# Skyhigh Security

Skyhigh Security declares [19 subprocessors](https://thirdpartyindex.com/vendors/skyhigh-security#subprocessors) in [its subprocessor list](https://www.skyhighsecurity.com/wp-content/public/legal/Updated-Trellix-Skyhigh-Subprocessors-List-F.pdf), which we last checked on 2026-11-11 ([evidence](https://thirdpartyindex.com/evidence/6745)). They include [Amazon Web Services](https://thirdpartyindex.com/vendors/amazon-web-services), [Google Cloud](https://thirdpartyindex.com/vendors/google-cloud) and [Microsoft](https://thirdpartyindex.com/vendors/microsoft). No published changes since we first read it on 2026-09-23.

Skyhigh Security (skyhigh.cloud): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/skyhigh-security
- Documents last verified: 2026-11-11
- Transparency rating: 81/100 (how much it publishes, not how secure it is): Subprocessor list 30/30; Processing locations 8/8; Purposes 4/7 (partial); Data processing addendum 12/12; Trust center 8/8; Privacy policy 6/6; security.txt 0/6 (not found); Security page 0/5 (not found); Status page 5/5; Vulnerability disclosure 0/5 (not found); Pages still reachable 8/8
- Supply chain: relies on 15 tracked vendors directly, 83 within two hops, 279 within three; 0 tracked vendors rely on it directly, 0 within two hops, 0 within three
- Cite as: Skyhigh Security, Third Party Index, https://thirdpartyindex.com/vendors/skyhigh-security (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Trust center | https://www.skyhighsecurity.com/trust-center.html | 2026-11-11 | 2026-09-23 |
| Subprocessor list | https://www.skyhighsecurity.com/wp-content/public/legal/Updated-Trellix-Skyhigh-Subprocessors-List-F.pdf | 2026-11-11 | 2026-09-23 |
| Data processing addendum | https://www.skyhighsecurity.com/wp-content/public/legal/SkyhighSecurity\_Customer\_Data\_Processing\_Agreement.pdf | 2026-11-11 | 2026-09-23 |
| Privacy policy | https://www.skyhighsecurity.com/about/privacy.html | 2026-11-11 | 2026-09-23 |
| Terms | https://www.skyhighsecurity.com/about/terms-of-service.html | 2026-11-11 | 2026-09-23 |
| Status page | https://status.skyhighsecurity.com/posts/dashboard | 2026-11-11 | 2026-11-11 |

## Subprocessors (19)

As its own list states them.

| Subprocessor | Purpose | Location | Listed since |
|---|---|---|---|
| [Amazon Web Services, Inc.](https://thirdpartyindex.com/vendors/amazon-web-services.md) (AI model provider: Amazon Bedrock) | Artificial Intelligence Services (Amazon Bedrock) | Corporate: United States; Other Location: See website; United States | 2026-09-28 |
| [Amplitude, Inc.](https://thirdpartyindex.com/vendors/amplitude.md) | Performance analytics | United States | 2026-09-28 |
| [AttackIQ, Inc.](https://thirdpartyindex.com/vendors/attackiq.md) | Threat detection validation solution | United States | 2026-09-28 |
| BrainStorm Network, LLC | — | Corporate: United States; Other Location: See website | 2026-09-28 |
| [CtrLS Datacenter](https://thirdpartyindex.com/vendors/ctrls.md) | — | Corporate: India; Other Location: See website | 2026-09-28 |
| [Equinix](https://thirdpartyindex.com/vendors/equinix.md) | — | Corporate: United States; Other Location: See website | 2026-09-28 |
| [Google, LLC.](https://thirdpartyindex.com/vendors/google-cloud.md) | Translation services | United States | 2026-09-28 |
| [Google Cloud Platform](https://thirdpartyindex.com/vendors/google-cloud.md) | — | Corporate: United States; Other Location: See website | 2026-09-28 |
| Mailshell, Inc. | Email security (not used with offerings in Europe) | United States | 2026-09-28 |
| [Microsoft Corporation (Azure)](https://thirdpartyindex.com/vendors/microsoft.md) | — | Corporate: United States; Other Location: See website | 2026-09-28 |
| [Okta, Inc.](https://thirdpartyindex.com/vendors/okta.md) | Identity authentication management | United States | 2026-09-28 |
| [Oracle Corporation](https://thirdpartyindex.com/vendors/oracle.md) | — | Corporate: United States; Other Location: See website | 2026-09-28 |
| [Pendo.io, Inc.](https://thirdpartyindex.com/vendors/pendo.md) | Performance analytics | United States | 2026-09-28 |
| [Persistent Systems Limited](https://thirdpartyindex.com/vendors/persistent-systems.md) | Engineering support | India | 2026-09-28 |
| Reveald, Inc. | Managed detection and response (MDR) solution | United States | 2026-09-28 |
| [Salesforce, Inc.](https://thirdpartyindex.com/vendors/salesforce.md) | Customer service solution | Corporate: United States; Other Location: See website; United States | 2026-09-28 |
| [Sutherland Global Services, Inc.](https://thirdpartyindex.com/vendors/sutherland-global-services.md) | Customer support | United States | 2026-09-28 |
| [Verizon](https://thirdpartyindex.com/vendors/verizon.md) | — | Corporate: United States; Other Location: See website | 2026-09-28 |
| [Zimperium, Inc.](https://thirdpartyindex.com/vendors/zimperium.md) | Mobile threat detection (MTD) solution | United States | 2026-09-28 |

Read from ([evidence](https://thirdpartyindex.com/evidence/6745)). CSV: https://thirdpartyindex.com/vendors/skyhigh-security/subprocessors.csv

AI model providers (or a cloud provider's AI model service) among these entries: 1. All vendors that list one: https://thirdpartyindex.com/ai

## Compliance

As its trust center lists them.

- FedRAMP Marketplace: High · 7 agency authorizations · since Apr 29, 2020

## Web Technologies

Skyhigh Security's homepage made 57 requests to 8 domains, and 5 services controlled by another company. Loaded on 2026-11-10 by a browser that accepted nothing; other visits may load more or less. What a page loads is not a list of who receives customer data.

5 third parties by category: Analytics 1 (Google Cloud); A/B Testing 1 (Mida); Cookie compliance 1 (Cookiebot); Security 1 (usually detected as Security: FingerprintPro); Translation 1 (usually detected as Translation: Weglot). Each company that appears controlled by another organization is counted once, under the main category of the technologies detected from it on this homepage or, when none was, the category recorded from the company's own page (marked reviewed) or else the one it is usually detected as on other published homepages (marked as such); unclassified: none of these.

### Third parties (5)

- Mida: 10 requests to mida.so; Mida
- Cookiebot: 4 requests to cookiebot.com; Cookiebot 1
- Google Cloud: 4 requests to google-analytics.com, googletagmanager.com; Google Analytics, Google Tag Manager (its subprocessor list names it too)
- Weglot: 2 requests to weglot.com
- FingerprintPro: 1 request to openfpcdn.io

### First party (1)

- Skyhigh Security: 36 requests to skyhighsecurity.com, skyhigh.cloud; AOS, Cloudflare, Cybot, HTTP/3, Kinsta, MySQL, Open Graph, PHP, Plausible, RSS, Twitter Emoji (Twemoji), Weglot, WordPress 7.1.4, Yoast SEO 28.8

2 tracked companies loaded by the homepage are not in Skyhigh Security's subprocessor list. A website can use a service without it processing customer data.

## Subprocessor of (0)

No tracked vendor lists it.

## Service status

Incidents it reported on its own status page.

- Last 90 days: 53 reported incidents (2 major or critical, 50 minor, 1 with no impact stated)
- Typical time to resolve: 57 min
- Status page last read: 2026-11-12
- 2026-11-09: SKI-467 - Incident - Intermittent Issues Accessing Web Protection Logging Data For Singapore Region (minor)
- 2026-11-05: SKI-463 - Incident - Network latency observed (minor)
- 2026-11-05: SKI-461 - Incident - Network latency observed (minor)
- 2026-11-05: SKI-459 - Incident - Service Degradation (minor)
- 2026-11-05: SKI-457 - Incident - Network latency observed (minor)
- 2026-11-04: SKI-455 - ZTNA service may become intermittently unavailable (minor)
- 2026-11-03: SKI-451 - Incident - Service Degradation (minor)
- 2026-11-02: SKI-449 - Incident - Latency Observed (minor)

## Incidents reported by Skyhigh Security's subprocessors

Incidents reported in the last 30 days on their own status pages by 2 vendors Skyhigh Security lists as subprocessors. A subprocessor list names a company, not the service an incident touched.

- 2026-11-05: [Amplitude](https://thirdpartyindex.com/vendors/amplitude#status), which Skyhigh Security lists as a subprocessor, reported Session Replay capturing more sessions than configured (minor)
- 2026-11-05: [Amplitude](https://thirdpartyindex.com/vendors/amplitude#status), which Skyhigh Security lists as a subprocessor, reported Delayed S3 export (minor)
- 2026-11-04: [Pendo](https://thirdpartyindex.com/vendors/pendo#status), which Skyhigh Security lists as a subprocessor, reported Degradation of Account and Visitor Reports (critical)
- 2026-10-26: [Amplitude](https://thirdpartyindex.com/vendors/amplitude#status), which Skyhigh Security lists as a subprocessor, reported Data Ingestion Delays (minor)
- 2026-10-24: [Amplitude](https://thirdpartyindex.com/vendors/amplitude#status), which Skyhigh Security lists as a subprocessor, reported Delayed/Blocked Event Delivery to Amazon Kinesis Destination (no impact stated)
- 2026-10-22: [Amplitude](https://thirdpartyindex.com/vendors/amplitude#status), which Skyhigh Security lists as a subprocessor, reported Streaming to External Destinations Unavailable (no impact stated)
- 2026-10-22: [Amplitude](https://thirdpartyindex.com/vendors/amplitude#status), which Skyhigh Security lists as a subprocessor, reported Amplitude Website Outage (no impact stated)
- 2026-10-22: [Amplitude](https://thirdpartyindex.com/vendors/amplitude#status), which Skyhigh Security lists as a subprocessor, reported Notice: Amplitude not impacted by recent PHP vulnerabilities (no impact stated)
- 2026-10-20: [Amplitude](https://thirdpartyindex.com/vendors/amplitude#status), which Skyhigh Security lists as a subprocessor, reported Export API returns 500 errors across multiple organizations (minor)
- 2026-10-17: [Amplitude](https://thirdpartyindex.com/vendors/amplitude#status), which Skyhigh Security lists as a subprocessor, reported We are actively investigating an issue with our ingestion systems lagging (minor)
- 2026-10-13: [Amplitude](https://thirdpartyindex.com/vendors/amplitude#status), which Skyhigh Security lists as a subprocessor, reported Degraded Performance- Funnel charts renders as white text on a white/near-white background in light theme (no impact stated)

The subprocessor list as we read it on any date: https://thirdpartyindex.com/labs/time-machine/skyhigh-security

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api