Subprocessors for Secureworks® Taegis™ XDR, Taegis MDR, IDR, VDR, and Advisory Services🔗
Last Modified: October 2025
Secureworks engages third-party contractors to carry out various subcontracted activities and provide certain services on its behalf. Those Subcontractors who may process customer personal data (Subprocessors) are listed below. Secureworks has adequate data processing agreements and data transfer mechanisms in place with each relevant Subprocessor, as required by applicable data protection laws and as appropriate to ensure safeguarding of the relevant personal data.
This document provides details of the Subprocessors used by Secureworks when acting as a processor on behalf of its customers. Section one sets out details of third party suppliers and section two sets out details of Secureworks affiliates that act as Subprocessors. The Subprocessors in bold green represent changes to the list as of October 2025. The affiliate list in section two has been rewritten entirely to account for the integration with Sophos.
1. Subprocessors — Third Party Suppliers🔗
XDR, MDR, IDR, VDR🔗
Secureworks has appointed a number of third party suppliers to act as its Subprocessors in the delivery of Secureworks® Taegis™ products and services. These include:
| Entity Name | Service Description | Processing Location |
|---|---|---|
| Amazon Web Services Inc (“AWS”) | Cloud hosting services and Identity Access | United States/Canada*/Germany/Ireland** |
| Carbon Black Inc (VMware Inc) | Advanced endpoint threat detection | United States |
| Constella | Threat detection, monitoring and alerting | United States/Germany/Ireland |
| Microsoft (OpenAI) | Artificial intelligence to produce automated key findings, recommended remediation and improved detections | United States/Sweden** |
| Spark Cognition | Next-Generation Antivirus | United States |
| USC Logistics | Hardware refurbishments | United States |
| Zendesk | Support tool | United States |
*Canada AWS location only used for VDR
**Germany AWS, Ireland AWS, and Sweden OpenAI locations only applicable when European SKU is selected for data storage by customer
Advisory Services🔗
Secureworks contracts with a number of third-party consulting companies in the course of providing Advisory services to customers. These companies augment Secureworks’ internal consulting resources to assist Secureworks in the provision of services depending on the nature and location of the engagement.
| Entity Name | Processing Location |
|---|---|
| Alexsta Cybersecurity AG | EMEA |
| Covert Bit Forensics SRA | United States |
| CS3 Security Consulting Ltd. | United States/EMEA |
| Gray Analytics | United States |
| GRCS Inc. | Japan |
| Happiest Minds | India |
| Invictus Incident Response B.V. | EMEA |
| Lean Staffing Solutions, Inc | Colombia |
| KLDiscovery Ontrack LLC | United States/EMEA/Australia/Japan |
| ManpowerGroup Co Ltd | Japan |
| Miller Jones | United States |
| MST Technologies Limited | EMEA |
| Rule 56 | United States |
| Sphinx LLC | United States |
| Spybyte LLC | United States |
| Stratigos Security LLC | United States/Canada/EMEA |
Other third parties utilized during Advisory engagement execution:
| Entity Name | Processing Location |
|---|---|
| Amazon Web Services Inc (Cloud hosting services) | United States |
| Microsoft Corp (Office 365 for engagement management activities) | United States |
| VMware Inc (Horizon for desktop virtualization) | United States |
2. Subprocessors — Secureworks & Sophos Affiliates🔗
Secureworks may appoint the affiliates listed below to provide personnel in connection with the delivery of products and services to our customers. Secureworks may also use one or more Sophos affiliates as sub-processors to deliver products and services to you. The affiliates used depends on where you and your users are located.
| Location | Affiliate |
|---|---|
| Europe | |
| France | Secureworks SAS Sophos S.A.R.L. |
| Germany | Sophos Technology GmbH |
| Hungary | Sophos Hungary Kft. |
| Ireland | Sophos Security Technology Ltd |
| Italy | Sophos Italia S.R.L. |
| Romania | SecureWorks Europe S.R.L. |
| Spain | Sophos Iberia S.R.L |
| Sweden | Sophos AB |
| Switzerland | Sophos Schweiz AG |
| The Netherlands | Sophos B.V. |
| United Kingdom | SecureWorks Europe Limited Sophos Limited |
| North & South America | |
| United States | Secureworks, Inc. Sophos Inc. |
| Canada | Secureworks Software Canada ULC Sophos Inc. |
| Brazil | Sophos Technology LTDA |
| Middle East & Africa | |
| Dubai | Sophos Limited (Middle East Branch) |
| Asia & South Pacific | |
| Australia | SecureWorks Australia Pty. Ltd. Sophos Pty Limited |
| India | Sophos Technologies Private Limited SecureWorks Private India Limited |
| Japan | Secureworks Japan K.K. Sophos K.K. |
| The Philippines | Sophos Computer Security Pte. Ltd. (The Philippines Branch) |
Secureworks reserves the right to add or replace Subprocessors to sections one and/or two of this list as required in connection with the provision of services. Per the terms of your agreement, you have the right to object to the addition of a Subprocessor on reasonable, objective and substantive grounds within the time period specified in your contract. If you do not object within the timeline specified, you will be deemed to have accepted the changes made to the list. If you have any questions or concerns please contact dataprotection@sophos.com.