# SecOps Services Subprocessors

#### Third-Party Subprocessors for Google Security Operations

Google and its affiliates engage the third-party entities in the table below to perform limited activities in connection with Google Security Operations. The table shows what activity each entity performs and indicates if an entity is only relevant to a specific Service. This explains the limited processing of Customer Data the entity is authorized to perform. Google and its affiliates may also engage the Third-Party Subprocessors listed at [https://cloud.google.com/terms/subprocessors](https://cloud.google.com/terms/subprocessors) to perform Technical Support for Google Security Operations.

| **Entity name**               | **Relevant SecOps Service** | **Activity**         | **Country where processing is performed**       | **Registered address**                                   | **Country of registration** | **Company number** | **Parent company**     |
|-------------------------------|-----------------------------|----------------------|---------------------------------------------------|---------------------------------------------------------|---------------------------|-------------------|-------------------------|
| EPAM Systems, Inc.           | Google Security Operations   | Technical Support     | India and the United States of America            | 41 University Drive • Suite 202, Newtown, PA 18940 • USA | United States of America | 3604150           | N/A                     |
| Nimble Data Technologies Inc   | Google Security Operations   | Technical Support     | India and the United States of America            | 40656 Mission Blvd, Fremont, CA 94539                  | United States of America | 47-1398322        | Crest Data Systems      |
| observIQ Inc.                | Google Security Operations   | Technical Support     | United States of America                          | 3225 N Evergreen Dr NE, Suite 103, Grand Rapids, Michigan 49525, US | United States of America | 47-4319036        | N/A                     |

#### Third-Party Subprocessors for Mandiant Solutions, Mandiant Managed Services, and Mandiant Consulting Services

Google and its affiliates engage the third-party entities in the table below to perform limited activities in connection with Mandiant Services. The table shows what activity each entity performs and indicates if an entity is only relevant to a specific Service. This explains the limited processing of Customer Data the entity is authorized to perform. Google and its affiliates may also engage the Third-Party Subprocessors listed at [https://cloud.google.com/terms/subprocessors](https://cloud.google.com/terms/subprocessors) to perform Technical Support for Mandiant Services. For Mandiant Consulting Services and Managed Services only, Google may engage additional third-party Subprocessors identified as a subcontractor or Subprocessor in the applicable Order Form or other confirmation provided to Customer before commencement of the Mandiant Consulting Services and/or Managed Services.

| **Entity name**               | **Relevant SecOps Service(s)**                            | **Activity**                                  | **Country where processing is performed**                                       | **Registered address**                                   | **Country of registration** | **Company number** | **Parent company**     |
|-------------------------------|----------------------------------------------------------|----------------------------------------------|-------------------------------------------------------------------------------|---------------------------------------------------------|---------------------------|-------------------|-------------------------|
| Amazon Web Services, Inc.    | Mandiant Solutions, Mandiant Managed Services, Mandiant Consulting | Cloud Platform and Infrastructure              | United States of America and European Economic Area (EEA)                   | 440 Terry Ave N., Seattle, WA 98109                     | United States of America | 4152954           | Amazon.com, Inc.       |
| Digital Ocean, LLC           | Mandiant Consulting                                          | Test environments and analysis for red team exercises | United States of America                                              | 101 Avenue of the Americas, New York, NY 10013         | United States of America | 4230996           | DIGITALOCEAN, LLC      |
| Musaruba US LLC               | Mandiant Solutions, Mandiant Managed Services, Mandiant Consulting | Malware Analysis                              | United States of America and European Economic Area (EEA)                   | 6000 Headquarters Drive, Suite 600, Plano TX 75024     | United States of America | 86-2066250 (Tax ID)| STG Partners, LLC      |
| Microsoft Corp.              | Mandiant Solutions, Mandiant Managed Services, Mandiant Consulting | Cloud Platform and Infrastructure              | United States of America and European Economic Area (EEA)                   | 1 Microsoft Way, Redmond, WA 98052                       | United States of America | 600413485         | N/A                     |
| VMRay, Inc.                 | Mandiant Consulting                                          | Malware Analysis                              | United States of America                                              | 22 Boston Wharf Road, 7th Floor, Boston, MA 02210      | United States of America | 001254666         | VMRay Inc.            |

#### Google Group Subprocessors

Google may engage the Google Affiliates listed at [https://cloud.google.com/terms/subprocessors#google-group-subprocessors](https://cloud.google.com/terms/subprocessors#google-group-subprocessors) to perform limited activities in connection with the SecOps Services.