S

Snyk

Provides an AI security platform to secure code, agents, and applications for organizations building with AI.

vendor	purpose	evidence
A Akamai U.S.	Engineering	“The nature of the Akamai solution, for optimizing traffic management, means that Akamai processes Snyk’s customer data from the region closest to where the user is located.” source
A Amazon Web Services U.S., EU, Australia	IT	“AWS may have access to all Customer Data. However, as a general principle, AWS will not access any Customer instances of the Snyk Services except in limited cases such as to investigate service issues.” source
A Amplitude U.S.	Data analytics	“Snyk uses Amplitude to obtain usage analytics in relation to its products and services. To compile these analytics, Amplitude may access personal data relating to a user’s use of Snyk’s services, their features and functionality.” source
C Confluent U.S.	IT	“Snyk uses Confluent, a data pipeline service, for real-time communication and data streaming between systems that compose the Services. Confluent keeps disparate data sources at Snyk in sync.” source
C Crowdstrike US, EU (Frankfurt, Germany)	Security	“CrowdStrike provides cybersecurity services to Snyk, including threat intelligence and endpoint protection, to safeguard Snyk's digital infrastructure, products and services. Processing of developer personal data is not its primary purpose, but may occur incidentally as part of the services.” source
D Datadog U.S.	Security	“Datadog provides application monitoring and logging services for the Snyk products and services. Processing of developer personal data is not its primary purpose, but may occur incidentally as part of the services.” source
D dbt Labs, Inc. U.S.	Data analytics	“DBT is a transformation tool used to configure data, which may include developer personal data, stored in Snowflake. DBT serves as a tool to provide meaningful insights on our products and services.” source
G Google Cloud Platform U.S.	Cloud provider	“Gmail, a part of Google Workspace, offers a user-friendly interface and robust features that enhance productivity, collaboration, and information sharing among team members. Overall, Gmail serves as our organization’s primary internal email subprocessor, fostering efficient communication and collaboration while maintaining a high level of security and data privacy. Snyk also uses Google Drive and other products in the Workspace suite to facilitate collaboration and information sharing internally and with customers.” source
G Google Drive U.S.	Document management	“Snyk also uses Google Drive and other products in the Workspace suite to facilitate collaboration and information sharing internally and with customers.” source
L Looker EU	Data analytics	“Looker is a modern data platform that enables Snyk to explore, analyze, and visualize data. It streamlines data-driven decision-making by providing insights across various departments. In Looker, Snyk creates dashboards, making it easier to understand complex datasets, discover trends and support day-to-day operation of our products and services. Personal data may be an input into Looker via Snowflake and DBT.” source
M MongoDB U.S., EU, Australia	Data storage and processing	“Snyk’s products and services rely on MongoDB’s Atlas tool to efficiently manage and store diverse data types as part of our data processing pipeline. MongoDB plays a crucial role in enabling seamless data storage, retrieval, and manipulation, contributing to our ability to handle high volumes of data with ease.” source
O Okta U.S., EU, Australia	IT	“Auth0 serves as an identity provider which is used to authenticate users of Snyk’s services. To perform this authentication, Auth0 will have access to personal data of the users.” source
O Orca Security UK Ltd EU	Security	“Orca is a Cloud Security Posture Management tool that facilitates Snyk’s managing and monitoring of its cloud assets which host and process Customer Data.” source
S Salesforce U.S.	Customer Relationship Management	“Salesforce will process all personal data listed on Schedule 1 of the DPA. Salesforce allows Snyk to manage all of our customer relationships and engagements as a central repository and source of truth. Details such as the products and services customers have purchased, Snyk’s engagement with customers and key points of contact are all managed in Salesforce. Snyk also uses Salesforce to operate its service desk and as its ticketing provider for professional and technical support. Customer details are requested a” source
S Sentry U.S.	Cloud monitoring	“Sentry is a debugging and support tool used by Snyk to collect automated error reports relating to users of Snyk’s services. This allows Snyk to obtain details about these errors and to resolve them more efficiently. Processing of developer personal data is not its primary purpose, but may occur incidentally as part of the services.” source
S Shoreline Labs, Inc. (d/b/a Nightfall) U.S.	Security	“Nightfall is a data security and compliance platform that helps detect and protect sensitive data (including Personal Data). It is integrated with various internal tools used by Snyk, for example, Slack, and scans these tools to detect if sensitive data is shared within them. If any such data is detected, an alert will be generated, which could contain Personal Data.” source

• A

  Akamai

  U.S.

  Engineering

  “The nature of the Akamai solution, for optimizing traffic management, means that Akamai processes Snyk’s customer data from the region closest to where the user is located.” source

• A

  Amazon Web Services

  U.S., EU, Australia

  IT

  “AWS may have access to all Customer Data. However, as a general principle, AWS will not access any Customer instances of the Snyk Services except in limited cases such as to investigate service issues.” source

• A

  Amplitude

  U.S.

  Data analytics

  “Snyk uses Amplitude to obtain usage analytics in relation to its products and services. To compile these analytics, Amplitude may access personal data relating to a user’s use of Snyk’s services, their features and functionality.” source

• C

  Confluent

  U.S.

  IT

  “Snyk uses Confluent, a data pipeline service, for real-time communication and data streaming between systems that compose the Services. Confluent keeps disparate data sources at Snyk in sync.” source

• C

  Crowdstrike

  US, EU (Frankfurt, Germany)

  Security

  “CrowdStrike provides cybersecurity services to Snyk, including threat intelligence and endpoint protection, to safeguard Snyk's digital infrastructure, products and services. Processing of developer personal data is not its primary purpose, but may occur incidentally as part of the services.” source

• D

  Datadog

  U.S.

  Security

  “Datadog provides application monitoring and logging services for the Snyk products and services. Processing of developer personal data is not its primary purpose, but may occur incidentally as part of the services.” source

• D

  dbt Labs, Inc.

  U.S.

  Data analytics

  “DBT is a transformation tool used to configure data, which may include developer personal data, stored in Snowflake. DBT serves as a tool to provide meaningful insights on our products and services.” source

• G

  Google Cloud Platform

  U.S.

  Cloud provider

  “Gmail, a part of Google Workspace, offers a user-friendly interface and robust features that enhance productivity, collaboration, and information sharing among team members. Overall, Gmail serves as our organization’s primary internal email subprocessor, fostering efficient communication and collaboration while maintaining a high level of security and data privacy. Snyk also uses Google Drive and other products in the Workspace suite to facilitate collaboration and information sharing internally and with customers.” source

• G

  Google Drive

  U.S.

  Document management

  “Snyk also uses Google Drive and other products in the Workspace suite to facilitate collaboration and information sharing internally and with customers.” source

• L

  Looker

  EU

  Data analytics

  “Looker is a modern data platform that enables Snyk to explore, analyze, and visualize data. It streamlines data-driven decision-making by providing insights across various departments. In Looker, Snyk creates dashboards, making it easier to understand complex datasets, discover trends and support day-to-day operation of our products and services. Personal data may be an input into Looker via Snowflake and DBT.” source

• M

  MongoDB

  U.S., EU, Australia

  Data storage and processing

  “Snyk’s products and services rely on MongoDB’s Atlas tool to efficiently manage and store diverse data types as part of our data processing pipeline. MongoDB plays a crucial role in enabling seamless data storage, retrieval, and manipulation, contributing to our ability to handle high volumes of data with ease.” source

• O

  Okta

  U.S., EU, Australia

  IT

  “Auth0 serves as an identity provider which is used to authenticate users of Snyk’s services. To perform this authentication, Auth0 will have access to personal data of the users.” source

• O

  Orca Security UK Ltd

  EU

  Security

  “Orca is a Cloud Security Posture Management tool that facilitates Snyk’s managing and monitoring of its cloud assets which host and process Customer Data.” source

• S

  Salesforce

  U.S.

  Customer Relationship Management

  “Salesforce will process all personal data listed on Schedule 1 of the DPA. Salesforce allows Snyk to manage all of our customer relationships and engagements as a central repository and source of truth. Details such as the products and services customers have purchased, Snyk’s engagement with customers and key points of contact are all managed in Salesforce. Snyk also uses Salesforce to operate its service desk and as its ticketing provider for professional and technical support. Customer details are requested a” source

• S

  Sentry

  U.S.

  Cloud monitoring

  “Sentry is a debugging and support tool used by Snyk to collect automated error reports relating to users of Snyk’s services. This allows Snyk to obtain details about these errors and to resolve them more efficiently. Processing of developer personal data is not its primary purpose, but may occur incidentally as part of the services.” source

• S

  Shoreline Labs, Inc. (d/b/a Nightfall)

  U.S.

  Security

  “Nightfall is a data security and compliance platform that helps detect and protect sensitive data (including Personal Data). It is integrated with various internal tools used by Snyk, for example, Slack, and scans these tools to detect if sensitive data is shared within them. If any such data is detected, an alert will be generated, which could contain Personal Data.” source