# Trellix

Trellix declares [19 subprocessors](https://thirdpartyindex.com/vendors/trellix#subprocessors) in [its subprocessor list](https://www.trellix.com/assets/legal/sub-processors-list.pdf), which we last checked on 2026-11-12 ([evidence](https://thirdpartyindex.com/evidence/11618)). They include [Amazon Web Services](https://thirdpartyindex.com/vendors/amazon-web-services), [Google Cloud](https://thirdpartyindex.com/vendors/google-cloud) and [Microsoft](https://thirdpartyindex.com/vendors/microsoft). No published changes since we first read it on 2026-09-28.

Trellix (trellix.com): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/trellix
- Documents last verified: 2026-11-12
- Transparency rating: 81/100 (how much it publishes, not how secure it is): Subprocessor list 30/30; Processing locations 8/8; Purposes 4/7 (partial); Data processing addendum 12/12; Trust center 8/8; Privacy policy 6/6; security.txt 0/6 (not found); Security page 0/5 (not found); Status page 5/5; Vulnerability disclosure 0/5 (not found); Pages still reachable 8/8
- Supply chain: relies on 15 tracked vendors directly, 83 within two hops, 279 within three; 0 tracked vendors rely on it directly, 0 within two hops, 0 within three
- Cite as: Trellix, Third Party Index, https://thirdpartyindex.com/vendors/trellix (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Trust center | https://www.trellix.com/trust/ | 2026-11-12 | 2026-09-28 |
| Subprocessor list | https://www.trellix.com/assets/legal/sub-processors-list.pdf | 2026-11-12 | 2026-09-28 |
| Data processing addendum | https://www.trellix.com/assets/legal/customer-data-processing-agreement.pdf | 2026-11-12 | 2026-09-28 |
| Privacy policy | https://www.trellix.com/about/legal/privacy/ | 2026-11-12 | 2026-09-28 |
| Terms | https://www.trellix.com/about/legal/website-terms-of-service/ | 2026-11-12 | 2026-09-28 |
| Status page | https://status.trellix.com/s/ | 2026-11-12 | 2026-11-01 |

## Subprocessors (19)

As its own list states them.

| Subprocessor | Purpose | Location | Listed since |
|---|---|---|---|
| [Amazon Web Services, Inc.](https://thirdpartyindex.com/vendors/amazon-web-services.md) (AI model provider: Amazon Bedrock) | Artificial Intelligence Services (Amazon Bedrock) | Corporate: United States; Other Location: See website; United States | 2026-09-28 |
| [Amplitude, Inc.](https://thirdpartyindex.com/vendors/amplitude.md) | Performance analytics | United States | 2026-09-28 |
| [AttackIQ, Inc.](https://thirdpartyindex.com/vendors/attackiq.md) | Threat detection validation solution | United States | 2026-09-28 |
| BrainStorm Network, LLC | — | Corporate: United States; Other Location: See website | 2026-09-28 |
| [CtrLS Datacenter](https://thirdpartyindex.com/vendors/ctrls.md) | — | Corporate: India; Other Location: See website | 2026-09-28 |
| [Equinix](https://thirdpartyindex.com/vendors/equinix.md) | — | Corporate: United States; Other Location: See website | 2026-09-28 |
| [Google, LLC.](https://thirdpartyindex.com/vendors/google-cloud.md) | Translation services | United States | 2026-09-28 |
| [Google Cloud Platform](https://thirdpartyindex.com/vendors/google-cloud.md) | — | Corporate: United States; Other Location: See website | 2026-09-28 |
| Mailshell, Inc. | Email security (not used with offerings in Europe) | United States | 2026-09-28 |
| [Microsoft Corporation (Azure)](https://thirdpartyindex.com/vendors/microsoft.md) | — | Corporate: United States; Other Location: See website | 2026-09-28 |
| [Okta, Inc.](https://thirdpartyindex.com/vendors/okta.md) | Identity authentication management | United States | 2026-09-28 |
| [Oracle Corporation](https://thirdpartyindex.com/vendors/oracle.md) | — | Corporate: United States; Other Location: See website | 2026-09-28 |
| [Pendo.io, Inc.](https://thirdpartyindex.com/vendors/pendo.md) | Performance analytics | United States | 2026-09-28 |
| [Persistent Systems Limited](https://thirdpartyindex.com/vendors/persistent-systems.md) | Engineering support | India | 2026-09-28 |
| Reveald, Inc. | Managed detection and response (MDR) solution | United States | 2026-09-28 |
| [Salesforce, Inc.](https://thirdpartyindex.com/vendors/salesforce.md) | Customer service solution | Corporate: United States; Other Location: See website; United States | 2026-09-28 |
| [Sutherland Global Services, Inc.](https://thirdpartyindex.com/vendors/sutherland-global-services.md) | Customer support | United States | 2026-09-28 |
| [Verizon](https://thirdpartyindex.com/vendors/verizon.md) | — | Corporate: United States; Other Location: See website | 2026-09-28 |
| [Zimperium, Inc.](https://thirdpartyindex.com/vendors/zimperium.md) | Mobile threat detection (MTD) solution | United States | 2026-09-28 |

Read from ([evidence](https://thirdpartyindex.com/evidence/11618)). CSV: https://thirdpartyindex.com/vendors/trellix/subprocessors.csv

AI model providers (or a cloud provider's AI model service) among these entries: 1. All vendors that list one: https://thirdpartyindex.com/ai

## Compliance

As its trust center lists them.

- FedRAMP Marketplace: Moderate · 6 agency authorizations · since Jul 5, 2017
- FedRAMP Marketplace: High · 3 agency authorizations · since Nov 5, 2024

## Web Technologies

Trellix's homepage made 189 requests to 23 domains, and 13 services controlled by another company. Loaded on 2026-11-10 by a browser that accepted nothing; other visits may load more or less. What a page loads is not a list of who receives customer data.

13 third parties by category: Analytics 4 (ZoomInfo, Cloudflare, LinkedIn, Google Cloud); Advertising 3 (usually detected as Advertising: Microsoft, The Trade Desk, Inc., Xandr); Marketing automation 2 (6Sense Insights, Inc., Adobe); Live chat 1 (Qualified.com, Inc.); Cookie compliance 1 (Crownpeak Technology, Inc.); Issue trackers 1 (usually detected as Issue trackers: Sentry); RUM 1 (usually detected as RUM: Akamai). Each company that appears controlled by another organization is counted once, under the main category of the technologies detected from it on this homepage or, when none was, the category recorded from the company's own page (marked reviewed) or else the one it is usually detected as on other published homepages (marked as such); unclassified: none of these.

### Third parties (13)

- Qualified.com, Inc.: 35 requests to qualified.com; Qualified
- 6Sense Insights, Inc.: 20 requests to 6sc.co, 6sense.com; 6sense
- Adobe: 19 requests to adobedtm.com, demdex.net, marketo.net, everesttech.net, mktoresp.com; Marketo
- Crownpeak Technology, Inc.: 10 requests to evidon.com; CrownPeak Universal Consent Platform, Evidon
- Microsoft: 6 requests to clarity.ms (its subprocessor list names it too)
- ZoomInfo: 5 requests to zoominfo.com, zi-scripts.com; Zoominfo
- Cloudflare: 4 requests to cloudflare.com, cloudflareinsights.com; Cloudflare Browser Insights, cdnjs
- LinkedIn: 3 requests to linkedin.com, licdn.com; Linkedin Insight Tag
- Akamai: 2 requests to go-mpulse.net
- Google Cloud: 2 requests to google-analytics.com, googletagmanager.com; Google Analytics, Google Tag Manager (its subprocessor list names it too)
- Sentry: 1 request to sentry.io
- The Trade Desk, Inc.: 1 request to adsrvr.org
- Xandr: 1 request to adnxs.com

### First party (1)

- Trellix: 80 requests to trellix.com; Adobe Analytics, Adobe Audience Manager, Adobe Client Data Layer 2.0.2, Adobe Experience Manager, Adobe Experience Platform Identity Service, Adobe Experience Platform Launch, Akamai, Akamai Bot Manager, Akamai mPulse, Boomerang, Bootstrap 5.1.3, Bootstrap Icons, GSAP 3.12.5, HSTS, Java, Microsoft Clarity, Open Graph, Popper, Priority Hints, Sentry, jQuery 3.7.1, jQuery UI 1.14.1

7 tracked companies loaded by the homepage are not in Trellix's subprocessor list. A website can use a service without it processing customer data.

## Subprocessor of (0)

No tracked vendor lists it.

## Incidents reported by Trellix's subprocessors

Incidents reported in the last 30 days on their own status pages by 2 vendors Trellix lists as subprocessors. A subprocessor list names a company, not the service an incident touched.

- 2026-11-05: [Amplitude](https://thirdpartyindex.com/vendors/amplitude#status), which Trellix lists as a subprocessor, reported Session Replay capturing more sessions than configured (minor)
- 2026-11-05: [Amplitude](https://thirdpartyindex.com/vendors/amplitude#status), which Trellix lists as a subprocessor, reported Delayed S3 export (minor)
- 2026-11-04: [Pendo](https://thirdpartyindex.com/vendors/pendo#status), which Trellix lists as a subprocessor, reported Degradation of Account and Visitor Reports (critical)
- 2026-10-26: [Amplitude](https://thirdpartyindex.com/vendors/amplitude#status), which Trellix lists as a subprocessor, reported Data Ingestion Delays (minor)
- 2026-10-24: [Amplitude](https://thirdpartyindex.com/vendors/amplitude#status), which Trellix lists as a subprocessor, reported Delayed/Blocked Event Delivery to Amazon Kinesis Destination (no impact stated)
- 2026-10-22: [Amplitude](https://thirdpartyindex.com/vendors/amplitude#status), which Trellix lists as a subprocessor, reported Streaming to External Destinations Unavailable (no impact stated)
- 2026-10-22: [Amplitude](https://thirdpartyindex.com/vendors/amplitude#status), which Trellix lists as a subprocessor, reported Amplitude Website Outage (no impact stated)
- 2026-10-22: [Amplitude](https://thirdpartyindex.com/vendors/amplitude#status), which Trellix lists as a subprocessor, reported Notice: Amplitude not impacted by recent PHP vulnerabilities (no impact stated)
- 2026-10-20: [Amplitude](https://thirdpartyindex.com/vendors/amplitude#status), which Trellix lists as a subprocessor, reported Export API returns 500 errors across multiple organizations (minor)
- 2026-10-17: [Amplitude](https://thirdpartyindex.com/vendors/amplitude#status), which Trellix lists as a subprocessor, reported We are actively investigating an issue with our ingestion systems lagging (minor)
- 2026-10-13: [Amplitude](https://thirdpartyindex.com/vendors/amplitude#status), which Trellix lists as a subprocessor, reported Degraded Performance- Funnel charts renders as white text on a white/near-white background in light theme (no impact stated)

## Recent changes

Changes to its documents and subprocessor list since monitoring began.

- 2026-10-03: Changed registry listing: fedramp:F1512017637 ([evidence](https://thirdpartyindex.com/evidence/40338))

Feed: https://thirdpartyindex.com/vendors/trellix/changes.atom

The subprocessor list as we read it on any date: https://thirdpartyindex.com/labs/time-machine/trellix

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api
