Authorized Sub-processors
Introduction
To support delivery of our Services, Drata may engage and use data processors with access to certain Customer Data (each, a "Subprocessor"). This page provides important information about the identity, location and role of each Subprocessor. Drata currently uses third party Subprocessors to provide infrastructure services, and to help us provide customer support and email notifications. Prior to engaging any third party Subprocessor, Drata performs diligence to evaluate their privacy, security and confidentiality practices, and executes an agreement implementing its applicable obligations.
Infrastructure Sub-processors:
Drata may use the following Subprocessors to host Customer Data or provide other infrastructure that helps with delivery of our Services:
Sub-Processor | Purpose | Data Location |
|---|---|---|
Amazon Web Services | Hosting & Infrastructure | United States, European Economic Area |
Cloudflare, Inc. | Content delivery network & WAF | United States |
Other Sub-processors:
Drata may use the following Subprocessors to perform other Service functions:
Sub-Processor | Purpose | Data Location |
|---|---|---|
Amplitude, Inc. | Product Analytics | United States |
Atrium | Sales Analytics | United States |
Catalyst | Customer Success Management Platform | United States |
Census | Reverse ETL | United States |
Courier | Product Notifications | United States |
Datadog, Inc. | Analytics on application and infrastructure logs for debugging, troubleshooting, auditing, and reporting | United States |
Fivetran | ETL Solution | United States |
Front | Unified Customer Messaging | United States |
Functional Software, Inc. | Client-side error tracking for debugging, troubleshooting, auditing, and reporting | United States |
Full Story, Inc. | Session Recording | United States |
GetDBT | Data Transformation and Modeling | United States |
Google, Inc. | Cloud-based Email Service Provider | United States |
HubSpot, Inc. | Marketing Platform | United States |
Intercom, Inc. | Cloud-based Customer Support Services | United States |
Launch Darkly | Feature Flag and Experimentation | United States |
Merge API Inc. | HRIS Integration Connector | United States |
MessageBird B.V. | Socket Communication Layer | United States |
Orca Security | Cloud Security | United States |
ProductBoard | Product feedback and prioritization | United States |
Salesforce, Inc. | Customer Relationship Management (CRM) System | United States |
Send Amply Inc. | Cloud-based Email Delivery Services | United States |
Shiny Planes, Inc. (DBA LaunchNotes) | Product Release Updates | United States |
Sigma Computing, Inc. | Data Analytics & Visualization | United States |
Slack Technologies | Cloud-based Team Chat Services | United States |
Snowflake, Inc. | Data Warehouse | United States |
SurveySparrow | Net Promoter Score | United States |
Twilio, Inc. | Segment: Cloud-based CDP tool | United States |
TYPEFORM SL | Embedded Forms | United States & Germany |
Wiz | Cloud Security Scanning | United States |
WorkOS, Inc. | SSO Integration Connector | United States |
Zapier Inc. | Automation Workflow | United States |
Updates
As our business grows and evolves, the Sub-processors we engage may also change. We will endeavor to provide the owner of Customer's account with notice of any new Subprocessors to the extent required under the Agreement, along with posting such updates here. Please check back frequently for updates.
