How to read this list
A subprocessor is a company we use to process personal data on behalf of our customers or website visitors. Every subprocessor is bound by a written agreement that imposes data protection obligations no less protective than ours. We inform customers with a data processing agreement at least 30 days before adding or replacing a subprocessor that processes their data.
This website
| Subprocessor | Purpose | Location | Transfer safeguard |
|---|---|---|---|
| Cloudflare, Inc. | Content delivery, hosting of the static site, relay of contact form submissions, protection from abuse, delivery of contact form submissions to our inbox | Global edge; EU points of presence for EU visitors | EU-US Data Privacy Framework certification; standard contractual clauses |
No analytics provider is in use at the time of this version. If one is added, it will appear here before it is enabled.
Hosted tenants and the managed service
| Subprocessor | Purpose | Location | Transfer safeguard |
|---|---|---|---|
| cyber_Folks S.A. | Infrastructure for hosted XenXDR tenants | European Union | Not applicable, data stays in the EU |
| Cloudflare, Inc. | DNS and TLS termination for tenant hostnames | Global edge | EU-US Data Privacy Framework certification; standard contractual clauses |
| Hosted model provider, only if configured by the customer | Advisory AI verdicts and summaries | As chosen by the customer | Agreed with the customer when configured; none by default |
By default a hosted tenant sends alert evidence to no external model provider. If a customer asks FluenceSecurity to configure a hosted model endpoint, the provider and its safeguards are added to the customer's DPA.
Threat intelligence and enrichment
When a customer enables enrichment, the Platform sends indicators such as IP addresses, domains and file hashes to the configured services. These indicators may in some cases be personal data. The services in the current release are VirusTotal (Google LLC, USA) and AbuseIPDB (Marathon Studios Inc., USA), both used under their published terms with standard contractual clauses where applicable. Enrichment is off until the customer configures it.
Changes
This page is updated whenever the list changes. The version and date at the top identify the current text.