title
Data Supplement
subtitle

Effective: January 2024

For a list of ForgeRock sub-processors, please click here.

image

OPERATIONAL SUB-PROCESSORS: INFRASTRUCTURE, MONITORING & SECURITY

Customer tenant data processed in the ordinary course of production operations

Sub-processor
Description of processing
Location(s) of data centers
Data processed for non-US customers?
Data stored outside EU/UK?
Amazon Web Services (AWS)

Data center providing infrastructure-as-a-service.

Customers select the region(s) of data residency offered by Ping Identity.

United States, Germany, Ireland, Australia, Canada
Aligns with regions selected
Amazon Web Services (AWS)

Email notification services for customers.

Customers select the region(s) of data residency offered by Ping Identity.

United States, Germany, Ireland, Australia
Aligns with regions selected
Cloudflare

Cloudflare provides a content delivery network and distributed DOS attack prevention services, and offers security and performance benefits to all Ping cloud customers.

Customers cannot select the region where data is processed.

United States and Belgium
Google

Corporate email and documentation.

Email correspondence and documents may contain customer data.

United States
New Relic

Application performance management.

Performance metrics for customer tenants.

United States
Splunk

Operational logs and business analytics.

Customer data is logged for event monitoring and troubleshooting purposes and is retained in the region of residency.

United States, Germany, Australia, Canada.
Aligns with AWS regions selected
SumoLogic

Security log and event management; security analytics.

Customer data is logged for security monitoring and troubleshooting purposes.

United States

OPERATIONAL SUB-PROCESSORS: CUSTOMER SUPPORT & INCIDENT RESPONSE

Customer data processed only in the context of a customer support case or security incident

Sub-processor
Description of processing
Location(s) of data centers
Data processed for non-US customers?
Data stored outside EU/UK?
Appfire

Salesforce-to-Jira integration.

Securely automates transfer of support ticket data from Salesforce to Jira.

United States
Atlassian Cloud

Documentation and issue tracking.

Customer documentation and data related to support cases may be stored in Atlassian Cloud.

United States
Box

Storage and transfer of log files for customer support.

Generally applicable when a customer files a support case and attaches customer data to the ticket (e.g., attachments, log files).

United States
Code42

Backup of customer support endpoints.

Backup of customer support endpoints. Customer data related to support cases may be processed on endpoints in use by customer support personnel. All data is encrypted and the encryption key is controlled by Ping.

United States
Crowdstrike

Incident response.

Crowdstrike might have access to customer data in the event of a security incident.

United States
OwnBackup

Cloud backup of Salesforce data.

When customers file a support case in Salesforce, that data will be backed up periodically.

United States
Salesforce

Service cloud that facilitates the customer support ticketing process.

Customer data related to support cases may be stored in Salesforce.

United States
SupportLogic

Customer support case management

Used to increase productivity and improve backlog management for the global customer support team.

United States
PRODUCT-SPECIFIC SUB-PROCESSORS
Sub-processor
Purpose of Processing
Location(s) of data centers
Data processed for non-US customers?
Data stored outside EU/UK?
Product-specific sub-processor
Amazon Web Services (AWS)

Data center providing infrastructure-as-a-service, and email notification services for customers

Customers select the region(s) of data residency.

United States, Germany, Ireland, Australia, Canada, Sinagpore
Aligns with regions selected
PingOne Advanced Services may be deployed in other countries upon mutual agreement.
Amazon Web Services (AWS)

Rekognition image verification

Data is stored in region(s) selected by customer for PingOne tenant.

United States, Germany, Ireland, Australia
Aligns with regions selected
PingOne Verify service only, when selected by customer.
Mitek Systems
Document verification and image verification
United States, Ireland
PingOne Verify service only, when selected by customer.
MongoDB/AtlasDB
Storage and processing of flow configuration, logging and analytics, reporting, and attack detection data
United States
PingOne API Intelligence only.
Twilio
Secure SMS OTP and voice authentication
United States
PingID, PingOne MFA and PingOne Neo and Verify, when customer utilizes secure SMS service.
UberEther
FedRAMP infrastructure
United States
N/A
N/A
US FedRAMP customers only.
Veriff
Identification document verification
United States, Ireland
Aligns with regions selected
PingOne Verify service only, when selected by customer.
Vonage
Secure SMS authentication
United States
PingID and PingOne MFA, when customer utilizes secure SMS service.

AFFILIATE SUB-PROCESSORS

Data processed for all customers, including non-US customers

Entity name
Purpose of Processing
Location(s)
Ping Identity India Private Limited
Support and Operations
India
Ping Identity Australia Pty Ltd
Support and Operations
Australia
Ping Identity Canada Inc
Support and Operations
Canada
Ping Identity France
Support and Operations
France
Ping Identity Israel Ltd.,
Support and Operations
Israel
Ping Identity UK Limited
Support and Operations
United Kingdom, Germany
Ping Identity Singapore Pte. Ltd.
Support and Operations
Singapore
Form ID
2631
Munchkin ID
671-MGJ-570