WatchGuard Sub-Processors
Last Updated: 13 July 2022
To provide services, WatchGuard uses various sub-processors as listed below.
A sub-processor is a third party or WatchGuard affiliate who (1) is utilized by WatchGuard in the provision of its Services to WatchGuard customers, (2) has or potentially can have access to customer personal data, and (3) is processing such data on WatchGuard’s behalf, where WatchGuard is acting as a processor per customers’ (controllers’) instructions.
For WatchGuard Services:
| Sub-Processor | Description of processing | Location of Processing |
|---|---|---|
|
Amazon Web Services, Inc. |
Storage, diagnostics, and operations. |
United States, Japan, Germany |
|
Mailgun Technologies, Inc. |
Email sending service for WatchGuard Cloud. |
United States or European Union countries based on WatchGuard Cloud Region |
|
Cyren Ltd. |
Anti-spam service for legacy Fireboxes. |
United States |
|
Proofpoint, Inc. |
Anti-spam service for Fireboxes (spamBlocker). |
United States |
|
Lastline, Inc. |
Cloud sandboxing for file inspection used for Fireboxes (APT Blocker). |
United States, Netherlands |
|
Forcepoint, LLC |
Cloud-based URL categorization (WebBlocker). The Firebox’s IP address is visible to Forcepoint as the sender of the URL to be categorized. |
United States, Ireland |
|
84codes AB, dba CloudAMQP |
Storage, diagnostics, and operations for DNSWatch. |
Sweden |
|
MongoDB, Inc. |
Hosted data storage mechanism for DNSWatch. VAR operating in AWS. Customer data flowing through. |
United States |
|
Papertrail, Inc. |
Monitoring and cloud-based log management for DNSWatch. |
United States |
|
Datadog, Inc. |
Monitoring, logging, alerting, operations for DNSWatch and TDR. |
United States |
|
Google LLC (Google Workspace, formerly G-Suite) |
Ticketing and email hosting for DNSWatch. |
United States |
|
Functional Software, Inc. dba Sentry |
Error monitoring for DNSWatch. Server-side data scrubbing is enabled. |
United States |
|
Groove Networks, LLC dba Groove |
Cloud-based helpdesk software used to provide support ticketing system for suspicious events in DNSWatch. |
United States |
|
Arista Networks, Inc. |
Support for WatchGuard Access Points and Wi-Fi Cloud. |
AWS (United States, Japan, Germany) |
|
Salesforce, Inc. |
Customer service management and communications. |
United States |
|
Snowflake Inc. |
Cloud data warehouse that stores data from various WatchGuard systems, such as Salesforce, WatchGuard ID, WatchGuard Cloud. |
United States |
|
Microsoft Corporation (Azure) |
Hosts certain WatchGuard applications (such as WatchGuard ID and licensing systems) that customers access. |
United States, Ireland |
For all Corporate and Dome (Customer) Endpoint Security Products:
| Sub-processor | Description of processing | Location of Processing | Affected Products |
|---|---|---|---|
|
Microsoft Corporation (Azure) |
Cloud infrastructure (hosts certain applications). |
Ireland, United States, Germany, and Japan |
All Corporate Endpoint Security Products, Dome |
|
Salesforce |
Support ticketing, customer service management and communications. |
United States |
All Corporate Endpoint Security products |
|
Amazon Web Services (AWS) |
Diagnostics and operations (malware knowledge delivery from cloud instances); cloud infrastructure for WGC services. |
United States |
EP, EPP, AD, AD360, Dome |
|
Akamai Technologies |
CDN services. |
United States headquartered. Servers by region |
EP, EPP, AD, AD360, Dome |
|
Cyren |
URL classification and malware and phishing detection |
United States headquartered. Servers by region |
EP, EPP, AD360, Dome |
|
Forcepoint International Technology |
URL classification and malware and phishing detection. |
United Kingdom and Ireland |
EP, EPP, AD360, Dome |
|
Ivanti Software |
Patch catalog to provide Patch Management discovery and remediation. |
United States |
Patch Management, Dome |
|
Devo |
Storage and analytics platform for analyzing the raw telemetry. |
Ireland, Spain and United States |
ART, DataControl |
|
Ártica |
Remote Shell for Orion platform. |
United States headquartered. Servers by region: United States, Canada, Spain and France |
Orion |
|
Apple |
MDM (Mobile Device Management) functionality for iOS. |
United States headquartered. Servers by region |
EP, EPP, AD360 |
|
Google (Google Cloud) |
Push notifications for Android. |
United States headquartered. Servers by region |
EP, EPP, AD360, Dome |
|
Intego |
MacOS protection agent. |
United States headquartered. Servers by region |
EP, EPP, AD360 |
|
Hornetsecurity |
Email filtering solution. |
Servers by region: United States, United Kingdom, and European Union countries |
|
|
Datto |
RMM (Remote Management and Monitoring) product. |
Ireland |
PCSM |
|
Opstalent |
Customer service management and communications. |
Poland |
All Corporate Endpoint Security products |
|
Anytech365 |
Customer service management and communications. |
Spain |
Dome |
|
Saferpass |
Password Manager. |
Germany (AWS) |
Dome |
|
Adobe |
Marketing Platform. |
United States |
Dome |
|
Aura (Previously Pango, Anchorfree) |
Personal VPN for Consumer products. |
United States |
Dome |
To be notified when WatchGuard adds new sub-processors, please subscribe to the RSS feed. You will need to copy and paste the RSS Feed URL below into an RSS Feed Reader to monitor updates.
https://www.watchguard.com/wgrd-trust-center/gdpr-dpa-subprocessors/feed
This page will be updated at least 10 days before WatchGuard engages a new sub-processor. WatchGuard customers may object in writing to WatchGuard's appointment of a new sub-processor by sending an objection notice to [email protected] within 5 calendar days of receipt of WatchGuard's update. Such notice shall explain the reasonable grounds for the objection.