Data Supplement

Data Supplement

Effective: May 2023

OPERATIONAL SUB-PROCESSORS: INFRASTRUCTURE, MONITORING & SECURITY Customer tenant data processed in the ordinary course of production operations
Sub-processor	Description of processing	Location(s) of data centers	Data processed for non-US customers?	Data stored outside EU/UK?
Amazon Web Services (AWS)	Data center providing infrastructure-as-a-service. Customers select the region(s) of data residency offered by Ping Identity.	United States, Germany, Ireland, Australia, Canada		Aligns with regions selected
Amazon Web Services (AWS)	Email notification services for customers. Customers select the region(s) of data residency offered by Ping Identity.	United States, Germany, Ireland, Australia		Aligns with regions selected
Cloudflare	Cloudflare provides a content delivery network and distributed DOS attack prevention services, and offers security and performance benefits to all Ping cloud customers. Customers cannot select the region where data is processed.	United States and Belgium
Google	Corporate email and documentation. Email correspondence and documents may contain customer data.	United States
New Relic	Application performance management. Performance metrics for customer tenants.	United States
Splunk	Operational logs and business analytics. Customer data is logged for event monitoring and troubleshooting purposes and is retained in the region of residency.	United States, Germany, Australia, Canada.		Aligns with AWS regions selected
SumoLogic	Security log and event management; security analytics. Customer data is logged for security monitoring and troubleshooting purposes.	United States

OPERATIONAL SUB-PROCESSORS: CUSTOMER SUPPORT & INCIDENT RESPONSE Customer data processed only in the context of a customer support case or security incident
Sub-processor	Description of processing	Location(s) of data centers	Data processed for non-US customers?	Data stored outside EU/UK?
Atlassian Cloud	Documentation and issue tracking. Customer documentation and data related to support cases may be stored in Atlassian Cloud.	United States
Box	Storage and transfer of log files for customer support. Generally applicable when a customer files a support case and attaches customer data to the ticket (e.g., attachments, log files).	United States
Code42	Backup of customer support endpoints. Customer data related to support cases may be processed on endpoints in use by customer support personnel.	United States
Crowdstrike	Incident response. Crowdstrike might have access to customer data in the event of a security incident.	United States
OwnBackup	Cloud backup of Salesforce data. When customers file a support case in Salesforce, that data will be backed up periodically.	United States
Salesforce	Service cloud that facilitates the customer support ticketing process. Customer data related to support cases may be stored in Salesforce.	United States
SupportLogic	Customer support case management Used to increase productivity and improve backlog management for the global customer support team.	United States

PRODUCT-SPECIFIC SUB-PROCESSORS
Sub-processor	Purpose of Processing	Location(s) of data centers	Data processed for non-US customers?	Data stored outside EU/UK?	Product-specific sub-processor
Amazon Web Services (AWS)	Data center providing infrastructure-as-a-service, and email notification services for customers. Customers select the region(s) of data residency.	United States, Germany, Ireland, Australia, Canada, Sinagpore		Aligns with regions selected	PingOne Advanced Services may be deployed in other countries upon mutual agreement.
Amazon Web Services (AWS)	Rekognition image verification Data is stored in region(s) selected by customer for PingOne tenant.	United States, Germany, Ireland, Australia		Aligns with regions selected	PingOne Verify service only, when selected by customer.
Mitek Systems	Document verification and image verification	United States, Ireland			PingOne Verify service only, when selected by customer.
MongoDB/AtlasDB	Storage and processing of flow configuration, logging and analytics, reporting, and attack detection data	United States			PingOne API Intelligence only.
Twilio	Secure SMS and voice authentication	United States			PingID and PingOne MFA, when customer utilizes secure SMS service.
UberEther	FedRAMP infrastructure	United States	N/A	N/A	US FedRAMP customers only.
Versent	Infrastructure operations and development services	Versent does not have data centers			PingOne Advanced Services only.
Vonage	Secure SMS authentication	United States			PingID and PingOne MFA, when customer utilizes secure SMS service.

AFFILIATE SUB-PROCESSORS Data processed for all customers, including non-US customers
Entity name	Purpose of Processing	Location(s)
Elastic Beam (India) Private Limited	Support and Operations	India
Ping Identity Australia Pty Ltd	Support and Operations	Australia
Ping Identity Canada Inc	Support and Operations	Canada
Ping Identity France	Support and Operations	France
Ping Identity Israel Ltd.,	Support and Operations	Israel
Ping Identity UK Limited	Support and Operations	United Kingdom
Ping Identity Singapore Pte. Ltd.	Support and Operations	Singapore
LOCATIONS WHERE PING PERSONNEL PROVIDE SUPPORT Support engineers located in Australia, Canada, United Kingdom, France, Germany, Israel, India and the United States.