A list of Sub-processors currently authorized by Okta, Inc. (“Okta”) to process Personal Data (as defined in Okta’s Data Processing Addendum, which is published at https://www.okta.com/trustandcompliance/) on behalf of Customer and assist Okta with respect to the provision of the applicable Service under the Okta Master Subscription Agreement which is published at https://www.okta.com/agreements/ (the “Agreement”) is set out below. All capitalized terms not defined herein shall have the meaning set forth in the Agreement.
The following Sub-processors are authorized by Okta to process Personal Data and assist Okta with respect to Workforce Identity Cloud subscriptions:
Sub-processor Entity | Brief Description of Processing | Locations of Data Center(s) |
|---|---|---|
Amazon Web Services, Inc. | Hosting and cloud infrastructure | Standard Service – USA EU Cell – Germany, Ireland APAC Cell – Singapore, Australia Japan Cell – Japan |
Splunk, Inc. | A partial Service failure or mild degradation. Customer is able to access some but not all business resources. | Standard Service – USA APAC Cell -- USA Japan Cell – USA EU Cell – Germany, Ireland, United Kingdom |
Salesforce.com, Inc. | Support and maintenance ticketing process | USA |
Twilio, Inc. | SMS authenticator | USA |
S.C. Computer Generated Solutions Romania S.R.L., a subsidiary of Computer Generated Solutions, Inc. (USA) | 24x7 customer support team | No data centers; CGS may access the data center(s) Okta utilizes for Amazon Web Services and salesforce.com while providing support. Support team is located in Romania |
SendGrid, Inc. | Email notifications and email access request inbox | USA |
TeleSign Corporation | SMS authenticator | USA, Netherlands |
Snowflake Computing, Inc. | Data warehouse services | USA, Germany, Australia |
In addition to the Sub-processors in the Workforce Identity Cloud table, the following Sub-processors are authorized by Okta to process Personal Data on behalf of Customer and assist Okta with respect to the provision of Access Governance subscriptions, which is made available to Customer as part of (1) Okta Identity Governance subscriptions; and (2) if enabled by Customer, the Governance for Okta Admin Roles feature within Workforce Identity Cloud subscriptions:
Sub-processor Entity | Brief Description of Processing | Locations of Data Center(s) |
|---|---|---|
Google, Inc. | Hosting and cloud infrastructure | Standard Service - USA EU Cell – Germany, Belgium APAC Cell – Australia, Singapore Japan Cell – Japan |
MongoDB, Inc. | Hosting and cloud infrastructure | Standard Service – USA EU Cell – Germany, Belgium, Netherlands APAC Cell – Australia, Singapore Japan Cell – Japan |
DataDog, Inc. | Business analytics | Standard Service - USA APAC Cell – USA Japan Cell – USA EU Cell - Germany |
In addition to the Sub-processors set forth in the Workforce Identity Cloud table, the following Sub-processors are authorized by Okta to process Personal Data on behalf of Customer and assist Okta with respect to Advanced Server Access subscriptions:
Sub-processor Entity | Brief Description of Processing | Locations of Data Center(s) |
|---|---|---|
DataDog, Inc. | Business analytics | USA |
In addition to the Sub-processors in the Workforce Identity Cloud table, the following Sub-processors are authorized by Okta to process Personal Data on behalf of Customer and assist Okta with respect to Okta Privileged Access subscriptions:
Sub-processor Entity | Brief Description of Processing | Locations of Data Center(s) |
|---|---|---|
Google, Inc. | Hosting and cloud infrastructure | Standard Service - USA EU Cell – Germany, Belgium APAC Cell – Australia, Singapore Japan Cell – Japan |
MongoDB, Inc. | Hosting and cloud infrastructure | Standard Service – USA EU Cell – Germany, Belgium, Netherlands APAC Cell – Australia, Singapore Japan Cell – Japan |
DataDog, Inc. | Business analytics | Standard Service - USA APAC Cell – USA Japan Cell – USA EU Cell - Germany |
In place of the Sub-processors in the Workforce Identity Cloud table, the following Sub-processors are authorized by Okta to process Personal Data and assist Okta with respect to Okta for Government Moderate subscriptions:
Sub-processor Entity | Brief Description of Processing | Locations of Data Center(s) |
|---|---|---|
Amazon Web Services, Inc. | Hosting and cloud infrastructure | USA |
salesforce.com, inc. | Support and maintenance ticketing process | USA |
Twilio, Inc. | SMS authenticator | USA |
SendGrid, Inc. | Email notifications | USA |
TeleSign Corporation | SMS authenticator | USA |
Snowflake Computing, Inc. | Data warehouse services | USA, Germany, Australia |
S.C. Computer Generated Solutions Romania S.R.L., a subsidiary of Computer Generated Solutions, Inc. (USA) | Customer support (Note that CGS does not provide support for the Government Moderate services, but may have access to the data entered into support tickets located in salesforce.com) | No data centers. Support team is located in Romania. |
In place of the Sub-processors in the Workforce Identity Cloud table, the following Sub-processors are authorized by Okta to process Personal Data and assist Okta with respect to Okta for Government High and Okta US Military subscriptions:
Sub-processor Entity | Brief Description of Processing | Locations of Data Center(s) |
|---|---|---|
Amazon Web Services, Inc. | Hosting and cloud infrastructure | USA |
salesforce.com, inc. | Support and maintenance ticketing process | USA |
Snowflake Computing, Inc. | Data warehouse services | USA |
In addition to the Sub-processors in the Workforce Identity Cloud table, the following Sub-processor(s) are authorized by Okta to process Personal Data and assist Okta with respect to Okta’s provision of the Workforce Identity Cloud Service Log Investigator feature that leverages generative artificial intelligence:
Sub-processor Entity | Brief Description of Processing | Locations of Data Center(s) |
|---|---|---|
Google Inc. | Non-training generative artificial intelligence services | USA |
The following Sub-processors are authorized by Okta to process Personal Data and assist Okta with respect to Identity Security Posture Management subscriptions:
Sub-processor Entity | Brief Description of Processing | Locations of Data Center(s) |
|---|---|---|
Amazon Web Services, Inc. | Hosting and cloud infrastructure | USA |
MongoDB, Inc | Data warehouse services | USA |
Snowflake Computing Netherlands B.V | Data warehouse services | USA |
Splunk, Inc. | Business analytics | USA |
salesforce.com, inc. | Support and maintenance ticketing process | USA |
S.C. Computer Generated Solutions Romania S.R.L., a subsidiary of Computer Generated Solutions, Inc. (USA) | 24x7 customer support team | No data centers; CGS may access the data center(s) Okta utilizes for Amazon Web Services and salesforce.com while providing support. Support team is located in Romania. |
SendGrid, Inc. | Email notifications | USA |
Slack Technologies, LLC M | Messaging and collaboration | USA |
The following Sub-processors are authorized by Okta to process Personal Data and assist Okta with respect to Customer Identity Cloud subscriptions:
Sub-processor Entity | Brief Description of Processing | Locations of Data Center(s) |
|---|---|---|
Amazon Web Services, Inc. | Hosting and cloud infrastructure | During deployment, Customer may select from the following regions: Public Cloud: USA, Canada, United Kingdom, European Union, Japan, Australia Private Cloud: USA, Canada, Brazil, Germany, Hong Kong, Indonesia, Ireland, Italy, United Arab Emirates, United Kingdom, France, Sweden, South Africa, Bahrain, India, Japan, South Korea, Singapore, Australia |
DataDog, Inc. | Business analytics | USA |
Microsoft, Inc. | Hosting and cloud infrastructure | Public Cloud: For Customers deployed in Canada, Japan and Australia on AWS, a regional failover component is hosted on Azure Private Cloud: During deployment, Customer may select from the following regions: USA, Canada, Brazil, Ireland, Netherlands, France, Switzerland, Norway, Germany, Sweden, South Africa, United Arab Emirates, United Kingdom, India, South Korea, Australia, Japan |
salesforce.com, inc. | Support and maintenance ticketing process | USA |
Snowflake Computing, Inc. | Data warehouse services | Germany |
MongoDB, Inc. | Managed database services | The data center location corresponds to the region selected by Customer for hosting and cloud infrastructure (in AWS or Azure) |
Aiven Ltd | Managed database services | The data center location corresponds to the region selected by Customer for hosting and cloud infrastructure (in AWS or Azure) |
SendGrid, Inc. | Email notifications | USA |
Twilio, Inc. | SMS authenticator | USA |
Content Delivery Networks (“CDNs”) CDNs are commonly-used systems of distributed services that expedite the transmission of content. Due to the nature of CDNs, CDNs may process data in any country, regardless of the Customer’s location, to better support Users of the Auth0 Platform | ||
Cloudflare, Inc. | Content delivery network and distributed-denial-of-service attack prevention services | Global |
In addition to the Sub-processors in the Customer Identity Cloud table, the following Sub-processors are authorized by Okta to process Personal Data and assist Okta with respect to Okta Fine-Grained Authorization subscriptions:
Sub-processor Entity | Brief Description of Processing | Locations of Data Center(s) |
|---|---|---|
DataDog, Inc. | Business analytics | USA |
In addition to the Sub-processors in the Customer Identity Cloud table, the following Sub-processor(s) are authorized by Okta to process Personal Data and assist Okta with respect to Okta’s provision of the Customer Identity Cloud Service(s) Breached Password Detection feature(s) or Credential Guard add-on(s):
Sub-processor Entity | Brief Description of Processing | Locations of Data Center(s) |
|---|---|---|
Amazon Web Services, Inc. | Breached password comparison | For Customers deployed on Azure, the data center location corresponds to the region selected by Customer for hosting and cloud infrastructure (in Azure): USA, Canada, United Kingdom, European Union, Japan, Australia |
In addition to the Sub-processors in the Customer Identity Cloud table, the following Sub-processor(s) are authorized by Okta to process Personal Data and assist Okta with respect to Okta’s provision of the Customer Identity Cloud Service(s) Guide feature(s) that leverages generative artificial intelligence:
Sub-processor Entity | Brief Description of Processing | Locations of Data Center(s) |
|---|---|---|
Amazon Web Services, Inc. | Non-training generative artificial intelligence services | USA |
Depending on the geographic location of Customer or its Users, and the nature of the Service provided, Okta may also engage one or more of the following Affiliates as Sub-processors to deliver some or all of the Service subscriptions provided to Customer:
Sub-processor | Entity Type |
|---|---|
Okta International, LLC (Delaware) | Okta Affiliate |
Okta UK LTD (United Kingdom) | Okta Affiliate |
Okta Australia PTY Limited (Australia) | Okta Affiliate |
Okta Software Canada, Inc. (Canada) | Okta Affiliate |
Okta France SAS (France) | Okta Affiliate |
Okta GmbH (Germany) | Okta Affiliate |
Okta Identity Netherlands BV (Netherlands) | Okta Affiliate |
Okta Italy S.r.l. | Okta Affiliate |
Okta Poland sp. z o.o. (Poland) | Okta Affiliate |
Okta Identity Spain, S.L. | Okta Affiliate
|
Okta SG Pte. Ltd. (Singapore) | Okta Affiliate |
Okta Japan K.K. (Japan) | Okta Affiliate |
Okta Identity Philippines Inc. (Philippines) | Okta Affiliate |
Okta Switzerland GmbH (Switzerland) | Okta Affiliate |
Okta Identity Korea Limited (South Korea) | Okta Affiliate |
Okta Identity Ireland Limited | Okta Affiliate |
Okta Identity India Private Limited (India) | Okta Affiliate |
SaaSure Mexico, S. de R.L. de C.V. (Mexico) | Okta Affiliate
|
SaaSure Sweden AB (Sweden) | Okta Affiliate |
Auth0, LLC (Delaware) | Okta Affiliate |
Auth0 International LLC (Delaware) | Okta Affiliate |
Auth0 Argentina S.A. (Argentina) | Okta Affiliate |
Auth0 Ltd. (United Kingdom) | Okta Affiliate |
Auth0 Uruguay S.A. (Uruguay) | Okta Affiliate |
Spera Cybersecurity, Inc. (Delaware) | Okta Affiliate |
Spera Cybersecurity Ltd. (Israel) | Okta Affiliate |
How to Subscribe to Receive Notification of Change in Sub-processors:
If you are a current Okta customer with a data processing addendum in place with Okta, you may subscribe to receive notifications of new Sub-processor(s) for each applicable Okta Service before Okta authorizes any new Sub-processor(s) to process Personal Data in connection with the provision of the applicable Service.
You can subscribe to receive email notifications for changes to Okta Sub-processors by emailing the following information to subprocessors@okta.com:
- Customer name
- Customer address
- Executed copy of the Customer-Okta data processing addendum
- Customer email address(es)
To edit your email notification information, please re-submit a request to subprocessors@okta.com with the subject title “Change in Contact Information” to Okta.
Right to Object to New Sub-processor:
A customer with a data processing addendum in place with Okta may object to Okta’s use of a new Sub-processor by notifying Okta promptly in writing within ten (10) business days after receipt of Okta’s notice in accordance with the mechanism set out above. If you object to a new Sub-processor, and that objection is not unreasonable, Okta will use reasonable efforts to make available to you a change in the applicable Service or recommend a commercially reasonable change to your configuration or use of the applicable Service to avoid processing of Personal Data by the objected-to new Sub-processor without unreasonably burdening you. If Okta is unable to make available such change within a reasonable time, which shall not exceed thirty (30) days, you may terminate the applicable Order Form(s) with respect only to the Service(s) which cannot be provided by Okta without the use of the objected-to new Sub-processor by providing written notice to Okta at:
Okta, Inc.
100 First Street, Sixth Floor
San Francisco, California 94105 USA
Attn: Legal Department