Data Supplement

Effective: January 2024

For a list of ForgeRock sub-processors, please click here.

OPERATIONAL SUB-PROCESSORS: INFRASTRUCTURE, MONITORING & SECURITY

Customer tenant data processed in the ordinary course of production operations

Sub-processor

Description of processing

Location(s) of data centers

Data processed for non-US customers?

Data stored outside EU/UK?

Amazon Web Services (AWS)

Data center providing infrastructure-as-a-service.
Customers select the region(s) of data residency offered by Ping Identity.

United States, Germany, Ireland, Australia, Canada

Aligns with regions selected

Amazon Web Services (AWS)

Email notification services for customers.
Customers select the region(s) of data residency offered by Ping Identity.

United States, Germany, Ireland, Australia

Aligns with regions selected

Cloudflare

Cloudflare provides a content delivery network and distributed DOS attack prevention services, and offers security and performance benefits to all Ping cloud customers.
Customers cannot select the region where data is processed.

United States and
Belgium

Google

Corporate email and documentation.
Email correspondence and documents may contain customer data.

United States

New Relic

Application performance management.
Performance metrics for customer tenants.

United States

Splunk

Operational logs and business analytics.
Customer data is logged for event monitoring and troubleshooting purposes and is retained in the region of residency.

United States, Germany, Australia, Canada.

Aligns with AWS regions selected

SumoLogic

Security log and event management; security analytics.
Customer data is logged for security monitoring and troubleshooting purposes.

United States

OPERATIONAL SUB-PROCESSORS: CUSTOMER SUPPORT & INCIDENT RESPONSE

Customer data processed only in the context of a customer support case or security incident

Sub-processor

Description of processing

Location(s) of data centers

Data processed for non-US customers?

Data stored outside EU/UK?

Appfire

Salesforce-to-Jira integration.
Securely automates transfer of support ticket data from Salesforce to Jira.

United States

Atlassian Cloud

Documentation and issue tracking.
Customer documentation and data related to support cases may be stored in Atlassian Cloud.

United States

Box

Storage and transfer of log files for customer support.
Generally applicable when a customer files a support case and attaches customer data to the ticket (e.g., attachments, log files).

United States

Code42

Backup of customer support endpoints.
Backup of customer support endpoints. Customer data related to support cases may be processed on endpoints in use by customer support personnel. All data is encrypted and the encryption key is controlled by Ping.

United States

Crowdstrike

Incident response.
Crowdstrike might have access to customer data in the event of a security incident.

United States

OwnBackup

Cloud backup of Salesforce data.
When customers file a support case in Salesforce, that data will be backed up periodically.

United States

Salesforce

Service cloud that facilitates the customer support ticketing process.
Customer data related to support cases may be stored in Salesforce.

United States

SupportLogic

Customer support case management
Used to increase productivity and improve backlog management for the global customer support team.

United States

PRODUCT-SPECIFIC SUB-PROCESSORS

Sub-processor

Purpose of Processing

Location(s) of data centers

Data processed for non-US customers?

Data stored outside EU/UK?

Product-specific sub-processor

Amazon Web Services (AWS)

Data center providing infrastructure-as-a-service, and email notification services for customers
Customers select the region(s) of data residency.

United States, Germany, Ireland, Australia, Canada, Sinagpore

Aligns with regions selected

PingOne Advanced Services may be deployed in other countries upon mutual agreement.

Amazon Web Services (AWS)

Rekognition image verification
Data is stored in region(s) selected by customer for PingOne tenant.

United States, Germany, Ireland, Australia

Aligns with regions selected

PingOne Verify service only, when selected by customer.

Mitek Systems

Document verification and image verification

United States, Ireland

PingOne Verify service only, when selected by customer.

MongoDB/AtlasDB

Storage and processing of flow configuration, logging and analytics, reporting, and attack detection data

United States

PingOne API Intelligence only.

Twilio

Secure SMS OTP and voice authentication

United States

PingID, PingOne MFA and PingOne Neo and Verify, when customer utilizes secure SMS service.

UberEther

FedRAMP infrastructure

United States

N/A

US FedRAMP customers only.

Veriff

Identification document verification

United States, Ireland

Aligns with regions selected

PingOne Verify service only, when selected by customer.

Vonage

Secure SMS authentication

United States

PingID and PingOne MFA, when customer utilizes secure SMS service.

AFFILIATE SUB-PROCESSORS

Data processed for all customers, including non-US customers

Entity name

Purpose of Processing

Location(s)

Ping Identity India Private Limited

Support and Operations

India

Ping Identity Australia Pty Ltd

Support and Operations

Australia

Ping Identity Canada Inc

Support and Operations

Canada

Ping Identity France

Support and Operations

France

Ping Identity Israel Ltd.,

Support and Operations

Israel

Ping Identity UK Limited

Support and Operations

United Kingdom, Germany

Ping Identity Singapore Pte. Ltd.

Support and Operations

Singapore