Vendor profile
Sophos: where is customer data stored and processed?
Sophos stores customer data mainly in AWS data centres and may use Ireland, Germany, the United Kingdom, the USA and Switzerland, with the customer choosing region at setup and the option to store data within the EEA; the United Kingdom, USA and Switzerland options are listed for customers outside the EU/EEA only. Forensic and incident files are stored with Box in Germany and Ireland. Support runs from Ireland via Genesys and from the USA via Salesforce, while logs are kept by Logz.io in Germany and error reporting by Sentry in the USA. Session replay and product analytics are handled by Fullstory in the USA and Germany. Generative AI runs on AWS in several countries, with the customer choosing region.
See the map and sourcesWhere data is stored and processed
| Activity | In the EU/EEA | Outside the EU/EEA |
|---|---|---|
| Storage | Europe (country not stated), Ireland, Germany | – |
| Processing | Ireland, Germany | – |
| Login and user account | Netherlands | – |
| Logs and telemetry | Germany, Ireland | USA, United Kingdom |
| Analytics and metadata | Germany | USA |
| Support | Ireland | USA |
| AI features | Ireland, Germany, Netherlands, Sweden | USA, United Kingdom, Canada, Australia, Japan, India, Brazil, United Arab Emirates, Switzerland |
Ownership and agreements
| Headquarters | United Kingdom |
|---|---|
| Data processing agreement | Found and read |
| Certifications | ISO/IEC 27001, SOC 2, PCI DSS |
Sub-processors (43)
| Name | Country | Purpose |
|---|---|---|
| Amazon Web Services, Inc | USA, Storbritannia, Irland, Tyskland, Ca | Data centre services, cloud infrastructure, Generative AI, identity access |
| Aiven Ltd. [Apache Kafka] | – | Cloud infrastructure services |
| Fullstory, Inc | USA, Tyskland | Session replay, product analytics, digital experience insights |
| Genesys Telecommunications Laboratories, Inc. | Ireland | Cloud contact centre, technical support, call routing |
| Google Cloud EMEA Limited | USA | Cloud infrastructure services, analytics tools |
| Logz.io | Germany | Storage of log files, observability |
| Raintank Inc, d/b/a Grafana Labs | USA, Irland, Storbritannia | Operational dashboard (metrics) services |
| Salesforce Inc. | USA | CRM services, metrics and technical support |
| SendSafely Inc (B2B) | Irland, Tyskland | Technical support helpdesk and file sharing |
| Sierra Technologies Inc | USA | Conversational AI chat bot for customer support |
| Ada Support Inc. | USA, Canada | Technical support and chat bot services |
| Akamai Technologies Inc | USA | CDN and edge proxy for downloads, UI assets, APIs |
| Blue Ocean Contact Centres Inc. | Canada | Technical support helpdesk |
| Box Inc | Tyskland, Irland, Frankrike, Canada, Jap | Secure storage of forensic data and incident files |
| Constella Intelligence, Inc. | USA, Tyskland, Irland | Detect compromised credentials and identity threats |