Vendor profile
Splunk: where is customer data stored and processed?
Splunk is a product from a company headquartered in the USA and owned by Cisco Systems, Inc. The customer group is not stated. The data processing agreement (Splunk DPA v.01.26) has been read, but it does not state where data is stored; sub-processors are listed in Offer Disclosures on the Cisco Trust Portal and are not verified in this lookup. Storage location for Splunk Cloud can be chosen by the customer among several European regions, including Ireland, Germany, Italy, France and Sweden, but this is not confirmed in the agreement and comes from other sources. Processing for GDPR purposes may take place in the USA and elsewhere for cloud operations, according to a document from 2022. Customer support may be handled in the USA.
See the map and sourcesWhere data is stored and processed
| Activity | In the EU/EEA | Outside the EU/EEA |
|---|---|---|
| Storage | Ireland, Germany, Italy, France, Sweden | – |
| Processing | – | USA |
| Logs and telemetry | Germany | – |
| Support | – | USA |
| AI features | Ireland, Germany, France | – |
Ownership and agreements
| Headquarters | USA |
|---|---|
| Data processing agreement | Found and read |
| Certifications | ISO/IEC 27001, ISO/IEC 27017, ISO/IEC 27018, ISO 9001, SOC 2, SOC 1, PCI DSS, CSA STAR, FedRAMP, TISAX, IRAP |
Sources
- Splunk Cloud Platform Service Details
- Privacy and Security in the Splunk Cloud Platform September 2022 Customer FAQ
- Whitepaper: International Data Transfers & the EU-U.S. Data Privacy Framework
- Splunk Cloud Security Addendum | Splunk
- Data Privacy at Splunk
- Download Data Protection Agreement
- Privacy and Security in the Splunk Cloud Platform Nov. 2023 Customer FAQ
- Splunk Observability Cloud soon available in AWS London and Frankfurt Regions
- Splunk Cloud Platform Service Details
- GLEIF: SPLUNK LLC