Vendor profile
Tenable: where is customer data stored and processed?
Tenable stores and processes customer scan data in the region the customer selects, and the documented regions include Frankfurt (Germany) and London (UK, for customers outside the EU/EEA). Backup data is stated to remain in the same region, which is assumed to apply to Frankfurt and London. Identity Exposure and admin user data are hosted by Microsoft Azure in several countries, including France, Ireland, the Netherlands, the UK, Hong Kong, Australia, Singapore, the USA, the UAE and India. Email is sent via SendGrid in the USA and the UK, and CRM, marketing and customer account management are handled by Salesforce, Marketo and TaskUs, mainly in the USA and Ireland. Technical support for Nessus Professional trial users is provided by Sutherland in the Philippines.
Checked 13 October 2026 · based on the vendor's own public documents
See the map and sources
Where data is stored and processed
| Activity | In the EU/EEA | Outside the EU/EEA |
|---|
| Storage | Germany | –
Only for customers in other regions: United Kingdom |
|---|
| Processing | Germany | –
Only for customers in other regions: United Kingdom |
|---|
| Backup | Germany | –
Only for customers in other regions: United Kingdom |
|---|
| Login and user account | France, Ireland, Netherlands | United Kingdom, Hong Kong, Australia, Singapore, USA, United Arab Emirates, India |
|---|
| Logs and telemetry | – | USA |
|---|
| Analytics and metadata | Ireland, France | USA |
|---|
| Notifications and email | – | USA, United Kingdom |
|---|
| Support | – | USA, Philippines |
|---|
| AI features | Germany | USA, United Kingdom, Singapore, Canada, Australia, Japan, Brazil, India, United Arab Emirates |
|---|
Only outside the EU/EEA, with no European alternative stated: Notifications and email, Support, Logs and telemetry.
Ownership and agreements
| Owner | Tenable Holdings, Inc. (USA) |
|---|
| Headquarters | USA |
|---|
| Data processing agreement | Not found on the vendor's website |
|---|
| Certifications | ISO/IEC 27001, FedRAMP, CSA STAR, SOC 2 |
|---|
Sub-processors (41)
| Name | Country | Purpose |
|---|
| Amazon Web Services (AWS) Cloud | – | Hosting for Tenable Vulnerability Management og kundecontainere |
| SendGrid | USA, Storbritannia | Email Notifications |
| Twilio | USA | SMS Notifications and Two-factor Authentication |
| TaskUs, Inc. | USA | Customer account management |
| Microsoft Operations Ireland Limited (Azure) | – | Hosting for Tenable Identity Exposure |
| Snowflake Computing Netherlands B.V. | – | Hosting and data warehousing |
| Sutherland Global Services, Inc. | USA, Filippinene | Customer relationship management, technical support |
| MongoDB, Inc. | – | Hosting and database services |
| Pendo.io, Inc. | USA | In-platform communications and platform analytics |
| Datadog, Inc | USA | Product Infrastructure Management |
| Coralogix Inc. | USA | Product infrastructure management |
| ClickHouse, Inc | – | Hosting and database services |
| Cloudflare, Inc | – | Web traffic monitoring (CDN) |
| Anthropic PBC (Claude) | – | AI-powered feature development and deployment |
| Amazon Web Services, LLC (Amazon Bedrock) | – | AI-funksjoner og teknisk support |
Sources