12 requests to cookielaw.org, onetrust.com; OneTrust - The Trade Desk, Inc.: 8 requests to adsrvr.org; theTradeDesk - LinkedIn: 5 requests to linkedin.com, licdn.com; Linkedin Insight Tag - Reddit, Inc.: 5 requests to reddit.com, redditstatic.com; Reddit Ads - ZoomInfo: 5 requests to zoominfo.com, zi-scripts.com; Zoominfo - Meta: 3 requests to facebook.net, facebook.com; Facebook Pixel 2.9.439 - Spotler: 2 requests to gatorleads.co.uk; GatorLeads - Xandr: 2 requests to adnxs.com - Gravity: 1 request to trygravity.com - Magnite, Inc.: 1 request to rubiconproject.com - Vimeo: 1 request to vimeo.com ### Unknown (1) Domains not identified yet: hubspotonwebflow.com ### First party (1) - Darktrace: 19 requests to darktrace.com, antigena.com; Amazon ALB, Amazon Web Services, Cloudflare, GSAP 3.15.0, HSTS, HubSpot Chat, Microsoft Clarity, Open Graph, Priority Hints, Vimeo, Webpack, core-js 3.32.2 8 tracked companies loaded by the homepage are not in Darktrace's subprocessor list. A website can use a service without it processing customer data. ## Subprocessor of (1) Tracked vendors whose own subprocessor lists name it, and what they say they use it for. - [Darktrace Federal](https://thirdpartyindex.com/vendors/darktrace-federal.md): Darktrace services and; Darktrace services and 24/7 customer support services; 24/7 customer support services ## Incidents reported by Darktrace's subprocessors Incidents reported in the last 30 days on their own status pages by 4 vendors Darktrace lists as subprocessors. A subprocessor list names a company, not the service an incident touched. - 2026-11-12: [Mailgun](https://thirdpartyindex.com/vendors/mailgun#status), which Darktrace lists as a subprocessor, reported Message Delays in US Regions (minor) - 2026-11-11: [Pylon](https://thirdpartyindex.com/vendors/pylon#status), which Darktrace lists as a subprocessor, reported Slack Integration Connection Issues (major) - 2026-11-10: [HubSpot](https://thirdpartyindex.com/vendors/hubspot#status), which Darktrace lists as a subprocessor, reported Some HubSpot tools may be unavailable for some users (no impact stated) - 2026-11-05: [Pylon](https://thirdpartyindex.com/vendors/pylon#status), which Darktrace lists as a subprocessor, reported Delay in Analytics Data (minor) - 2026-11-04: [Pylon](https://thirdpartyindex.com/vendors/pylon#status), which Darktrace lists as a subprocessor, reported Inbound Email Delays (minor) - 2026-11-02: [HubSpot](https://thirdpartyindex.com/vendors/hubspot#status), which Darktrace lists as a subprocessor, reported HubSpot is experiencing issues (no impact stated) - 2026-10-28: [Mailgun](https://thirdpartyindex.com/vendors/mailgun#status), which Darktrace lists as a subprocessor, reported Route delays in EU Region (minor) - 2026-10-23: [Gainsight Software](https://thirdpartyindex.com/vendors/gainsight-software#status), which Darktrace lists as a subprocessor, reported Industry-wide PHP and Node.js security update (no impact stated) - 2026-10-23: [HubSpot](https://thirdpartyindex.com/vendors/hubspot#status), which Darktrace lists as a subprocessor, reported Some HubSpot tools may be unavailable for some users (no impact stated) - 2026-10-23: [Gainsight Software](https://thirdpartyindex.com/vendors/gainsight-software#status), which Darktrace lists as a subprocessor, reported Elevated SFDC errors for few customers (no impact stated) - 2026-10-22: [HubSpot](https://thirdpartyindex.com/vendors/hubspot#status), which Darktrace lists as a subprocessor, reported Update on PHP security vulnerability (no impact stated) - 2026-10-14: [Pylon](https://thirdpartyindex.com/vendors/pylon#status), which Darktrace lists as a subprocessor, reported Platform loading issues (no impact stated) The subprocessor list as we read it on any date: https://thirdpartyindex.com/labs/time-machine/darktrace ## Security contact From its security.txt (https://www.darktrace.com/.well-known/security.txt) ([evidence](https://thirdpartyindex.com/evidence/12632)): - Contact: mailto:vulnerability-disclosure@darktrace.com - Disclosure policy: https://www.darktrace.com/en/legal/vulnerability-disclosure-policy - Security jobs: https://www.darktrace.com/en/careers/ - No expiry date --- Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api