Vendor profile
Wiz: where is customer data stored and processed?
Wiz is a US-headquartered cloud security vendor owned by Alphabet Inc. The customer group is not stated, so it is not confirmed whether the service is aimed at consumers or businesses. Wiz states that customer data is hosted in regional data centres with optional EU regions, but the country is not given, and the customer can choose region. Wiz also has regions outside the EU/EEA, which can be opted out of. Stored data is described as metadata such as findings and configuration, not customers' files or databases, and temporary processing may occur during SaaS scanning. The data processing agreement is read and refers to a Sub-Processor List, but it does not state where data is stored; the location is not found. Identity, support, notifications, backup and telemetry locations are not stated.
See the map and sourcesWhere data is stored and processed
| Activity | In the EU/EEA | Outside the EU/EEA |
|---|---|---|
| Storage | Europe (country not stated) | – |
| Processing | Europe (country not stated) | – |
Ownership and agreements
| Owner | Alphabet Inc. (USA) |
|---|---|
| Headquarters | USA |
| Data processing agreement | Found and read |
| Certifications | ISO/IEC 27001, ISO/IEC 27017, ISO/IEC 27018, ISO/IEC 27701, SOC 2, SOC 3, PCI DSS, CSA STAR, IRAP, FedRAMP |