# Varonis Varonis declares [9 subprocessors](https://thirdpartyindex.com/vendors/varonis#subprocessors), plus 9 of its own affiliates, in [its subprocessor list](https://www.varonis.com/hubfs/policies/subprocessors-list.pdf?hsLang=en), which we last checked on 2026-11-03 ([evidence](https://thirdpartyindex.com/evidence/11616)). They include [Microsoft](https://thirdpartyindex.com/vendors/microsoft), [Cloudflare](https://thirdpartyindex.com/vendors/cloudflare) and [Salesforce](https://thirdpartyindex.com/vendors/salesforce). Our recent checks could not read the list; these entries are as of 2026-11-03. [1 tracked vendor](https://thirdpartyindex.com/vendors/varonis#used-by), [Iron Mountain](https://thirdpartyindex.com/vendors/iron-mountain), names Varonis as a subprocessor. Varonis (varonis.com): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index. - Page: https://thirdpartyindex.com/vendors/varonis - Documents last verified: 2026-11-12 - Transparency rating: 52/100 (how much it publishes, not how secure it is): Subprocessor list 30/30; Processing locations 4/8 (partial); Purposes 7/7; Data processing addendum 0/12 (unreachable); Trust center 0/8 (unreachable); Privacy policy 6/6; security.txt 0/6 (not found); Security page 5/5; Status page 0/5 (not found); Vulnerability disclosure 0/5 (not found); Pages still reachable 0/8 (some unreachable this week) - Supply chain: relies on 5 tracked vendors directly, 60 within two hops, 259 within three; 1 tracked vendors rely on it directly, 8 within two hops, 50 within three - Cite as: Varonis, Third Party Index, https://thirdpartyindex.com/vendors/varonis (data CC BY 4.0) ## Documents | Document | URL | Last verified | Last changed | |---|---|---|---| | Trust center (currently unreachable) | https://www.varonis.com/trust | 2026-11-03 | 2026-10-17 | | Subprocessor list (currently unreachable) | https://www.varonis.com/hubfs/policies/subprocessors-list.pdf?hsLang=en | 2026-11-03 | 2026-09-28 | | Data processing addendum (currently unreachable) | https://www.varonis.com/hubfs/Website\_Reboot/Policies/Data%20Protection%20Addendum%20for%20SaaS%20Clients.pdf?hsLang=en | 2026-11-03 | 2026-09-28 | | Privacy policy | https://www.varonis.com/privacy-policy | 2026-11-12 | 2026-11-04 | | Terms | https://www.varonis.com/terms-of-use | 2026-11-12 | 2026-11-04 | | Security page | https://www.varonis.com/trust/security | 2026-11-12 | 2026-11-04 | ## Subprocessors (9) As its own list states them. | Subprocessor | Purpose | Location | Listed since | |---|---|---|---| | [Amazon](https://thirdpartyindex.com/vendors/amazon.md) | AWS - Cloud service provider SES - Communication application; Personal Data processed by Varonis as a result of customer’s use of the Subscription Services. | — | 2026-10-01 | | [auth0](https://thirdpartyindex.com/vendors/okta.md) | Email of customer’s personnel accessing the system; Identity Management AI Solution | US | 2026-10-01 | | ClickHouse DataDog Coralogix Imperva Box | Personal Data processed by Varonis as a result of customer’s use of the Subscription Services. Diagnostics logs, that may contain incidental Personal Data processed by Varonis as a result of customer’s use of the Subscription Services. Personal Data processed by Varonis as US a result of customer’s routed to EU use of the Subscription Services. Personal Data processed by Varonis as a result of customer’s initial choice use of the Subscription Services. \*Data in transit – no storage\* initial choice except for: Personal Data Australia processed by Varonis as routed to a result of customer’s use of the Subscription United Arab Services. to; Storing events Centralized platform for monitoring, visualizing, and alerting on data Centralized platform monitoring, visualizing, (DAC) and alerting on products, for Web Application Files from Varonis products, support, advanced for services etc. that logs that may contain | — | 2026-10-01 | | [Cloudflare](https://thirdpartyindex.com/vendors/cloudflare.md) | AI Web Application; Personal Data processed by Varonis as a result of customer’s customer’s use of the Subscription Varonis Services. \*Data in transit – no storage\* | Per location of Firewall user connecting to | 2026-10-01 | | [Microsoft](https://thirdpartyindex.com/vendors/microsoft.md) | Azure – Cloud service provider, DevOps App platforms (TFS/ADO) -Customer support management and collaboration Sentinel - Security information and event management; Personal Data processed by Varonis as a result of customer’s use of the Subscription Services. | — | 2026-10-01 | | Microsoft & Amazon | Personal Data processed by Varonis as a result of customer’s US use of the Subscription; based Gen AI processing and | US, EU Canada routed to | 2026-10-01 | | [Okta](https://thirdpartyindex.com/vendors/okta.md) | Email of customer’s personnel accessing the system; Identity Management products Solution | US | 2026-10-01 | | [Salesforce](https://thirdpartyindex.com/vendors/salesforce.md) | Email of customer’s personnel accessing the system; Support ticket management platform products (not including attached to tickets) | US files | 2026-10-01 | | Torq.IO SOAR | Alerts from Varonis US platform routed to EU; MDDR case Services management platform | — | 2026-10-01 | Read from ([evidence](https://thirdpartyindex.com/evidence/11616)). CSV: https://thirdpartyindex.com/vendors/varonis/subprocessors.csv ### Its own affiliates (9) - Varonis (UK) Limited (UK) - Varonis France SAS (France) - Varonis Singapore PTE Ltd. (Singapore) - Varonis Systems, Inc. (Canada; Germany; Ireland; Israel; The Netherlands and Belgium; USA) - Varonis Systems Australia Pty Ltd (Australia) - Varonis Systems Japan K.K (Japan) - Varonis Systems (India) Private Limited (India) - Varonis Systems (Luxemburg) S.à r.l. (Luxemburg) - Varonis Systems (Poland) sp. z o.o. (Poland) ## Compliance As its trust center lists them. - FedRAMP Marketplace: Moderate · 4 agency authorizations · since Jun 16, 2025 - FedRAMP Marketplace: Moderate · 6 agency authorizations · since May 14, 2025 ## Web Technologies Varonis's homepage made 144 requests to 10 domains, 4 services controlled by another company, and 1 domain not identified. Loaded on 2026-11-10 by a browser that accepted nothing; other visits may load more or less. What a page loads is not a list of who receives customer data. 4 third parties by category: Tag managers 1 (Google Cloud); JavaScript libraries 1 (Webflow); Page builders 1 (Finsweet (Consent Pro)); Video players 1 (Wistia). Each company that appears controlled by another organization is counted once, under the main category of the technologies detected from it on this homepage or, when none was, the category recorded from the company's own page (marked reviewed) or else the one it is usually detected as on other published homepages (marked as such); unclassified: none of these. ### Third parties (4) - Webflow: 116 requests to website-files.com, d3e54v103j8qbb.cloudfront.net; Webflow 1.6.0, jQuery 3.5.1 - Wistia: 14 requests to wistia.com, wistia.net; Wistia - Finsweet (Consent Pro): 3 requests to consentpro.com; Finsweet - Google Cloud: 3 requests to google.com, googlesyndication.com, googletagmanager.com; Google Tag Manager ### Unknown (1) Domains not identified yet: webflow-files-prod.global.ssl.fastly.net ### First party (1) - Varonis: 4 requests to varonis.com; Cloudflare, GSAP 3.15.0, HSTS, Imperva, Open Graph, Priority Hints, Three.js 160, Webpack 2 tracked companies loaded by the homepage are not in Varonis's subprocessor list. A website can use a service without it processing customer data. ## Subprocessor of (1) Tracked vendors whose own subprocessor lists name it, and what they say they use it for. - [Iron Mountain](https://thirdpartyindex.com/vendors/iron-mountain.md): IT & Operational Support ## Recent changes Changes to its documents and subprocessor list since monitoring began. - 2026-10-22: Changed registry listing: fedramp:FR2421252636 ([evidence](https://thirdpartyindex.com/evidence/141337)) - 2026-10-22: Changed registry listing: fedramp:FR2421252644 ([evidence](https://thirdpartyindex.com/evidence/141337)) Feed: https://thirdpartyindex.com/vendors/varonis/changes.atom The subprocessor list as we read it on any date: https://thirdpartyindex.com/labs/time-machine/varonis --- Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api