OutThink uses certain sub-processors to assist in providing OutThink’s services. A sub-processor is a third-party data processor engaged by OutThink who agrees to receive personal data from OutThink intended for processing activities to be carried out (i) on behalf of OutThink customers; (ii) in accordance with customer instructions as communicated by OutThink; and (iii) in accordance with the terms of a written contract between OutThink and the sub-processor.

Prior to onboarding sub-processors, OutThink conducts an audit of the security and privacy practices of such sub-processors to ensure the sub-processors provide a level of security and privacy appropriate to their access to data and the scope of the services they are engaged to provide. Sub-processors are re-authorized upon contract renewal or on an annual basis. OutThink’s sub-processors include:

Sub-Processor NameSub-Processor ActivityLocation
Microsoft AzureCloud service provider for our services and applicationsNetherlands and Republic of Ireland1
AtlassianCustomer Support Platform Provider (Jira Service Desk)Republic of Ireland

1 Customers have the option to select United Arab Emirates or United States (**coming soon) instead.

Optional Service Sub-Processors

OutThink also utilizes the following sub-processors to provide certain optional services to those OutThink customers who elect to purchase those optional services through OutThink:

Sub-Processor NameSub-Processor ActivityLocation
Amazon Web ServicesEmail Delivery Infrastructure2,
Authentication Services for Administrators3
Republic of Ireland
SparkPost EUEmail Delivery Infrastructure4Western Europe (EU)

2 Delivers training email notifications and alerts to end-users, where a customer has elected to use OutThink’s email delivery solution, rather than their own email infrastructure.
3Provides authentication services & MFA for administrators in the Command Center, where the customer has elected not to use Single Sign On with their own Identity Management Solution.
4Delivers simulation emails to end-users, where a customer has elected to use OutThink’s Attack Simulation module.