# SOPHOS SOPHOS declares [35 subprocessors](https://thirdpartyindex.com/vendors/sophos#subprocessors) in [its subprocessor list](https://www.sophos.com/en-us/legal/sub-processor), which we last checked on 2026-11-11 ([evidence](https://thirdpartyindex.com/evidence/33516)). They include [Amazon Web Services](https://thirdpartyindex.com/vendors/amazon-web-services), [Google Cloud](https://thirdpartyindex.com/vendors/google-cloud) and [Microsoft](https://thirdpartyindex.com/vendors/microsoft). No published changes since we first read it on 2026-09-21. [5 tracked vendors](https://thirdpartyindex.com/vendors/sophos#used-by) name SOPHOS as a subprocessor, including [Rackspace](https://thirdpartyindex.com/vendors/rackspace), [Intralinks](https://thirdpartyindex.com/vendors/intralinks) and [Naviam](https://thirdpartyindex.com/vendors/naviam). SOPHOS (sophos.com): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index. - Page: https://thirdpartyindex.com/vendors/sophos - Documents last verified: 2026-11-11 - Transparency rating: 98/100 (how much it publishes, not how secure it is): Subprocessor list 30/30; Processing locations 8/8; Purposes 5/7 (partial); Data processing addendum 12/12; Trust center 8/8; Privacy policy 6/6; security.txt 6/6; Security page 5/5; Status page 5/5; Vulnerability disclosure 5/5; Pages still reachable 8/8 - Supply chain: relies on 23 tracked vendors directly, 163 within two hops, 520 within three; 5 tracked vendors rely on it directly, 29 within two hops, 166 within three - Cite as: SOPHOS, Third Party Index, https://thirdpartyindex.com/vendors/sophos (data CC BY 4.0) ## Documents | Document | URL | Last verified | Last changed | |---|---|---|---| | Trust center | https://www.sophos.com/en-us/trust | 2026-11-11 | 2026-11-11 | | Subprocessor list | https://www.sophos.com/en-us/legal/sub-processor | 2026-11-11 | 2026-10-02 | | Data processing addendum | https://www.sophos.com/en-us/legal/data-processing-addendum | 2026-11-11 | 2026-09-24 | | Privacy policy | https://www.sophos.com/en-us/legal/sophos-group-privacy-notice | 2026-11-11 | 2026-09-29 | | Terms | https://www.sophos.com/en-us/legal/sophos-website | 2026-11-11 | 2026-11-06 | | Security page | https://www.sophos.com/en-us/blog | 2026-11-11 | 2026-11-11 | | security.txt | https://www.sophos.com/.well-known/security.txt | 2026-11-11 | 2026-09-21 | | Status page | https://status.sophos.com/ | 2026-11-11 | 2026-11-11 | | Security advisories | https://www.sophos.com/en-us/security-advisories | 2026-11-11 | 2026-11-09 | ## Subprocessors (35) As its own list states them. | Subprocessor | Purpose | Location | Listed since | |---|---|---|---| | [Ada Support Inc.](https://thirdpartyindex.com/vendors/ada-support.md) | Technical support and chat bot services. | USA; Canada | 2026-10-10 | | [Aiven Ltd. \[Apache Kafka\]](https://thirdpartyindex.com/vendors/aiven.md) | Cloud infrastructure services | AWS Regions | 2026-09-21 | | [Akamai Technologies Inc](https://thirdpartyindex.com/vendors/akamai.md) | Content Delivery Network and edge proxy for Sophos software downloads, UI assets, and APIs | USA | 2026-09-21 | | [Amazon Web Services, Inc](https://thirdpartyindex.com/vendors/amazon-web-services.md) | Data centre services, cloud infrastructure services, Generative AI and identity access. | USA; UK; Ireland; Germany; Canada; Australia; Japan; India; Brazil; UAE; Switzerland | 2026-10-10 | | [Atlassian Corporation Limited](https://thirdpartyindex.com/vendors/atlassian.md) | Internal requests and project tracking | Germany; Ireland | 2026-10-10 | | Benjamin Mosse Consulting Pty Ltd | — | Location: Australia; Location: United States | 2026-09-21 | | Blue Ocean Contact Centres Inc. | Technical support helpdesk. | Canada | 2026-09-21 | | [Box Inc](https://thirdpartyindex.com/vendors/box.md) | Secure storage of forensic data and incident-related files | Germany / Ireland, France, Canada, Japan, USA, UK, Australia. | 2026-09-21 | | [Cleverbridge GmbH](https://thirdpartyindex.com/vendors/cleverbridge.md) | Payment support services | USA; Germany | 2026-10-10 | | [Constella Intelligence, Inc.](https://thirdpartyindex.com/vendors/constella-intelligence.md) | To detect and alert on compromised credentials and identity threats across the surface, deep, and dark web. | USA; Germany; Ireland | 2026-10-10 | | Echoworx Corporation | Email encryption services | Canada | 2026-09-21 | | Fenix24, Inc | — | Location: United States | 2026-09-21 | | Forvis Mazars Group | — | Location: United Kingdom; Location: United States | 2026-09-21 | | [Fullstory, Inc](https://thirdpartyindex.com/vendors/fullstory.md) | Session replay, product analytics, and digital experience insights. | USA; Germany | 2026-10-10 | | [Genesys Telecommunications Laboratories, Inc.](https://thirdpartyindex.com/vendors/genesys.md) | Cloud Based contact centre system, technical support and call routing. | Ireland | 2026-09-21 | | [Google LLC](https://thirdpartyindex.com/vendors/google-cloud.md) | Data centre services, cloud infrastructure services, analytics tools | USA | 2026-09-21 | | [Google Cloud EMEA Limited](https://thirdpartyindex.com/vendors/google-cloud.md) | Cloud infrastructure services, analytics tools | USA | 2026-09-21 | | GRCS INC. | — | Location: India; Location: Japan | 2026-09-21 | | Hoodwink Consulting LLC | — | Location: United States | 2026-09-21 | | Invictus Incident Response B.V. | — | Location: The Netherlands | 2026-09-21 | | Island Technology Inc | Enterprise browser and secure access platform | USA, UK, Germany, Canada and Australia | 2026-09-21 | | [Logz.io](https://thirdpartyindex.com/vendors/logz-io.md) | Storage of log files, observability | Germany | 2026-09-21 | | [Microsoft Corporation](https://thirdpartyindex.com/vendors/microsoft.md) | Data centre services, cloud infrastructure services and Generative AI | Germany; Netherlands; United States; Sweden | 2026-10-10 | | [Raintank Inc, d/b/a Grafana Labs](https://thirdpartyindex.com/vendors/grafana.md) | Operational dashboard (metrics) services | USA; Ireland; UK | 2026-10-10 | | [Reversing Labs](https://thirdpartyindex.com/vendors/reversinglabs.md) | Threat intelligence and file analysis. | Croatia | 2026-09-21 | | [Rubrik, Inc.](https://thirdpartyindex.com/vendors/rubrik.md) | Backup and recovery for Microsoft 365 | Microsoft Azure Regions selected by customer | 2026-09-21 | | Rule 56 | — | Location: United States | 2026-09-21 | | [Salesforce Inc.](https://thirdpartyindex.com/vendors/salesforce.md) | Customer relationship management services, metrics and technical support services | USA | 2026-09-21 | | [Sendmarc Inc](https://thirdpartyindex.com/vendors/sendmarc.md) | DMARC email authentication and domain protection | Netherlands | 2026-09-21 | | [SendSafely Inc (B2B)](https://thirdpartyindex.com/vendors/sendsafely.md) | Technical support helpdesk and filesharing system | Ireland; Germany; USA | 2026-10-10 | | [Sentry (d/b/a Functional Software, Inc.)](https://thirdpartyindex.com/vendors/sentry.md) | Error reporting and analysis | USA | 2026-09-21 | | SIE Co.,Ltd | — | Location: Japan; Location: United States | 2026-09-21 | | [Sierra Technologies Inc](https://thirdpartyindex.com/vendors/sierra-technologies.md) | Conversational AI chat bot for customer support | USA | 2026-09-21 | | [Tenable, Inc.](https://thirdpartyindex.com/vendors/tenable-holdings.md) | Vulnerability Management Services | USA; Ireland; Germany; Canada; Australia; Japan; India; Brazil | 2026-10-10 | | [Zendesk, Inc](https://thirdpartyindex.com/vendors/zendesk.md) | Technical support helpdesk | USA | 2026-09-21 | Read from ([evidence](https://thirdpartyindex.com/evidence/33516)). CSV: https://thirdpartyindex.com/vendors/sophos/subprocessors.csv ## Web Technologies SOPHOS's homepage made 221 requests to 32 domains, 18 services controlled by another company, and 2 domains not identified. Loaded on 2026-11-04 by a browser that accepted nothing; other visits may load more or less. What a page loads is not a list of who receives customer data. 18 third parties by category: Analytics 5 (Fullstory, Clay, LinkedIn, Cloudflare, Delivr.ai); Advertising 4 (Google Cloud, Microsoft, Sovrn, Reddit, Inc.); RUM 2 (Akamai; reviewed: New Relic); Live chat 1 (Qualified.com, Inc.); Cookie compliance 1 (OneTrust); CMS 1 (reviewed: Contentstack); Issue trackers 1 (usually detected as Issue trackers: Sentry); Recruitment & staffing 1 (reviewed: XING); Unclassified 2 (Oracle, Report URI Ltd). Each company that appears controlled by another organization is counted once, under the main category of the technologies detected from it on this homepage or, when none was, the category recorded from the company's own page (marked reviewed) or else the one it is usually detected as on other published homepages (marked as such); unclassified: none of these. ### Third parties (18) - Contentstack: 50 requests to contentstack.io - Qualified.com, Inc.: 38 requests to qualified.com; Qualified - Google Cloud: 21 requests to googletagmanager.com, google.com, google-analytics.com, doubleclick.net, googlesyndication.com; DoubleClick Floodlight, Google Analytics, Google Tag Manager (its subprocessor list names it too) - OneTrust: 11 requests to cookielaw.org, onetrust.com; OneTrust - Fullstory: 6 requests to fullstory.com; FullStory (its subprocessor list names it too) - Microsoft: 5 requests to bing.com, bing.net; Microsoft Advertising (its subprocessor list names it too) - Sovrn: 5 requests to lijit.com; Sovrn - Clay: 4 requests to claydar.com; Clay Web Intent - Akamai: 3 requests to go-mpulse.net, akstat.io; Akamai mPulse (its subprocessor list names it too) - LinkedIn: 3 requests to linkedin.com, licdn.com; Linkedin Insight Tag - New Relic: 2 requests to newrelic.com - Oracle: 2 requests to eloqua.com, en25.com - Reddit, Inc.: 2 requests to reddit.com, redditstatic.com; Reddit Ads - XING: 2 requests to xing.com, xingcdn.com - Cloudflare: 1 request to cloudflareinsights.com; Cloudflare Browser Insights - Delivr.ai: 1 request to delivr.ai; Delivr.ai - Report URI Ltd: 1 request to report-uri.com - Sentry: 1 request to sentry.io (its subprocessor list names it too) ### Unknown (2) Domains not identified yet: dpmsrv.com, sitelytics.tech ### First party (1) - SOPHOS: 60 requests to sophos.com; Akamai, Akamai Bot Manager, Boomerang, Cloudflare, Contentstack, Eloqua, GSAP, HSTS, HTTP/3, Microsoft Clarity, New Relic, Next.js 16.4.2, Next.js App Router, Open Graph, Priority Hints, React, Sentry, Turbopack, Webpack 9 tracked companies loaded by the homepage are not in SOPHOS's subprocessor list. A website can use a service without it processing customer data. ## Subprocessor of (5) Tracked vendors whose own subprocessor lists name it, and what they say they use it for. - [Intralinks](https://thirdpartyindex.com/vendors/intralinks.md) - [Naviam](https://thirdpartyindex.com/vendors/naviam.md): anti-malware software - [Netenrich](https://thirdpartyindex.com/vendors/netenrich.md): Email security services - [Rackspace](https://thirdpartyindex.com/vendors/rackspace.md): Products & Services – Security - [Tractian](https://thirdpartyindex.com/vendors/tractian.md): Endpoint - XDR | Security Options - MDR; Security ## Security record CISA's Known Exploited Vulnerabilities catalog lists 7 vulnerabilities in its software: - CVE-2020-15069 (XG Firewall), listed 2025-02-06: Sophos XG Firewall Buffer Overflow Vulnerability - CVE-2020-29574 (CyberoamOS), listed 2025-02-06: CyberoamOS (CROS) SQL Injection Vulnerability (known ransomware use) - CVE-2023-1671 (Web Appliance), listed 2023-11-16: Sophos Web Appliance Command Injection Vulnerability - CVE-2022-3236 (Firewall), listed 2022-09-23: Sophos Firewall Code Injection Vulnerability - CVE-2022-1040 (Firewall), listed 2022-03-31: Sophos Firewall Authentication Bypass Vulnerability - CVE-2020-25223 (SG UTM), listed 2022-03-25: Sophos SG UTM Remote Code Execution Vulnerability - CVE-2020-12271 (SFOS), listed 2021-11-03: Sophos SFOS SQL Injection Vulnerability (known ransomware use) ## Incidents reported by SOPHOS's subprocessors Incidents reported in the last 30 days on their own status pages by 11 vendors SOPHOS lists as subprocessors. A subprocessor list names a company, not the service an incident touched. - 2026-11-11: [Grafana](https://thirdpartyindex.com/vendors/grafana#status), which SOPHOS lists as a subprocessor, reported Degraded performance for Grafana Cloud Metrics in prod-us-central-7 (major) - 2026-11-11: [Grafana](https://thirdpartyindex.com/vendors/grafana#status), which SOPHOS lists as a subprocessor, reported Elevated query errors for Grafana Cloud Metrics in prod-us-east-3 (minor) - 2026-11-11: [Sentry](https://thirdpartyindex.com/vendors/sentry#status), which SOPHOS lists as a subprocessor, reported US issues feed throwing intermittent errors (minor) - 2026-11-11: [Sentry](https://thirdpartyindex.com/vendors/sentry#status), which SOPHOS lists as a subprocessor, reported Account emails not being delivered (major) - 2026-11-10: [Sentry](https://thirdpartyindex.com/vendors/sentry#status), which SOPHOS lists as a subprocessor, reported EU region replay ingestion latency (minor) - 2026-11-10: [Grafana](https://thirdpartyindex.com/vendors/grafana#status), which SOPHOS lists as a subprocessor, reported Cloud Logs writes - Elevated latency and error rates in prod-eu-central-0 (no impact stated) - 2026-11-10: [Grafana](https://thirdpartyindex.com/vendors/grafana#status), which SOPHOS lists as a subprocessor, reported Mimir query unexpected response with status code 500 (minor) - 2026-11-09: [Tenable](https://thirdpartyindex.com/vendors/tenable-holdings#status), which SOPHOS lists as a subprocessor, reported Tenable Cloud Security: Customers Site Access Issues (USGov1) (critical) - 2026-11-06: [Grafana](https://thirdpartyindex.com/vendors/grafana#status), which SOPHOS lists as a subprocessor, reported Synthetic Monitoring — Jakarta Public Probe Degradation (no impact stated) - 2026-11-05: [Aiven](https://thirdpartyindex.com/vendors/aiven#status), which SOPHOS lists as a subprocessor, reported API requests failing/timing out (no impact stated) - 2026-11-04: [Tenable](https://thirdpartyindex.com/vendors/tenable-holdings#status), which SOPHOS lists as a subprocessor, reported Tenable Vulnerability Management: Scan Processing Delays (minor) - 2026-11-04: [Ada Support](https://thirdpartyindex.com/vendors/ada-support#status), which SOPHOS lists as a subprocessor, reported Complete ada outage (critical) - 2026-11-04: [Logz.io](https://thirdpartyindex.com/vendors/logz-io#status), which SOPHOS lists as a subprocessor, reported Data Ingestions Delays For Some Customers - Degraded Performance - us-east-1 (minor) - 2026-11-04: [Sentry](https://thirdpartyindex.com/vendors/sentry#status), which SOPHOS lists as a subprocessor, reported Ingestion delays across all data (minor) - 2026-11-04: [Fullstory](https://thirdpartyindex.com/vendors/fullstory#status), which SOPHOS lists as a subprocessor, reported Delays in syncing to S3 data warehouses (EU1) (minor) - 2026-11-04: [Cleverbridge](https://thirdpartyindex.com/vendors/cleverbridge#status), which SOPHOS lists as a subprocessor, reported Platform availability issue (major) - 2026-11-04: [Tenable](https://thirdpartyindex.com/vendors/tenable-holdings#status), which SOPHOS lists as a subprocessor, reported Tenable Vulnerability Management: Delay in Findings (major) - 2026-11-04: [Box](https://thirdpartyindex.com/vendors/box#status), which SOPHOS lists as a subprocessor, reported \[Minor\] Issue with Box AI (minor) - 2026-11-04: [Grafana](https://thirdpartyindex.com/vendors/grafana#status), which SOPHOS lists as a subprocessor, reported GitHub returning 403 for all Git Sync repositories (minor) - 2026-11-03: [Fullstory](https://thirdpartyindex.com/vendors/fullstory#status), which SOPHOS lists as a subprocessor, reported \[Resolved\] Delayed Session Data Availability (NA1 & EU1 Data Centers) (no impact stated) - 2026-11-03: [Grafana](https://thirdpartyindex.com/vendors/grafana#status), which SOPHOS lists as a subprocessor, reported October usage report visualization issue (minor) - 2026-11-03: [Akamai](https://thirdpartyindex.com/vendors/akamai#status), which SOPHOS lists as a subprocessor, reported Property Manager Property Activation Errors (no impact stated) - 2026-11-03: [Sentry](https://thirdpartyindex.com/vendors/sentry#status), which SOPHOS lists as a subprocessor, reported Delays in spans and transactions processing (major) - 2026-11-03: [Sentry](https://thirdpartyindex.com/vendors/sentry#status), which SOPHOS lists as a subprocessor, reported Sentry.io dashboard and API is down (critical) - 2026-11-03: [Grafana](https://thirdpartyindex.com/vendors/grafana#status), which SOPHOS lists as a subprocessor, reported Increased query latency for Logs in GCP US Central (prod-us-central-0) (minor) - 2026-11-03: [Grafana](https://thirdpartyindex.com/vendors/grafana#status), which SOPHOS lists as a subprocessor, reported Elevated Request Errors for Grafana Across Multiple Regions (minor) - 2026-11-02: [Grafana](https://thirdpartyindex.com/vendors/grafana#status), which SOPHOS lists as a subprocessor, reported Grafana Cloud: k6 timeouts (no impact stated) - 2026-11-02: [Sentry](https://thirdpartyindex.com/vendors/sentry#status), which SOPHOS lists as a subprocessor, reported Sentry dashboard is down (critical) - 2026-11-02: [Tenable](https://thirdpartyindex.com/vendors/tenable-holdings#status), which SOPHOS lists as a subprocessor, reported Tenable Cloud Security: Sync delays (major) - 2026-11-02: [Grafana](https://thirdpartyindex.com/vendors/grafana#status), which SOPHOS lists as a subprocessor, reported Metrics Alert Rule Evaluation Failures in AWS Australia (prod-au-southeast-1) (minor) - 2026-11-02: [Grafana](https://thirdpartyindex.com/vendors/grafana#status), which SOPHOS lists as a subprocessor, reported Missing Metrics for Some Synthetic Monitoring Checks using the Montreal, North Virginia, and North California public probes (no impact stated) - 2026-11-02: [Grafana](https://thirdpartyindex.com/vendors/grafana#status), which SOPHOS lists as a subprocessor, reported IRM Unable to Voice Call Brazil Numbers (major) - 2026-10-30: [Akamai](https://thirdpartyindex.com/vendors/akamai#status), which SOPHOS lists as a subprocessor, reported Customer Security Advisory: CVE-2026-98432 (no impact stated) - 2026-10-27: [ReversingLabs](https://thirdpartyindex.com/vendors/reversinglabs#status), which SOPHOS lists as a subprocessor, reported "TCF-0107: Files Scanned for the First Time (APIs)" is Down (major) - 2026-10-27: [ReversingLabs](https://thirdpartyindex.com/vendors/reversinglabs#status), which SOPHOS lists as a subprocessor, reported "TCA-0404: Analyze URL (APIs)" is Down (major) - 2026-10-27: [Grafana](https://thirdpartyindex.com/vendors/grafana#status), which SOPHOS lists as a subprocessor, reported Frontend Observability Outage in prod-eu-west-2 (critical) - 2026-10-27: [Grafana](https://thirdpartyindex.com/vendors/grafana#status), which SOPHOS lists as a subprocessor, reported Degraded Cloud Integrations (minor) - 2026-10-27: [Akamai](https://thirdpartyindex.com/vendors/akamai#status), which SOPHOS lists as a subprocessor, reported Performance Degradation for Customers in Mumbai and Chennai (no impact stated) - 2026-10-27: [Akamai](https://thirdpartyindex.com/vendors/akamai#status), which SOPHOS lists as a subprocessor, reported Enterprise Application Access (EAA) Connector Issues (minor) - 2026-10-26: [Grafana](https://thirdpartyindex.com/vendors/grafana#status), which SOPHOS lists as a subprocessor, reported ingestion errors in mimir-prod-66 (no impact stated) - 2026-10-25: [Akamai](https://thirdpartyindex.com/vendors/akamai#status), which SOPHOS lists as a subprocessor, reported Edge Delivery issues between Indonesia and Singapore (minor) - 2026-10-23: [Grafana](https://thirdpartyindex.com/vendors/grafana#status), which SOPHOS lists as a subprocessor, reported Some Grafana Instances Experiencing Issues Coming Online after Restart (minor) - 2026-10-23: [Akamai](https://thirdpartyindex.com/vendors/akamai#status), which SOPHOS lists as a subprocessor, reported Customer Security Advisory: Brotli Remote Code Execution Vulnerabilities \[CVE-2026-111497\] (no impact stated) - 2026-10-23: [Grafana](https://thirdpartyindex.com/vendors/grafana#status), which SOPHOS lists as a subprocessor, reported Elevated Trace Ingestion Latency and Errors for Grafana Cloud Traces in AWS Germany (major) - 2026-10-22: [Akamai](https://thirdpartyindex.com/vendors/akamai#status), which SOPHOS lists as a subprocessor, reported Customer Security Advisory: Critical F5/NGINX Out-of-Band Vulnerabilities (no impact stated) - 2026-10-21: [Ada Support](https://thirdpartyindex.com/vendors/ada-support#status), which SOPHOS lists as a subprocessor, reported Messages not being delivered (US region) (major) - 2026-10-21: [Akamai](https://thirdpartyindex.com/vendors/akamai#status), which SOPHOS lists as a subprocessor, reported Edge Delivery Secure CDN platform at Risk of Capacity Issues (no impact stated) - 2026-10-21: [Sentry](https://thirdpartyindex.com/vendors/sentry#status), which SOPHOS lists as a subprocessor, reported Increased latency processing integration webhooks (minor) - 2026-10-21: [Tenable](https://thirdpartyindex.com/vendors/tenable-holdings#status), which SOPHOS lists as a subprocessor, reported Tenable Vulnerability Management: Scheduled Scans Not Launching (major) - 2026-10-21: [Akamai](https://thirdpartyindex.com/vendors/akamai#status), which SOPHOS lists as a subprocessor, reported Web Security Analytics, Reporting and Configuration Deployment Issues (minor) - 2026-10-21: [Akamai](https://thirdpartyindex.com/vendors/akamai#status), which SOPHOS lists as a subprocessor, reported Customer Security Advisory: PHP Remote Code Execution Vulnerabilities (no impact stated) - 2026-10-21: [Akamai](https://thirdpartyindex.com/vendors/akamai#status), which SOPHOS lists as a subprocessor, reported NetStorage issues in Los Angeles (minor) - 2026-10-21: [Grafana](https://thirdpartyindex.com/vendors/grafana#status), which SOPHOS lists as a subprocessor, reported Some GCK6 App Project Pages are Failing to Load (major) - 2026-10-21: [Grafana](https://thirdpartyindex.com/vendors/grafana#status), which SOPHOS lists as a subprocessor, reported Increased timeout errors in alert rule evaluations (AWS Germany, prod-eu-west-2) (minor) - 2026-10-21: [Sentry](https://thirdpartyindex.com/vendors/sentry#status), which SOPHOS lists as a subprocessor, reported Sentry.io not loading in US region (critical) - 2026-10-21: [Grafana](https://thirdpartyindex.com/vendors/grafana#status), which SOPHOS lists as a subprocessor, reported Possible incorrect evaluation of Synthetic Monitoring alert rules in cluster prod-us-east-3 (no impact stated) - 2026-10-20: [Grafana](https://thirdpartyindex.com/vendors/grafana#status), which SOPHOS lists as a subprocessor, reported DB issues in prod-sa-east-1 (no impact stated) - 2026-10-20: [Sentry](https://thirdpartyindex.com/vendors/sentry#status), which SOPHOS lists as a subprocessor, reported Sentry.io not loading (major) - 2026-10-20: [Grafana](https://thirdpartyindex.com/vendors/grafana#status), which SOPHOS lists as a subprocessor, reported Some GCK6 App Project Pages are Failing to Load (major) - 2026-10-20: [Grafana](https://thirdpartyindex.com/vendors/grafana#status), which SOPHOS lists as a subprocessor, reported IRM outage in the region prod-gb-south-0 and prod-eu-west-0 (no impact stated) - 2026-10-20: [Grafana](https://thirdpartyindex.com/vendors/grafana#status), which SOPHOS lists as a subprocessor, reported Grafana Cloud unavailibity in the prod-gb-south-0 region (minor) - 2026-10-20: [Aiven](https://thirdpartyindex.com/vendors/aiven#status), which SOPHOS lists as a subprocessor, reported Google Cloud VPN incident affecting services (minor) - 2026-10-20: [Box](https://thirdpartyindex.com/vendors/box#status), which SOPHOS lists as a subprocessor, reported \[Medium\] Issue with multiple Box Services (major) - 2026-10-19: [Sentry](https://thirdpartyindex.com/vendors/sentry#status), which SOPHOS lists as a subprocessor, reported Sentry is down (critical) - 2026-10-19: [Grafana](https://thirdpartyindex.com/vendors/grafana#status), which SOPHOS lists as a subprocessor, reported Metrics: Evelvated Read and Ruler Errors. (major) - 2026-10-18: [Aiven](https://thirdpartyindex.com/vendors/aiven#status), which SOPHOS lists as a subprocessor, reported Unable to spin up nodes in vultr-ewr (no impact stated) - 2026-10-17: [Tenable](https://thirdpartyindex.com/vendors/tenable-holdings#status), which SOPHOS lists as a subprocessor, reported Tenable Cloud Security: Service Degradation on All Sites (major) - 2026-10-16: [Grafana](https://thirdpartyindex.com/vendors/grafana#status), which SOPHOS lists as a subprocessor, reported Metric reads and rule evaluations are degraded in mimir-prod-66 (minor) - 2026-10-16: [Ada Support](https://thirdpartyindex.com/vendors/ada-support#status), which SOPHOS lists as a subprocessor, reported Issues with a ticketing integration (minor) - 2026-10-16: [Aiven](https://thirdpartyindex.com/vendors/aiven#status), which SOPHOS lists as a subprocessor, reported Issues starting new service nodes (no impact stated) - 2026-10-15: [Grafana](https://thirdpartyindex.com/vendors/grafana#status), which SOPHOS lists as a subprocessor, reported Tempo Write Failures in prod-us-central-0 (major) - 2026-10-15: [Grafana](https://thirdpartyindex.com/vendors/grafana#status), which SOPHOS lists as a subprocessor, reported Tempo: High Latency in prod-eu-west-2 (minor) - 2026-10-15: [Box](https://thirdpartyindex.com/vendors/box#status), which SOPHOS lists as a subprocessor, reported \[Major\] Issue with Box Drive (major) - 2026-10-14: [ReversingLabs](https://thirdpartyindex.com/vendors/reversinglabs#status), which SOPHOS lists as a subprocessor, reported Component "Spectra Assure CLI updater service (APIs)" and a few other components are Down (major) - 2026-10-14: [Grafana](https://thirdpartyindex.com/vendors/grafana#status), which SOPHOS lists as a subprocessor, reported Authentication errors in prod-us-west-0 (minor) - 2026-10-14: [Tenable](https://thirdpartyindex.com/vendors/tenable-holdings#status), which SOPHOS lists as a subprocessor, reported Tenable One: Delay in Tenable Exposure Management data (major) - 2026-10-14: [Sentry](https://thirdpartyindex.com/vendors/sentry#status), which SOPHOS lists as a subprocessor, reported Ingestion Halted for EAP data in EU (major) - 2026-10-14: [Tenable](https://thirdpartyindex.com/vendors/tenable-holdings#status), which SOPHOS lists as a subprocessor, reported Tenable Vulnerability Management: Unresponsive Cyber Exposure Feed (no impact stated) - 2026-10-13: [Grafana](https://thirdpartyindex.com/vendors/grafana#status), which SOPHOS lists as a subprocessor, reported Errors when querying Prometheus datasource (minor) The subprocessor list as we read it on any date: https://thirdpartyindex.com/labs/time-machine/sophos ## Security contact From its security.txt (https://www.sophos.com/.well-known/security.txt) ([evidence](https://thirdpartyindex.com/evidence/1381)): - Contact: mailto:security-alert@sophos.com - Contact: tel:https://www.sophos.com/security - Disclosure policy: https://www.sophos.com/security - Acknowledgments: https://www.sophos.com/en-us/legal/sophos-responsible-disclosure-policy/thanks - No expiry date --- Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api