<<

IBM Security Services – Consulting and Systems Integration Sub-processors As of 30 April 2018

IBM Entities within the European Economic Area (EEA) IBM companies engaged by IBM Security in the delivery of our Security Consulting and Systems Integration Services delivery that are located within the European Economic Area (EEA) or countries considered by the European Commission to have adequate protection. For addresses of IBM entities please refer to the IBM Planetwide site. Country Legal Entity Austria IBM Oesterreich Internationale Bueromaschinen Gesellschaft m.b.H. Belgium International Business Machines of Belgium sprl/bvba Czech Republic IBM Ceska Republika, spol. s r.o. IBM Global Services Delivery Center Czech Republic s.r.o. Denmark IBM Danmark ApS Finland Oy IBM Finland Ab France Compagnie IBM France, S.A.S. Germany IBM Deutschland GmbH IBM Deutschland Business & Technology Services GmbH IBM Business Services Asset GmbH Greece IBM Hellas Information Handling Systems S.A. Hungary IBM Hungary International Shared Service Centre Ltd. Ireland IBM Global Services Limited IBM Ireland Limited Italy IBM Italia S.p.A. Netherlands IBM Nederland B.V. Norway IBM Services AS International Business Machines AS Poland IBM Polska Sp. z o.o. Portugal Companhia IBM Portuguesa, S.A. Slovakia IBM International Services Centre s.r.o. IBM Slovensko, spol. s r.o. Slovenia IBM Slovenija d.o.o. Spain IBM Global Services España, S.A. IBM Global Services Redes de Ordenadores y Servicios, S.A. IBM International Services Center, S.A. International Business Machines, S.A. Sweden IBM Nordic Aktiebolag IBM Svenska Aktiebolag United IBM United Kingdom Limited Kingdom

Additional IBM companies engaged by IBM Security in the delivery of our Security Consulting and Systems Integration Services delivery that are located in countries meeting the adequacy requirements under Regulation (EU) 2016/679 Article 45.

Country IBM Legal Entity Canada IBM Canada Limited - IBM Canada Limitee Israel IBM Israel Limited Switzerland IBM Schweiz AG - IBM Suisse SA - IBM Svizzera SA - IBM Switzerland Ltd New Zealand IBM New Zealand Limited

Third-party Sub-processors within the European Economic Area (EEA) Suppliers engaged by IBM Security in the delivery of our Security Consulting and Systems Integration Services delivery that are l located in the European Economic Area or countries considered by the European Commission to have adequate protection. Country Sub-processor Address &/or Website England Securewest International www.securewest.com Germany ESNC GmbH www.esnc.de Germany TeamViewer www.teamviewer.com Luxembourg CTG LUXEMBOURG PSF SA www.ctg.com Luxembourg Luxembourg www.sogeti.lu/ Netherlands WeSecure www.wesecure.nl

IBM Entities outside of the European Economic Area (EEA) IBM Data Importers / Sub-processors IBM companies engaged by IBM Security in the delivery of our Security Consulting and Systems Integration Services delivery that are located outside of the European Economic Area or countries considered by the European Commission to have adequate protection. For addresses of IBM entities please refer to the IBM Planetwide site.

North America Country IBM Legal Entity USA International Business Machines Corporation (some offerings approved under the PrivacyShield agreement – refer to the IBM PrivacyShield site for further details)

Europe Country Legal Entity Russia IBM East Europe/Asia Ltd. IBM Science and Technology Center LLC Serbia IBM - International Business Machines d.o.o., Belgrade

Asia Pacific / China / Japan Country Legal Entity Australia IBM Australia Limited India IBM India Private Limited Indonesia PT IBM Indonesia Indonesia PT. Jasa Teknologi Informasi IBM Korea IBM Korea, Inc. Korea IBM Korea Technical Solutions Co., Ltd Malaysia IBM Global Delivery Centre (Malaysia) Sdn Bhd Malaysia IBM Malaysia Sdn. Bhd. New Zealand IBM New Zealand Limited Philippines IBM Philippines, Incorporated IBM Business Services (IBS), IBM Solutions Delivery (ISD) Singapore IBM Global Services,Singapore IBM Singapore PTE LTD Sri Lanka IBM World Trade Corp - Sri Lanka Branch Thailand IBM Solutions Delivery Company Limited Thailand IBM Thailand Company Limited Vietnam IBM Vietnam Company Limited China IBM (China) Co., Ltd. Hong Kong IBM China/Hong Kong Limited Taiwan IBM Taiwan Corporation Japan IBM Japan, Ltd. IBM Japan Technical Solutions Company, Ltd (TSOL)

Latin America Country IBM Legal Entity Argentina IBM Argentina Sociedad de Responsabilidad Limitada Brazil IBM Brasil-Industria, Maquinas e Servicos Limitada Chile IBM de Chile S.A.C. Colombia IBM de Colombia & CIA S.C.A Costa Rica IBM Business Transformation Center, S.r.l. Mexico Grupo IBM Mexico, S. de R.L. de C.V. Peru IBM del Peru S.A.C.

Middle East and Africa Country IBM Legal Entity Egypt IBM World Trade Corporation, Egypt Branch Kenya IBM East Africa Limited Morocco IBM Maroc Pakistan IBM Italia SPA - Pakistan Branch Qatar IBM Qatar LLC Saudi Arabia IBM Middle East FZ-LLC - Saudi Arabia Branch South Africa IBM South Africa (Pty) Ltd Turkey IBM TÜRK LIMITED ŞİRKETİ UAE IBM Middle East and Africa FZ-LLC Kuwait IBM Kuwait SPC

Third-party Sub-processors outside of the European Economic Area (EEA) Third Party Data Importers / Sub-processors engaged by IBM Security in the delivery of our Security Consulting and Systems Integration Services delivery that are located outside of the European Economic Area (EEA) (non-IBM companies established outside either the European Economic Area or countries considered by the European Commission to have adequate protection)

Country Sub-processor Address &/or Website Canada APC Workforce Solutions www.apc-services.com Canada Security Compass www.securitycompass.com Canada Tangentia, Inc www.tangentia.com Canada The Employment Solution https://tes.net Dubai UAE AMS Dubai UAE Dubai UAE Future Focus Human Resources www.bayt.com Dubai UAE Gulf Business Machines www.gbmme.com Guatemala Sistemas Aplicativos, S.A. www.sisap.com India HCL Technologies www.hcltech.com India Persistent Systems www.persistent.com Israel Check Point Software Technologies www.checkpoint.com Ltd. Japan Internet Future Technologies, Inc South Korea Samsung Electronics Company, Inc www.samsung.com Saudi Arabia LCC Saudi Arabia www.lcc.com Saudi Arabia Mea-Tech www.mea-tech.com USA Akamai www.akamai.com USA Amazon Web Services www.aws.amazon.com USA Apple www.apple.com USA Aricent www.aricent.com USA Arxan Technologies, Inc www.arxan.com USA Auryn Technologies, Inc www.auryntech.com/Home USA Boston IT www.bostonitservices.com USA Box, Inc www.box.com/home USA Carbon Black www.carbonblack.com USA CDI Corporation www.cdicorp.com USA Synopsys www.synopsys.com USA Cisco Systems www.cisco.com USA Clickatell www.clickatell.com USA Collabera www.collabera.com USA Crowdstrike www.crowdstrike.com USA Customer Advisory Group www.customeradvisorygroup.com/ USA Elliott Security Solutions www.elliottsecuritysolutions.com USA Encode, Inc www.encodeinc.com USA Experis www.experis.com USA Flexera www.flexera.com USA Forcepoint www.forcepoint.com USA Google www.google.com USA Guidance Software www.guidancesoftware.com/encase- forensic USA Illumio www.illumio.com USA Iron Mountain, Inc www.ironmountain.com USA Juniper Networks www.juniper.net USA KPMG www.kpmg.com USA Lastline www.lastline.com USA Lenovo www.lenovo.com USA McAfee www.mcafee.com USA Medallia www.medallia.com USA Microsoft www.microsoft.com USA Onapsis, Inc www.onapsis.com USA OpenSky Corporation https://tuvopensky.com/ USA Optiv Security, Inc www.optiv.com USA Oracle www.oracle.com USA PagerDuty www.pagerduty.com USA Ping Identity www.pingidentity.com USA Praescient Analytics Inc. praescientanalytics.com USA Prolifics Inc www.prolifics.com USA Proofpoint, Inc www.proofpoint.com USA Randstad www.randstad.com USA Rapid7 www.rapid7.com USA Rocket Software www.rocketsoftware.com USA Salesforce.com www.salesforce.com USA SecureLogix www.securelogix.com USA SecurityFirst https://securityfirstcorp.com USA SendGrid www.sendgrid.com USA STEALTHBits Technologies www.stealthbits.com USA Superior Design International USA Symantec www.symantec.com USA Synopsys www.synopsys.com USA Templar Shield www.templarshield.com USA Thycotic www.thycotic.com USA Unicorn Consulting www.unicornconsulting.com USA Vericode www.vericode.com USA Wavestrong, Inc https://wavestrong.com USA Zendesk www.zendesk.com