# OutSystems

OutSystems (outsystems.com): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/outsystems
- Documents last verified: 2026-09-30
- Transparency rating: 83/100 (how much it publishes, not how secure it is)
- Cite as: OutSystems, Third Party Index, https://thirdpartyindex.com/vendors/outsystems (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Trust center | https://security.outsystems.com/ | 2026-09-30 | 2026-09-30 |
| Subprocessor list | https://www.outsystems.com/-/media/files/legal/dpa-list-of-sub-processors.pdf | 2026-09-30 | 2026-09-30 |
| Data processing addendum | https://www.outsystems.com/legal/outsystems-msa/data-processing-agreement | 2026-09-30 | 2026-09-30 |
| Privacy policy | https://www.outsystems.com/legal/terms-of-use/privacy-statement | 2026-09-30 | 2026-09-30 |
| Terms | https://www.outsystems.com/legal/terms-of-use | 2026-09-30 | 2026-09-30 |
| Security page | https://www.outsystems.com/platform/security | 2026-09-30 | 2026-09-30 |
| security.txt | https://www.outsystems.com/.well-known/security.txt | 2026-09-30 | 2026-09-30 |
| Status page | https://status.outsystems.com/ | 2026-09-30 | 2026-09-30 |

## Subprocessors (19)

As its own list states them.

| Subprocessor | Purpose | Location | Listed since |
|---|---|---|---|
| [AWS](https://thirdpartyindex.com/vendors/amazon-web-services.md) | Hosting and cloud infrastructure services, including the provision of AI functionalities activated by the Customer (such as AI Guardrails). | — | 2026-09-30 |
| Benelux B.V. Netherlands OutSystems | to solve a ticket. | — | 2026-09-30 |
| Brasil Ltda. | — | — | 2026-09-30 |
| details (name) | service provided | — | 2026-09-30 |
| FedRAMP | — | — | 2026-09-30 |
| found here. | — | — | 2026-09-30 |
| here. | — | — | 2026-09-30 |
| India Private Residency Limited Ashok Karnataka 560025 | — | — | 2026-09-30 |
| Information on Atlassian’s | — | — | 2026-09-30 |
| Japan KK | — | — | 2026-09-30 |
| Knox | Hosting and cloud Infrastructure services. Support services (Level 1 support). | United States | 2026-09-30 |
| Korea, Ltd. | — | — | 2026-09-30 |
| Malaysia Sdn. Bhd. Lumpur, Malaysia | — | — | 2026-09-30 |
| Not applicable. | — | — | 2026-09-30 |
| Rootly enforces strict tenant-level data isolation and access controls. More details can be found here. | — | — | 2026-09-30 |
| Singapore Pte. Ltd. | — | — | 2026-09-30 |
| Software Pty Ltd Australia OutSystems | — | — | 2026-09-30 |
| UK adequacy The relevant security decision issued by measures and the European information on relevant | — | — | 2026-09-30 |
| [Zendesk](https://thirdpartyindex.com/vendors/zendesk.md) | Management of support tickets -Helpdesk software for customer support | Ireland Adequacy decision (EU-U.S. Privacy Framework, the UK Extension to | 2026-09-30 |

Read from ([evidence](https://thirdpartyindex.com/evidence/19863)). CSV: https://thirdpartyindex.com/vendors/outsystems/subprocessors.csv

### Its own affiliates (7)

- OutSystems
- OutSystems Germany Frankfurt, Germany GmbH
- OutSystems Philippines Inc.
- OutSystems Software LLC
- OutSystems - Software em Rede S.A.
- OutSystems Spain, S.L.U. Spain
- Outsystems WeWork

## Compliance

As its trust center lists them.

- Audited: ISO/IEC 27001, ISO/IEC 27017, ISO/IEC 27018, ISO 22301, ISO 9001, FedRAMP, TISAX, Cyber Essentials Plus ([evidence](https://thirdpartyindex.com/evidence/19153))
- Claimed: GDPR, DORA ([evidence](https://thirdpartyindex.com/evidence/19153))

## Listed as a subprocessor by (0)

No tracked vendor lists it.

## Service status

Incidents it reported on its own status page.

- Last 90 days: 18 reported incidents (11 major or critical, 6 minor, 1 with no impact stated)
- Typical time to resolve: 5 h 33 min
- Under way: Incident affecting data preview in ODC Studio and runtime applications (major), since 2026-09-29 10:49 UTC
- Under way: Incident affecting Personal Edition login in Asia Pacific (Singapore) (major), since 2026-09-29 09:00 UTC
- 2026-09-29: Incident affecting data preview in ODC Studio and runtime applications (major)
- 2026-09-29: Incident affecting Personal Edition login in Asia Pacific (Singapore) (major)
- 2026-09-16: Authentication Issues Affecting ODC in the Israel (Tel Aviv) Region (critical)
- 2026-09-14: Incident affecting password reset functionality (major)
- 2026-09-11: Ongoing authentication maintenance (major)
- 2026-09-11: Issue Affecting Log Pagination in ODC Portal Monitor (minor)
- 2026-09-04: MABS Android and iOS builds timming out (major)
- 2026-08-31: Connection issue in Mentor Studio (critical)

## Security contact

From its security.txt (https://www.outsystems.com/.well-known/security.txt):

- Contact: mailto:csirt@outsystems.com
- Contact: https://www.outsystems.com/compliance/csirt/
- Disclosure policy: https://success.outsystems.com/Support/Security/Vulnerabilities
- Encryption key: https://www.outsystems.com/-/media/files/generic/trust/csirt-pgp-signed-keys/publickey.txt

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api