WatchGuard Sub-Processors
Last Updated: 14 August 2024
To provide services, WatchGuard uses various sub-processors as listed below.
A sub-processor is a third party or WatchGuard affiliate who (1) is utilized by WatchGuard in the provision of its Services to WatchGuard customers, (2) has or potentially can have access to customer personal data, and (3) is processing such data on WatchGuard’s behalf, where WatchGuard is acting as a processor per customers’ (controllers’) instructions.
For WatchGuard Services:
| Sub-Processor | Description of processing | Location of Processing |
|---|---|---|
|
Amazon Web Services, Inc. |
Storage, diagnostics, and operations. |
United States, Japan, Germany |
|
Mailgun Technologies, Inc. |
Email sending service for WatchGuard Cloud. |
United States or European Union countries based on WatchGuard Cloud Region |
|
Proofpoint, Inc. |
Anti-spam service for Fireboxes (spamBlocker). |
United States |
|
Broadcom Inc. (Previously Lastline, VMware) |
Cloud sandboxing for file inspection used for Fireboxes (APT Blocker). |
United States, Netherlands |
|
Bitdefender S.R.L. |
Cloud sandboxing for file inspection used for Fireboxes (APT Blocker). |
United States, Netherlands |
|
Forcepoint, LLC |
Cloud-based URL categorization (WebBlocker). The Firebox’s IP address is visible to Forcepoint as the sender of the URL to be categorized. |
United States, Ireland |
|
84codes AB, dba CloudAMQP |
Storage, diagnostics, and operations for DNSWatch. |
Sweden |
|
MongoDB, Inc. |
Hosted data storage mechanism for DNSWatch. VAR operating in AWS. Customer data flowing through. |
United States |
|
Papertrail, Inc. |
Monitoring and cloud-based log management for DNSWatch. |
United States |
|
Google LLC (Google Workspace, formerly G-Suite) |
Ticketing and email hosting for DNSWatch. |
United States |
|
Functional Software, Inc. dba Sentry |
Error monitoring for DNSWatch. Server-side data scrubbing is enabled. |
United States |
|
Groove Networks, LLC dba Groove |
Cloud-based helpdesk software used to provide support ticketing system for suspicious events in DNSWatch. |
United States |
|
Arista Networks, Inc. |
Support for WatchGuard Access Points and Wi-Fi Cloud. |
AWS (United States, Japan, Germany) |
|
Salesforce, Inc. |
Customer service management and communications. |
United States |
|
Snowflake Inc. |
Cloud data warehouse that stores data from various WatchGuard systems, such as Salesforce, WatchGuard ID, WatchGuard Cloud. |
United States |
|
Microsoft Corporation (Azure) |
Hosts certain WatchGuard applications (such as WatchGuard ID and licensing systems) that customers access. |
United States, Ireland |
|
F‑Secure Corporation |
Password Manager included as a part of AuthPoint Total Identity Security solutions. |
United States, Japan, Germany |
|
Constella Intelligence, Inc. |
Dark web credential monitoring service that checks whether email addresses appear in data breaches. |
United States, Germany |
|
R Systems International Ltd. |
Engineering service that assists with Fireboxes troubleshooting. |
India |
|
Opstalent Spolka Z O.O. SP.K. |
Customer service management and communications. |
Poland |
For all Corporate and Dome (Customer) Endpoint Security Products:
| Sub-processor | Description of processing | Location of Processing | Affected Products |
|---|---|---|---|
|
Microsoft Corporation (Azure) |
Cloud infrastructure (hosts certain applications). |
Ireland, United States, Germany, and Japan |
All Corporate Endpoint Security Products, Dome |
|
Salesforce, Inc. |
Support ticketing, customer service management and communications. |
United States |
All Corporate Endpoint Security products |
|
Amazon Web Services (AWS) |
Diagnostics and operations (malware knowledge delivery from cloud instances); cloud infrastructure for WGC services. |
United States |
All Corporate Endpoint Security Products, Dome |
|
Akamai Technologies, Inc. |
CDN services. |
United States headquartered. Servers by region |
Corporate Endpoint Security Products, Dome |
|
Forcepoint, LLC |
URL classification and malware and phishing detection. |
United Kingdom and Ireland |
Corporate Endpoint Security Products, Dome |
|
Ivanti UK Limited |
Patch catalog to provide Patch Management discovery and remediation. |
United States |
Patch Management, Dome |
|
Devo Inc. |
Storage and analytics platform for analyzing the raw telemetry. |
Ireland, Spain and United States |
ART, Data Control |
|
Ártica PFMS SLU |
Remote Shell for Orion platform. |
United States headquartered. Servers by region: United States, Canada, Spain and France |
Orion |
|
Apple |
MDM (Mobile Device Management) functionality for iOS. |
United States headquartered. Servers by region |
Corporate Endpoint Security Products |
|
Google (Google Cloud) |
Push notifications for Android. |
United States headquartered. Servers by region |
Corporate Endpoint Security Products, Dome |
|
Hornetsecurity GmbH |
Email filtering solution. |
Servers by region: United States, United Kingdom, and European Union countries |
Email Protection |
|
Kaseya US, LLC (Previously Datto, Inc.) |
RMM (Remote Management and Monitoring) product. |
Ireland |
PCSM |
|
Opstalent Spolka Z O.O. SP.K. |
Customer service management and communications. |
Poland |
Corporate Endpoint Security Products |
|
Anytech365 |
Customer service management and communications. |
Spain |
Dome |
|
F‑Secure Corporation |
Password Manager. |
Germany (AWS) |
Dome |
|
Aura (Previously Pango, Anchorfree) |
Personal VPN for Consumer products. |
United States |
Dome |
|
Constella Intelligence, Inc. |
Dark web credential monitoring service that checks whether email addresses appear in data breaches. |
United States, Germany |
Dome |
WatchGuard may use one or more WatchGuard affiliates as sub-processors to provide products and services. The affiliates used may depend on where you and your users are located.
This page will be updated at least 10 days before WatchGuard engages a new sub-processor. WatchGuard customers may object in writing to WatchGuard's appointment of a new sub-processor by sending an objection notice to [email protected] within 5 calendar days of receipt of WatchGuard's update. Such notice shall explain the reasonable grounds for the objection.
To be notified when WatchGuard adds new sub-processors, please subscribe to the RSS feed.