Trust Center

WatchGuard Sub-Processors

Last Updated: 30 April 2024

To provide services, WatchGuard uses various sub-processors as listed below.

A sub-processor is a third party or WatchGuard affiliate who (1) is utilized by WatchGuard in the provision of its Services to WatchGuard customers, (2) has or potentially can have access to customer personal data, and (3) is processing such data on WatchGuard’s behalf, where WatchGuard is acting as a processor per customers’ (controllers’) instructions.

For WatchGuard Services:

Sub-Processor Description of processing Location of Processing

Amazon Web Services, Inc.

Storage, diagnostics, and operations.

United States, Japan, Germany

Mailgun Technologies, Inc.

Email sending service for WatchGuard Cloud.

United States or European Union countries based on WatchGuard Cloud Region

Proofpoint, Inc.

Anti-spam service for Fireboxes (spamBlocker).

United States

Broadcom Inc. (Previously Lastline, VMware)

Cloud sandboxing for file inspection used for Fireboxes (APT Blocker).

United States, Netherlands

Bitdefender S.R.L.

Cloud sandboxing for file inspection used for Fireboxes (APT Blocker).

United States, Netherlands

Forcepoint, LLC

Cloud-based URL categorization (WebBlocker). The Firebox’s IP address is visible to Forcepoint as the sender of the URL to be categorized.

United States, Ireland

84codes AB, dba CloudAMQP

Storage, diagnostics, and operations for DNSWatch.

Sweden

MongoDB, Inc.

Hosted data storage mechanism for DNSWatch. VAR operating in AWS. Customer data flowing through.

United States

Papertrail, Inc.

Monitoring and cloud-based log management for DNSWatch.

United States

Google LLC (Google Workspace, formerly G-Suite)

Ticketing and email hosting for DNSWatch.

United States

Functional Software, Inc. dba Sentry

Error monitoring for DNSWatch. Server-side data scrubbing is enabled.

United States

Groove Networks, LLC dba Groove

Cloud-based helpdesk software used to provide support ticketing system for suspicious events in DNSWatch.

United States

Arista Networks, Inc.

Support for WatchGuard Access Points and Wi-Fi Cloud.

AWS (United States, Japan, Germany)

Salesforce, Inc.

Customer service management and communications.

United States

Snowflake Inc.

Cloud data warehouse that stores data from various WatchGuard systems, such as Salesforce, WatchGuard ID, WatchGuard Cloud.

United States

Microsoft Corporation (Azure)

Hosts certain WatchGuard applications (such as WatchGuard ID and licensing systems) that customers access.

United States, Ireland

F‑Secure Corporation

Password Manager included as a part of AuthPoint Total Identity Security solutions.

United States, Japan, Germany

Constella Intelligence, Inc.

Dark web credential monitoring service that checks whether email addresses appear in data breaches.

United States, Germany

R Systems International Ltd.

Engineering service that assists with Fireboxes troubleshooting.

India

Opstalent Spolka Z O.O. SP.K.

Customer service management and communications.

Poland

For all Corporate and Dome (Customer) Endpoint Security Products:

Sub-processor Description of processing Location of Processing Affected Products

Microsoft Corporation (Azure)

Cloud infrastructure (hosts certain applications).

Ireland, United States, Germany, and Japan

All Corporate Endpoint Security Products, Dome

Salesforce, Inc.

Support ticketing, customer service management and communications.

United States

All Corporate Endpoint Security products

Amazon Web Services (AWS)

Diagnostics and operations (malware knowledge delivery from cloud instances); cloud infrastructure for WGC services.

United States

All Corporate Endpoint Security Products, Dome

Akamai Technologies, Inc.

CDN services.

United States headquartered. Servers by region

Corporate Endpoint Security Products, Dome

Forcepoint, LLC

URL classification and malware and phishing detection.

United Kingdom and Ireland

Corporate Endpoint Security Products, Dome

Ivanti UK Limited

Patch catalog to provide Patch Management discovery and remediation.

United States

Patch Management, Dome

Devo Inc.

Storage and analytics platform for analyzing the raw telemetry.

Ireland, Spain and United States

ART, Data Control

Ártica PFMS SLU

Remote Shell for Orion platform.

United States headquartered. Servers by region: United States, Canada, Spain and France

Orion

Apple

MDM (Mobile Device Management) functionality for iOS.

United States headquartered. Servers by region

Corporate Endpoint Security Products

Google (Google Cloud)

Push notifications for Android.

United States headquartered. Servers by region

Corporate Endpoint Security Products, Dome

Hornetsecurity GmbH

Email filtering solution.

Servers by region: United States, United Kingdom, and European Union countries

Email Protection

Kaseya US, LLC (Previously Datto, Inc.)

RMM (Remote Management and Monitoring) product.

Ireland

PCSM

Opstalent Spolka Z O.O. SP.K.

Customer service management and communications.

Poland

Corporate Endpoint Security Products

Anytech365

Customer service management and communications.

Spain

Dome

F‑Secure Corporation

Password Manager.

Germany (AWS)

Dome

Aura (Previously Pango, Anchorfree)

Personal VPN for Consumer products.

United States

Dome

Constella Intelligence, Inc.

Dark web credential monitoring service that checks whether email addresses appear in data breaches.

United States, Germany

Dome

To be notified when WatchGuard adds new sub-processors, please subscribe to the RSS feed. You will need to copy and paste the RSS Feed URL below into an RSS Feed Reader to monitor updates.

https://www.watchguard.com/wgrd-trust-center/gdpr-dpa-subprocessors/feed

This page will be updated at least 10 days before WatchGuard engages a new sub-processor. WatchGuard customers may object in writing to WatchGuard's appointment of a new sub-processor by sending an objection notice to [email protected] within 5 calendar days of receipt of WatchGuard's update. Such notice shall explain the reasonable grounds for the objection.