Fox-IT
Fox-IT, part of NCC Group, sells cybersecurity services including managed detection and response, incident response and consulting to enterprises and governments.
Subprocessors (21)
List updated Oct 15, 2024 · Checked Oct 25, 2026 · source disclosure ↗
| vendor | purpose | evidence |
|---|---|---|
| Amazon Web Services European Union, United Kingdom, United States, Asia-Pacific | Hosting, connectivity layer and middleware | “Amazon | Amazon Web Services (for hosting, connectivity layer and middleware)” |
| Microsoft Azure Netherlands, Ireland, United Kingdom | Hosting, security data analytics and connectivity layer | “Azure (for hosting, security data analytics and connectivity layer)” |
| Microsoft 365 Netherlands, Ireland, United Kingdom | Several office applications | “Office 365 (several office applications)” |
| Microsoft Entra ID Netherlands, Ireland, United Kingdom | Active directory | “EntraID (for active directory)” |
| Mindgame Netherlands | Awareness campaign tool Consulting and Implementation | “Mindgame | Awareness campaign tool” |
| | eDiscovery platform service Digital Forensic Incident Response | “Reveal Data Corporation | eDiscovery platform service” |
| ZyLAB ONE Netherlands | eDiscovery platform service Digital Forensic Incident Response | “ZyLAB ONE | eDiscovery platform service” |
| Amazon Web Services Germany | Hosting, connectivity layer and middleware Managed Services | “Amazon Web Services (for hosting, connectivity layer and middleware)” |
| | Security data analytics service (endpoint protection) Managed Services | “Broadcom (VMWare Carbon Black) | Security data analytics service (Endpoint protection)” |
| CrowdStrike Germany, United States | Security data analytics service (endpoint protection) Managed Services | “CrowdStrike | Security data analytics service (Endpoint protection)” |
| CyCognito Belgium, Israel | External attack surface management service Managed Services | “CyCognito | External Attack Surface Management Service” |
| IASME United Kingdom | Vulnerability scan and audit platform service Managed Services | “IASME | Vulnerability scan & audit platform service” |
| Intermax Cloudsourcing Netherlands | Private hosting service Managed Services | “Intermax Cloudsourcing | Private hosting service” |
| Microsoft Azure Netherlands, Ireland, United Kingdom | Hosting, security data analytics (Azure Sentinel), connectivity layer and active directory Managed Services | “Hosting (Azure Cloud), security data analytics service (Azure Sentinel), connectivity layer (Azure Lighthouse)” |
| Qualys Netherlands, United Kingdom, United States, Australia, India | Internal and external attack surface management services Managed Services | “Qualys | Internal & External Attack Surface Management Services” |
| Searchlight Cyber United Kingdom | Web monitoring service Managed Services | “Searchlight Cyber | Web monitoring service” |
| SentinelOne Germany, United States | Security data analytics service (endpoint protection) Managed Services | “SentinelOne | Security data analytics service (Endpoint protection)” |
| ServiceNow United Kingdom | Security incident management platform service Managed Services | “ServiceNow | Security incident management platform service” |
| Splunk Global | Security data analytics (SIEM) service Managed Services | “Splunk | Security data analytics (SIEM) service” |
| Thinkst Canary Global | Threat detection and deception service Managed Services | “Thinkst Canary | Threat detection and deception service” |
| Umbrio Netherlands | Support service Managed Services | “Umbrio (Davinsi) | Support service” |
| DigitalOcean Global | Hosting; self-service linux machines for short term projects Technical Assurance Services | “Digital Ocean | Hosting (Digital Ocean Cloud)” |
| Horizon3.ai United States, Germany | Automated testing services (NodeZero) Technical Assurance Services | “Horizon3.ai (NodeZero) | Providing automated testing services” |
- Amazon Web ServicesEuropean Union, United Kingdom, United States, Asia-Pacific
Hosting, connectivity layer and middleware
“Amazon | Amazon Web Services (for hosting, connectivity layer and middleware)”
- Microsoft AzureNetherlands, Ireland, United Kingdom
Hosting, security data analytics and connectivity layer
“Azure (for hosting, security data analytics and connectivity layer)”
- Microsoft 365Netherlands, Ireland, United Kingdom
Several office applications
“Office 365 (several office applications)”
- Microsoft Entra IDNetherlands, Ireland, United Kingdom
Active directory
“EntraID (for active directory)”
- MindgameNetherlands
Awareness campaign tool
“Mindgame | Awareness campaign tool”
- Reveal DataGermany, United Kingdom, United States
eDiscovery platform service
“Reveal Data Corporation | eDiscovery platform service”
- ZyLAB ONENetherlands
eDiscovery platform service
“ZyLAB ONE | eDiscovery platform service”
- Amazon Web ServicesGermany
Hosting, connectivity layer and middleware
“Amazon Web Services (for hosting, connectivity layer and middleware)”
- VMware Carbon BlackGermany, Belgium, United States
Security data analytics service (endpoint protection)
“Broadcom (VMWare Carbon Black) | Security data analytics service (Endpoint protection)”
- CrowdStrikeGermany, United States
Security data analytics service (endpoint protection)
“CrowdStrike | Security data analytics service (Endpoint protection)”
- CyCognitoBelgium, Israel
External attack surface management service
“CyCognito | External Attack Surface Management Service”
- IASMEUnited Kingdom
Vulnerability scan and audit platform service
“IASME | Vulnerability scan & audit platform service”
- Intermax CloudsourcingNetherlands
Private hosting service
“Intermax Cloudsourcing | Private hosting service”
- Microsoft AzureNetherlands, Ireland, United Kingdom
Hosting, security data analytics (Azure Sentinel), connectivity layer and active directory
“Hosting (Azure Cloud), security data analytics service (Azure Sentinel), connectivity layer (Azure Lighthouse)”
- QualysNetherlands, United Kingdom, United States, Australia, India
Internal and external attack surface management services
“Qualys | Internal & External Attack Surface Management Services”
- Searchlight CyberUnited Kingdom
Web monitoring service
“Searchlight Cyber | Web monitoring service”
- SentinelOneGermany, United States
Security data analytics service (endpoint protection)
“SentinelOne | Security data analytics service (Endpoint protection)”
- ServiceNowUnited Kingdom
Security incident management platform service
“ServiceNow | Security incident management platform service”
- SplunkGlobal
Security data analytics (SIEM) service
“Splunk | Security data analytics (SIEM) service”
- Thinkst CanaryGlobal
Threat detection and deception service
“Thinkst Canary | Threat detection and deception service”
- UmbrioNetherlands
Support service
“Umbrio (Davinsi) | Support service”
- DigitalOceanGlobal
Hosting; self-service linux machines for short term projects
“Digital Ocean | Hosting (Digital Ocean Cloud)”
- Horizon3.aiUnited States, Germany
Automated testing services (NodeZero)
“Horizon3.ai (NodeZero) | Providing automated testing services”