# Pentera

Pentera declares [5 subprocessors](https://thirdpartyindex.com/vendors/pentera#subprocessors), plus 4 of its own affiliates, in [its subprocessor list](https://pentera.io/legal-hub/pentera-sub-processor-list/), which we last checked on 2026-10-11 ([evidence](https://thirdpartyindex.com/evidence/81093)). They include [Amazon Web Services](https://thirdpartyindex.com/vendors/amazon-web-services), [Salesforce](https://thirdpartyindex.com/vendors/salesforce) and [Snowflake](https://thirdpartyindex.com/vendors/snowflake). No published changes since we first read it on 2026-10-11.

Pentera (pentera.io): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/pentera
- Documents last verified: 2026-10-11
- Transparency rating: 84/100 (how much it publishes, not how secure it is): Subprocessor list 30/30; Processing locations 8/8; Purposes 7/7; Data processing addendum 12/12; Trust center 8/8; Privacy policy 6/6; security.txt 0/6 (not found); Security page 5/5; Status page 0/5 (not found); Vulnerability disclosure 0/5 (not found); Pages still reachable 8/8
- Supply chain: relies on 5 tracked vendors directly, 45 within two hops, 218 within three; 0 tracked vendors rely on it directly, 0 within two hops, 0 within three
- Cite as: Pentera, Third Party Index, https://thirdpartyindex.com/vendors/pentera (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Trust center | https://trust.pentera.io/ | 2026-10-11 | 2026-10-11 |
| Subprocessor list | https://pentera.io/legal-hub/pentera-sub-processor-list/ | 2026-10-11 | 2026-10-11 |
| Data processing addendum | https://pentera.io/wp-content/uploads/2026/03/dpa-pentera.pdf | 2026-10-11 | 2026-10-11 |
| Privacy policy | https://pentera.io/legal-hub/privacy-policy/ | 2026-10-11 | 2026-10-11 |
| Terms | https://pentera.io/legal-hub/pentera-end-user-license-terms-and-conditions/ | 2026-10-11 | 2026-10-11 |
| Security page | https://pentera.io/in-the-press/security-breaches-are-causing-more-damage-than-ever-before/ | 2026-10-11 | 2026-10-11 |

## Subprocessors (5)

As its own list states them.

| Subprocessor | Purpose | Location | Listed since |
|---|---|---|---|
| [Amazon Web services](https://thirdpartyindex.com/vendors/amazon-web-services.md) | Generative AI technology used to enhance AI features; Pentera Surface platform hosting | EU | 2026-10-11 |
| [MongoDB](https://thirdpartyindex.com/vendors/mongodb.md) | SaaS DB provider and DB key management | EU | 2026-10-11 |
| [Salesforce, Inc.](https://thirdpartyindex.com/vendors/salesforce.md) | Customer Support | UK | 2026-10-11 |
| [Snowflake, Inc.](https://thirdpartyindex.com/vendors/snowflake.md) | Data warehousing and analytics | EU | 2026-10-11 |
| [SpyCloud, Inc.](https://thirdpartyindex.com/vendors/spycloud.md) | Intelligence Source | US | 2026-10-11 |

Read from ([evidence](https://thirdpartyindex.com/evidence/81093)). CSV: https://thirdpartyindex.com/vendors/pentera/subprocessors.csv

### Its own affiliates (4)

- Pentera Security Inc. (Germany; Israel; Spain; US)
- Pentera Security Gulf FZ-LLC (UAE)
- Pentera Security SG Pte. Ltd. (Singapore)
- Pentera Security UK Ltd (UK)

## Compliance

As its trust center lists them.

- Audited: SOC 2 Type II, SOC 3, ISO/IEC 27001, ISO/IEC 42001, ISO 9001 ([evidence](https://thirdpartyindex.com/evidence/81089))
- Claimed: GDPR, CCPA/CPRA ([evidence](https://thirdpartyindex.com/evidence/81089))

## Subprocessor of (0)

No tracked vendor lists it.

## Incidents reported by Pentera's subprocessors

Incidents reported in the last 30 days on their own status pages by 2 vendors Pentera lists as subprocessors. A subprocessor list names a company, not the service an incident touched.

- 2026-10-09: [MongoDB](https://thirdpartyindex.com/vendors/mongodb#status), which Pentera lists as a subprocessor, reported Issue impacting Atlas Search availability on certain clusters (major)
- 2026-10-09: [MongoDB](https://thirdpartyindex.com/vendors/mongodb#status), which Pentera lists as a subprocessor, reported Admin Admin API: Intermittent Increase in 5xx errors (no impact stated)
- 2026-10-06: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which Pentera lists as a subprocessor, reported INC20000263 (major)
- 2026-10-02: [MongoDB](https://thirdpartyindex.com/vendors/mongodb#status), which Pentera lists as a subprocessor, reported MongoDB Charts: Infinite login loop when creating new Charts projects (minor)
- 2026-10-01: [MongoDB](https://thirdpartyindex.com/vendors/mongodb#status), which Pentera lists as a subprocessor, reported Trigger processing may be delayed globally (major)
- 2026-09-30: [MongoDB](https://thirdpartyindex.com/vendors/mongodb#status), which Pentera lists as a subprocessor, reported Delays in Atlas cluster management operations (no impact stated)
- 2026-09-27: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which Pentera lists as a subprocessor, reported INC20000239 (critical)
- 2026-09-25: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which Pentera lists as a subprocessor, reported INC20000237 (critical)
- 2026-09-16: [MongoDB](https://thirdpartyindex.com/vendors/mongodb#status), which Pentera lists as a subprocessor, reported Support Portal Outage (major)
- 2026-09-14: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which Pentera lists as a subprocessor, reported INC20000217 (major)

The subprocessor list as we read it on any date: https://thirdpartyindex.com/labs/time-machine/pentera

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api