Subprocessors

Entity Name

Location of Processing

Data Processed & Purpose of Processing

Amplitude, Inc.

Hosted in the U.S. May be accessed globally by Snyk employees.

Snyk uses Amplitude to obtain usage analytics in relation to its products and services. To compile these analytics, Amplitude may access personal data relating to a user’s use of Snyk’s services, their features and functionality. Snyk uses these analytics to optimize and improve its offerings.

Akamai Technologies Limited and its affiliates

The nature of the Akamai solution, for optimizing traffic management, means that Akamai processes Snyk’s customer data from the region closest to where the user is located.

SnykContent Delivery Network provider - Snyk uses the CDN for managing user traffic on its products and services. Developer personal data may be included in the short term data cache for this service.

Amazon Web Services, Inc. and Amazon Web Services EMEA SARL

Data can be hosted in the U.S., EU or Australia at Customer’s election. May be accessed globally by Snyk employees.

SaaS Services hosting provider serving as the backbone of our infrastructure for several of our products and Services. AWS may have access to all Customer Data. However, as a general principle, AWS will not access any Customer instances of the Snyk Services except in limited cases such as to investigate service issues.

Okta, Inc. (Auth0)

Hosted in the U.S, EU or Australia at Customer’s election. May be accessed globally by Snyk employees.

Auth0 serves as an identity provider which is used to authenticate users of Snyk’s services. To perform this authentication, Auth0 will have access to personal data of the users.

Confluent, Inc.

Hosted in the U.S. May be accessed globally by Snyk employees.

Snyk uses Confluent, a data pipeline service, for real-time communication and data streaming between systems that compose the Services. Confluent keeps disparate data sources at Snyk in sync.

CrowdStrike, Inc.

Hosted in the US or EU (Frankfurt, Germany). May be accessed globally by Snyk employees.

CrowdStrike provides cybersecurity services to Snyk, including threat intelligence and endpoint protection, to safeguard Snyk's digital infrastructure, products and services. Processing of developer personal data is not its primary purpose, but may occur incidentally as part of the services.

Datadog, Inc.

Hosted in the U.S. May be accessed globally by Snyk employees.

Datadog provides application monitoring and logging services for the Snyk products and services. Processing of developer personal data is not its primary purpose, but may occur incidentally as part of the services.

DBT Labs, Inc.

Hosted in the U.S. May be accessed globally by Snyk employees.

DBT is a transformation tool used to configure data, which may include developer personal data, stored in Snowflake. DBT serves as a tool to provide meaningful insights on our products and services.

Functional Software, Inc. (Sentry)

Hosted in the U.S. May be accessed globally by Snyk employees.

Sentry is a debugging and support tool used by Snyk to collect automated error reports relating to users of Snyk’s services. This allows Snyk to obtain details about these errors and to resolve them more efficiently. Processing of developer personal data is not its primary purpose, but may occur incidentally as part of the services.

Google Cloud Platform

Hosted in the U.S. May be accessed globally by Snyk employees.

SaaS Services hosting provider serving as the backbone of our infrastructure for several of our products and Services. GCP may have access to all Customer Data. However, as a general principle, GCP will not access any Customer instances of the Snyk Services except in limited cases such as to investigate service issues.

Google Workspace

Hosted in the U.S. May be accessed globally by Snyk employees.

Communication tool for all employees within the organization. Gmail, a part of Google Workspace, offers a user-friendly interface and robust features that enhance productivity, collaboration, and information sharing among team members. Overall, Gmail serves as our organization’s primary internal email subprocessor, fostering efficient communication and collaboration while maintaining a high level of security and data privacy. Snyk also uses Google Drive and other products in the Workspace suite to facilitate collaboration and information sharing internally and with customers.

Looker

Hosted in the EU. May be accessed globally by Snyk employees.

Looker is a modern data platform that enables Snyk to explore, analyze, and visualize data. It streamlines data-driven decision-making by providing insights across various departments. In Looker, Snyk creates dashboards, making it easier to understand complex datasets, discover trends and support day-to-day operation of our products and services. Personal data may be an input into Looker via Snowflake and DBT.

MongoDB Ltd.

Data can be hosted in the U.S., EU or Australia depending on Customer’s selection with respect to Customer’s hosting location.

Snyk’s products and services rely on MongoDB’s Atlas tool to efficiently manage and store diverse data types as part of our data processing pipeline. MongoDB plays a crucial role in enabling seamless data storage, retrieval, and manipulation, contributing to our ability to handle high volumes of data with ease.

Shoreline Labs, Inc. (d/b/a Nightfall)

Hosted in the U.S. May be accessed globally by Snyk employees.

Nightfall is a data security and compliance platform that helps detect and protect sensitive data (including Personal Data). It is integrated with various internal tools used by Snyk, for example, Slack, and scans these tools to detect if sensitive data is shared within them. If any such data is detected, an alert will be generated, which could contain Personal Data.

Orca Security UK Ltd

Hosted in the EU. May be accessed globally by Snyk employees.

Orca is a Cloud Security Posture Management tool that facilitates Snyk’s managing and monitoring of its cloud assets which host and process Customer Data.

Salesforce.com, Inc.

Hosted in the U.S. May be accessed globally by Snyk employees.

Customer Relationship Management System - Salesforce will process all personal data listed on Schedule 1 of the DPA. Salesforce allows Snyk to manage all of our customer relationships and engagements as a central repository and source of truth. Details such as the products and services customers have purchased, Snyk’s engagement with customers and key points of contact are all managed in Salesforce. Snyk also uses Salesforce to operate its service desk and as its ticketing provider for professional and technical support. Customer details are requested as part of creating and handling a ticket.

Slack Technologies Limited

Slack services are hosted in the United States, but processing may occur globally wherever Snyk users access the services.

Slack is one of Snyk’s key internal communications systems. Snyk team members use Slack to facilitate service provision and provide customer support expeditiously. Team members may include Customer Data and personal data in internal conversations to optimize service provision.

Snowflake, Inc.

As embedded in the Snyk Services, data can be hosted in the U.S., EU or Australia depending on Customer’s selection with respect to Customer’s hosting location. May be accessed globally by Snyk employees.

As used by Snyk for business intelligence and analytics purposes, data is hosted in the U.S., and may be accessed globally by Snyk employees.

Snowflake is our data warehouse where we host data to facilitate business intelligence and analytics. Personal data is hosted within Snowflake for the purposes of providing and optimizing the Snyk products and services.

Sublime, Security Inc.

Hosted in the EU. May be accessed globally by Snyk employees.

Sublime Security provides email security solutions to Snyk. It conducts security scans of emails transmitted to Snyk’s Gmail accounts to detect and flag potentially dangerous emails. If customer data or personal data is transmitted to Snyk in any such emails, Sublime Security may scan that data.  

Twilio Ireland Limited (Segment.io)

Hosted in the U.S. May be accessed globally by Snyk employees.

Segment facilitates managing customer data, enabling Snyk to collect, centralize, and unify data from various system inputs. As a customer data platform, Segment plays an instrumental role in enhancing our understanding of customer behavior.

Entity Name

Location of Processing

Data Processed & Purpose of Processing

Snyk France SAS

France

Snyk affiliate that employs technical support, product and engineering personnel. Personnel employed by this affiliate may be involved in providing technical support and improving or building the Snyk products and services.

Snyk Switzerland AG

Switzerland

Snyk affiliate that employs technical support, product and engineering personnel. Personnel employed by this affiliate may be involved in providing technical support and improving or building the Snyk products and services.

Snyk Software Bucharest SRO

Romania

Snyk affiliate that employs technical support, product and engineering personnel. Personnel employed by this affiliate may be involved in providing technical support and improving or building the Snyk products and services.

Snyk Australia PTY Ltd.

Australia

Snyk affiliate that employs technical support, product and engineering personnel. Personnel employed by this affiliate may be involved in providing technical support and improving or building the Snyk products and services.

Snyk Canada, Inc.

Canada

Snyk affiliate that employs technical support, product and engineering personnel. Personnel employed by this affiliate may be involved in providing technical support and improving or building the Snyk products and services.

Snyk Finland OY

Finland

Snyk affiliate that employs technical support, product and engineering personnel. Personnel employed by this affiliate may be involved in providing technical support and improving or building the Snyk products and services.

Snyk Germany GmbH

Germany

Snyk affiliate that employs technical support, product and engineering personnel. Personnel employed by this affiliate may be involved in providing technical support and improving or building the Snyk products and services.

Snyk, Inc.

USA

Snyk affiliate that employs technical support, product and engineering personnel. Personnel employed by this affiliate may be involved in providing technical support and improving or building the Snyk products and services.

Snyk Israel Limited

Israel

Snyk affiliate that employs technical support, product and engineering personnel. Personnel employed by this affiliate may be involved in providing technical support and improving or building the Snyk products and services.

Snyk Japan K.K.

Japan

Snyk affiliate that employs technical support, product and engineering personnel. Personnel employed by this affiliate may be involved in providing technical support and improving or building the Snyk products and services.

Snyk Limited

UK

Snyk affiliate that employs technical support, product and engineering personnel. Personnel employed by this affiliate may be involved in providing technical support and improving or building the Snyk products and services.

Snyk Portugal, Unipessoal Lda.

Portugal

Snyk affiliate that employs technical support, product and engineering personnel. Personnel employed by this affiliate may be involved in providing technical support and improving or building the Snyk products and services.

Snyk Singapore PTE. LTD.

Singapore

Snyk affiliate that employs technical support, product and engineering personnel. Personnel employed by this affiliate may be involved in providing technical support and improving or building the Snyk products and services.

Snyk Sweden AB

Sweden

Snyk affiliate that employs technical support, product and engineering personnel. Personnel employed by this affiliate may be involved in providing technical support and improving or building the Snyk products and services.