SolarWinds Processor, Sub-Processor and Additional Material Subcontractor Lists

Welcome to the SolarWinds Processor, Sub-Processor and additional Material Subcontractor Lists. Here you can find detailed information about SolarWinds third-party sub-processors, processors and material subcontractors, along with SolarWinds Affiliates engaged by SolarWinds to assist in providing our offerings. We are committed to transparency and data protection, and we regularly update these lists to keep you informed.

Click here to access the list of pending SolarWinds Subprocessors. This table is updated regularly so please be sure to check back for changes from time to time.

Click here to access the list of our current SolarWinds Processors and Subprocessors. This table is updated regularly so please be sure to check back for changes from time to time.

Click here to access the list of our pending additional material subcontractors pursuant to the Digital Operational Resilience Act. This table is updated regularly so please be sure to check back for changes from time to time.

Click here to access the list of our current additional material subcontractors pursuant to the Digital Operational Resilience Act. This table is updated regularly so please be sure to check back for changes from time to time.

Subscribe to this RSS Feed to be notified when we update this page (note: you will need to cut and paste the "Subscribe to this RSS feed" URL into an RSS Feed Reader, e.g. Outlook RSS Subscriptions, to monitor updates).

SaaS based products: The subprocessor lists apply where SolarWinds acts as Your data processor when You use our SaaS based products pursuant to the SSA. 

On premise products: For enhanced transparency, these lists also include processors we use to provide our on premise offerings. For SolarWinds products used in an on-premises deployment, behind the customer’s firewall, the customer is in control of their own product data. By keeping Your software and product data on Your infrastructure, You decide how, where, and under which conditions their data is stored. To the extent that any information You choose to share with SolarWinds constitutes personal data, SolarWinds is a data controller of such personal data and such personal data is shared on a data controller to data controller basis.

DORA: The Digital Operational Resilience Act (DORA) is a regulation introduced by the European Union to strengthen the digital resilience of financial entities. For customers within the scope of DORA, we also provide a list of our additional material subcontractors who support the development and delivery of SolarWinds products. These are in addition to the SolarWinds subprocessors listed separately.

Defined terms used herein shall have the same meaning as defined in the Software Services Agreement (“SSA”) or End User Licence Agreement (“EULA”) as applicable. This document does not give You any additional rights or remedies and should not be construed as a binding agreement between You and SolarWinds. This information is provided to illustrate SolarWinds’ engagement process for sub-processors and set forth the list of third-party sub-processors, material subcontractors and SolarWinds Affiliates used by SolarWinds.

A sub-processor is a third-party data processor engaged by SolarWinds, including SolarWinds Affiliates, processing Personal Data. SolarWinds engages sub-processors and SolarWinds Affiliates to assist in providing SolarWinds’ offerings. SolarWinds has adequate data transfer mechanisms in place with each sub-processor.

A material subcontractor means a subcontractor pursuant to the Digital Operational Resilience Act, that is not an individual but that provides critical services or a material part thereof to SolarWinds in order to provide our products to customers. Our material subcontractor lists are in addition to the SolarWinds subprocessors listed separately.

SolarWinds recognizes that the use of sub-processors creates potential risks that must be properly managed. Before entering into any third-party relationships, we take deliberate steps to conduct an assessment of risk arising from the vendor relationship.

Any sub-processor who has access to SolarWinds Personal Data are expected to demonstrate their security policies, processes, and procedures and prove that they are able to provide adequate protection of such data, including against misuse or compromise. For more information, see our Vendor Data Protection Requirements page.

SolarWinds requires its sub-processors to satisfy similar obligations as those required by the Data Processing Addendum (“DPA”) to the SSA, including:

• Processing Personal Data in accordance with the data controller’s documented instructions;
• Ensuring personnel engaged in the Processing of Personal Data are informed of the confidential nature of the Personal Data and are subject to an obligation of confidentiality;
• Implementing and maintaining commercially reasonable administrative, physical, and technical safeguards designed to protect the security, confidentiality, and integrity of Personal Data;
• Informing and cooperating with SolarWinds in the event of a security breach; and
• Cooperating with SolarWinds in respect of requests from data controllers, data subjects, or data protection authorities, as applicable.

SolarWinds regularly updates the list of sub-processors that are utilized or which SolarWinds proposes to utilize to deliver its offerings. Pursuant to the DPA to the SSA, You may object in writing to the processing of Personal Data You provide to SolarWinds by a new sub-processor within ten (10) business days following the update of the intended subprocessor list, which will be provided to you by RSS feed which can be located on this page. Objections should be sent by email to privacy@solarwinds.com. If You do not object during such time period, the new sub-processor(s) shall be deemed accepted.

If You object to the use of a new sub-processor, SolarWinds may choose to:

• recommend changes to the offerings or Your configuration of the offerings to avoid Processing by the new sub-processor; or
• cease to provide You the particular aspect or feature of SolarWinds offerings that would involve use of the sub-processor.

Termination rights, as applicable and agreed, are set forth exclusively in the DPA.