SOPHOS
SOPHOS declares 35 subprocessors in its subprocessor list, which we last checked on Nov 11, 2026 (evidence). They include Amazon Web Services, Google Cloud and Microsoft. No published changes since we first read it on Sep 21, 2026. 5 tracked vendors name SOPHOS as a subprocessor, including Rackspace, Intralinks and Naviam.
Not loaded by any published homepage.
Subprocessors CSV of SOPHOS's subprocessors · Atom feed of SOPHOS's subprocessors DORA draft CSV of SOPHOS's subprocessors as declared by SOPHOS what's this? ·
35 third parties.
| Name | Purpose | Location | Listed since |
|---|---|---|---|
| Ada Support Inc. | Technical support and chat bot services. | USA; Canada | |
| Aiven Ltd. [Apache Kafka] | Cloud infrastructure services | AWS Regions | |
| Akamai Technologies Inc | Content Delivery Network and edge proxy for Sophos software downloads, UI assets, and APIs | USA | |
| Amazon Web Services, Inc | Data centre services, cloud infrastructure services, Generative AI and identity access. | USA; UK; Ireland; Germany; Canada; Australia; Japan; India; Brazil; UAE; Switzerland | |
| Atlassian Corporation Limited | Internal requests and project tracking | Germany; Ireland | |
| Benjamin Mosse Consulting Pty Ltd | Location: Australia; Location: United States | ||
| Blue Ocean Contact Centres Inc. | Technical support helpdesk. | Canada | |
| Box Inc | Secure storage of forensic data and incident-related files | Germany / Ireland, France, Canada, Japan, USA, UK, Australia. | |
| Cleverbridge GmbH | Payment support services | USA; Germany | |
| Constella Intelligence, Inc. | To detect and alert on compromised credentials and identity threats across the surface, deep, and dark web. | USA; Germany; Ireland | |
| Echoworx Corporation | Email encryption services | Canada | |
| Fenix24, Inc | Location: United States | ||
| Forvis Mazars Group | Location: United Kingdom; Location: United States | ||
| Fullstory, Inc | Session replay, product analytics, and digital experience insights. | USA; Germany | |
| Genesys Telecommunications Laboratories, Inc. | Cloud Based contact centre system, technical support and call routing. | Ireland | |
| Google LLC | Data centre services, cloud infrastructure services, analytics tools | USA | |
| Google Cloud EMEA Limited | Cloud infrastructure services, analytics tools | USA | |
| GRCS INC. | Location: India; Location: Japan | ||
| Hoodwink Consulting LLC | Location: United States | ||
| Invictus Incident Response B.V. | Location: The Netherlands | ||
| Island Technology Inc | Enterprise browser and secure access platform | USA, UK, Germany, Canada and Australia | |
| Logz.io | Storage of log files, observability | Germany | |
| Microsoft Corporation | Data centre services, cloud infrastructure services and Generative AI | Germany; Netherlands; United States; Sweden | |
| Raintank Inc, d/b/a Grafana Labs | Operational dashboard (metrics) services | USA; Ireland; UK | |
| Reversing Labs | Threat intelligence and file analysis. | Croatia | |
| Rubrik, Inc. | Backup and recovery for Microsoft 365 | Microsoft Azure Regions selected by customer | |
| Rule 56 | Location: United States | ||
| Salesforce Inc. | Customer relationship management services, metrics and technical support services | USA | |
| Sendmarc Inc | DMARC email authentication and domain protection | Netherlands | |
| SendSafely Inc (B2B) | Technical support helpdesk and filesharing system | Ireland; Germany; USA | |
| Sentry (d/b/a Functional Software, Inc.) | Error reporting and analysis | USA | |
| SIE Co.,Ltd | Location: Japan; Location: United States | ||
| Sierra Technologies Inc | Conversational AI chat bot for customer support | USA | |
| Tenable, Inc. | Vulnerability Management Services | USA; Ireland; Germany; Canada; Australia; Japan; India; Brazil | |
| Zendesk, Inc | Technical support helpdesk | USA |
Web TechnologiesCSV of SOPHOS's web technologies · Atom feed of SOPHOS's web technologies
SOPHOS's homepage made 221 requests to 32 domains, 18 services controlled by another company, and 2 domains not identified.
18 third parties by category: Analytics 5Advertising 4Live chat 1Cookie compliance 1Other 5Unclassified 2
dpmsrv.comsitelytics.tech
9 tracked companies loaded by the homepage are not in SOPHOS's subprocessor list. A website can use a service without it processing customer data.
Subprocessor of (5)CSV of the companies listing SOPHOS · Atom feed of the companies listing SOPHOS
Intralinks intralinks.com
Naviam naviam.io anti-malware software
Netenrich netenrich.com Email security services
Rackspace rackspace.com Products & Services – Security
Tractian tractian.com Endpoint - XDR | Security Options - MDR; Security
Security recordCSV of SOPHOS's security record · Atom feed of SOPHOS's security record
What public security catalogs list for SOPHOS, in their words.
Known exploited vulnerabilities
7 vulnerabilities in SOPHOS's software that CISA lists as exploited in the wild.
| CVE | Product | Vulnerability | Listed |
|---|---|---|---|
| CVE-2020-15069 | XG Firewall | Sophos XG Firewall Buffer Overflow Vulnerability | |
| CVE-2020-29574 | CyberoamOS | CyberoamOS (CROS) SQL Injection Vulnerability used by ransomware | |
| CVE-2023-1671 | Web Appliance | Sophos Web Appliance Command Injection Vulnerability | |
| CVE-2022-3236 | Firewall | Sophos Firewall Code Injection Vulnerability | |
| CVE-2022-1040 | Firewall | Sophos Firewall Authentication Bypass Vulnerability | |
| CVE-2020-25223 | SG UTM | Sophos SG UTM Remote Code Execution Vulnerability | |
| CVE-2020-12271 | SFOS | Sophos SFOS SQL Injection Vulnerability used by ransomware |
Source: CISA Known Exploited Vulnerabilities catalog (evidence)
Incidents reported by SOPHOS's subprocessorsCSV of incidents reported by vendors SOPHOS lists · Atom feed of incidents reported by vendors SOPHOS lists
80 reported incidents in the last 30 days, by 11 of the vendors SOPHOS lists as subprocessors.
A subprocessor list names a company, not the service an incident touched. This does not show that SOPHOS was involved.
And 55 more. All of them: CSV · Who is around them.
ChangesCSV of SOPHOS's changes · Atom feed of SOPHOS's changes
See the list as we read it on any date: Time machine
None since tracking began.