# Syndigo

Syndigo (syndigo.com): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/syndigo
- Documents last verified: 2026-09-29
- Transparency rating: 59/100 (how much it publishes, not how secure it is)
- Cite as: Syndigo, Third Party Index, https://thirdpartyindex.com/vendors/syndigo (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Subprocessor list | https://syndigo.com/subscription-clients-subprocessors/ | 2026-09-29 | 2026-09-29 |
| Privacy policy | https://syndigo.com/legal/privacy-notice/ | 2026-09-29 | 2026-09-29 |
| Terms | https://syndigo.com/legal/terms-of-use/ | 2026-09-29 | 2026-09-29 |

## Subprocessors (19)

As its own list states them.

| Subprocessor | Purpose | Location | Listed since |
|---|---|---|---|
| [Amazon Web Services, Inc.](https://thirdpartyindex.com/vendors/amazon-web-services.md) | The duration of the Processing is generally determined by the services agreement with the Sub-Processor.; The nature of the Processing involves: storage and computational services.; The subject matter of the Processing pertains to the provision of cloud infrastructure and hosting services pursuant to the services agreement with the Sub-Processor.; The subject matter of the Processing pertains to the provision of databases, storage and compute services pursuant to the services agreement with the Sub-Processor. | (410 Terry Avenue North, Seattle, WA, 98109); 0 Chicago, IL 60604); USA; United States of America, Ireland and United Kingdom. | 2026-09-29 |
| [Anthropic PBC](https://thirdpartyindex.com/vendors/anthropic.md) | The duration of the Processing is generally determined by the services agreement with the Sub-Processor.; The nature of the Processing involves: analysis and processing of data to generate AI-assisted outputs.; The subject matter of the Processing pertains to the provision of artificial intelligence and large language model services pursuant to the services agreement with the Sub-Processor. | (548 Market St, PMB 90375, San Francisco, CA 94104); Or European Union; USA | 2026-09-29 |
| Auth0, LLC - wholly owned by Okta | The duration of the Processing is generally determined by the services agreement with the Sub-Processor.; The nature of the Processing involves: identity and access management and related services.; The subject matter of the Processing pertains to the provision of identity and access management services pursuant to the services agreement with the Sub-Processor. | (10800 NE 8th Street, Suite 700, Bellevue, WA 98004); USA | 2026-09-29 |
| [CloudFlare, Inc.](https://thirdpartyindex.com/vendors/cloudflare.md) | The duration of the Processing is generally determined by the services agreement with the Sub-Processor.; The nature of the Processing involves: security analysis of network and application traffic, DNS services.; The subject matter of the Processing pertains to the provision of application security and Domain Name System (DNS) services pursuant to the services agreement with the Sub-Processor. | (101 Townsend St.; San Francisco CA 94107); USA | 2026-09-29 |
| Critical Insight, Inc. | The duration of the Processing is limited to the duration of investigations by the Sub-Processor on cybersecurity incidents.; The nature of the Processing involves: consultation in the process of reviewing cybersecurity alerts or incidents.; The subject matter of the Processing pertains to the provision of cybersecurity consulting services and analysis pursuant to the services agreement with the Sub-Processor. | (245 4th St Ste 405; Bremerton, WA 98337); USA | 2026-09-29 |
| [Databricks, Inc.](https://thirdpartyindex.com/vendors/databricks.md) | The duration of the Processing is generally determined by the services agreement with the Sub-Processor.; The nature of the Processing involves: data analysis.; The subject matter of the Processing pertains to the provision of data management platform and analytics services pursuant to the services agreement with the Sub-Processor. | (160 Spear Street, 13th Floor San Francisco, CA 94105); USA | 2026-09-29 |
| Flexential Corp. | The duration of the Processing is generally determined by the services agreement with the Sub-Processor.; The nature of the Processing involves: collection, recording, organization, storage, retrieval or otherwise making available, erasure, or destruction.; The subject matter of the Processing pertains to the provision of co-location data services pursuant to the services agreement with the Sub-Processor. | (600 Forest Point Circle, Suite 100, Charlotte, NC 28273); USA | 2026-09-29 |
| Iron Mountain Inc. | The duration of the Processing is generally determined by the services agreement with the Sub-Processor.; The nature of the Processing involves: destruction of shredded paperwork.; The subject matter of the Processing pertains to the provision of record management services pursuant to the services agreement with the Sub-Processor. | (1 Federal Street, Boston, MA 02110, U.S.A); USA | 2026-09-29 |
| [Microsoft Corporation.](https://thirdpartyindex.com/vendors/microsoft.md) | The duration of the Processing is generally determined by the services agreement with the Sub-Processor.; The nature of the Processing involves: storage.; The subject matter of the Processing pertains to the provision of Azure Infrastructure services pursuant to the services agreement with the Sub-Processor. | (One Microsoft Way, Redmond, WA 98052); USA | 2026-09-29 |
| [Microsoft Ireland Operations, Ltd.](https://thirdpartyindex.com/vendors/microsoft.md) | The duration of the Processing is generally determined by the services agreement with the Sub-Processor.; The nature of the Processing involves: storage.; The subject matter of the Processing pertains to the provision of Azure Cloud services (European MS Azure Cloud) pursuant to the services agreement with the Sub-Processor. | (South County Business Park, One Microsoft Place, Carmanhall and Leopardstown, Dublin, D18 P521); Ireland | 2026-09-29 |
| Navisite, LLC. | The duration of the Processing is generally determined by the services agreement with the Sub-Processor.; The nature of the Processing involves: organization, disclosure, erasure.; The subject matter of the Processing pertains to the provision of emergency Database Administration (DBA) services pursuant to the services agreement with the Sub-Processor. | (400 Minuteman Road, Andover, MA 01810); USA | 2026-09-29 |
| [Okta, Inc.](https://thirdpartyindex.com/vendors/okta.md) | The duration of the Processing is generally determined by the services agreement with the sub-Processor.; The nature of the Processing involves: identity and access management and related services.; The subject matter of the Processing pertains to the provision of identity and access management cloud services pursuant to the services agreement with the sub-Processor. | (100 First Street, San Francisco, California 94105); USA | 2026-09-29 |
| [Pendo.io, Inc.](https://thirdpartyindex.com/vendors/pendo.md) | The duration of the Processing is generally determined by the services agreement with the Sub-Processor.; The nature of the Processing involves: data analysis.; The subject matter of the Processing pertains to the provision of product analytics to optimize user experience pursuant to the services agreement with the Sub-Processor. | (150 Fayetteville Street, Suite 1400, Raleigh, North Carolina 27601); USA | 2026-09-29 |
| [Rapid7 LLC](https://thirdpartyindex.com/vendors/rapid7.md) | The duration of the Processing is determined by the services agreement with the Sub-Processor.; The nature of the Processing involves: monitoring, analysis, and consultation in the process of reviewing cybersecurity alerts or incidents.; The subject matter of the Processing pertains to the provision of cybersecurity monitoring, analysis, and consulting services pursuant to the services agreement with the Sub-Processor. | USA (120 Causeway Street, Suite 400, Boston, MA 02114) | 2026-09-29 |
| [Red Hat, Inc.](https://thirdpartyindex.com/vendors/red-hat.md) | The duration of the Processing is generally determined by the services agreement with the Sub-Processor.; The nature of the Processing involves: collection, , organization, storage, retrieval for the purposes of delivering the API Infrastructure.; The subject matter of the Processing pertains to the provision of Application Programming Interface Infrastructure (3scale) services pursuant to the services agreement with the Sub-Processor. | (100 East Davie Street, Raleigh, NC 27601); USA | 2026-09-29 |
| Riversand Technologies Europe AG | The duration of the Processing is generally determined by the Intra Group Data Transfer Agreement with the Sub-Processor.; The nature of the Processing involves: collection, recording, organization, storage, retrieval, erasure, or destruction.; The subject matter of the Processing pertains to the provision of the services (remote access to provide customer support; consultation of personal data to process customer support, etc.). | (Gubelstrasse 11 6300 Zug); Switzerland | 2026-09-29 |
| Riversand Technologies India Private Limited | The duration of the Processing is generally determined by the Intra Group Data Transfer Agreement with the Sub-Processor.; The nature of the Processing involves: collection, recording, organization, storage, retrieval, erasure, or destruction.; The subject matter of the Processing pertains to the provision of the services (remote access to provide customer support; consultation of personal data to process customer support, etc.). | (IBC Knowledge Park, Tower D,; 8th Floor, Bannerghatta Main Road, Bangalore, Karnataka 560029); India | 2026-09-29 |
| [Salesforce.com, Inc.](https://thirdpartyindex.com/vendors/salesforce.md) | The duration of the Processing is generally determined by the services agreement with the Sub-Processor.; The nature of the Processing involves: collection, recording, organization, storage, retrieval, erasure, or destruction.; The subject matter of the Processing pertains to the provision of notifications to CXH users in case of outages pursuant to the services agreement with the Sub-Processor. | (Salesforce Tower, 415 Mission Street, 3rd Floor, San Francisco, CA 94105); USA | 2026-09-29 |
| [Twilio, Inc.](https://thirdpartyindex.com/vendors/twilio.md) | The duration of the Processing is generally determined by the services agreement with the Sub-Processor.; The nature of the Processing involves: collection, recording, organization, storage, retrieval, erasure, or destruction.; The subject matter of the Processing pertains to the provision of an automated emailing system for Syndigo’s customer notification pursuant to the services agreement with the Sub-Processor. | (375 Beale Street; San Francisco, CA 94105); Suite 300; USA | 2026-09-29 |

Read from ([evidence](https://thirdpartyindex.com/evidence/18617)). CSV: https://thirdpartyindex.com/vendors/syndigo/subprocessors.csv

### Its own affiliates (1)

- Syndigo LLC (for customers entering into the Syndigo Europe DPA) ((141 W. Jackson Blvd., Ste 1220 Chicago, IL 60604); USA)

## Listed as a subprocessor by (0)

No tracked vendor lists it.

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api