Skip to main content
RansomLeak Security Training

Navigation

Human Risk New

Simulations

Phishing Simulations Smishing Simulations
Vishing Simulations Soon

Catalogue

Security Awareness Privacy & Compliance AI & LLM Security Real-World Incidents Application Security API Security Git & Repository Security Cloud Security
Microlearning drills

Features

Interactive 3D Training Cloud LMS SCORM & LTI Browser Extension New Integrations All features

Company

Partners About Us Blog Data Sheet PDF

Legal

Security & Compliance Privacy Policy Terms of Service Data Processing Addendum Subprocessors
English Українська
Book a Demo

Every exercise is indexed by name, CWE, OWASP, MITRE ATT&CK, CIS, NIST CSF, GDPR and EU AI Act reference.

Try

Subprocessors

List last changed: October 29, 2026

These are the third parties RansomLeak engages to process personal data on behalf of its customers. Each one is bound by a written data processing agreement with obligations at least as protective as those in our Data Processing Addendum.

This list is part of our Data Processing Addendum.

Core product subprocessors

Always engaged when you use the platform. These processors handle data on behalf of RansomLeak customers.

Amazon Web Services
Infrastructure hosting (compute, database, object storage, CDN)us-east-1 (United States) or eu-west-1 (Ireland, EU), per tenant
Twilio SendGrid
Transactional email delivery (notifications, password resets, audit digests)United States, or your own SMTP server
PostHog
Anonymized product analyticsEuropean Union
Sentry
Application error monitoring (events tagged with pseudonymous user and tenant identifiers)United States
Slack
Internal security and operations alerting (error events and security alarms tagged with pseudonymous tenant identifiers, delivered to RansomLeak engineering channels)United States

Feature-conditional subprocessors

Engaged only when a tenant administrator turns on the corresponding feature inside the platform. Where these handle biometric or special-category data, they do so under explicit instruction from the tenant.

ElevenLabs
Voice synthesis for deepfake drill exercises. Tenant administrators upload voice samples used to generate the simulation audio (biometric / special-category data)United States

Integrations you connect:When you connect Microsoft 365, Entra ID or Teams, Google Workspace, our Slack app, Okta or a direct HRIS integration, data moves between RansomLeak and your own account with that provider, under your agreement with them. These providers act for you, not for RansomLeak, so they are not RansomLeak subprocessors.

Marketing-site tools:Tools that operate only on our public marketing pages, such as Calendly for demo scheduling, do not process platform or learner data. These are itemized in our Privacy Policy rather than counted as platform subprocessors.

Subprocessor changes: We notify customers at least 30 days before adding or replacing a core subprocessor, in line with our Data Processing Agreement. Customers on an active subscription are emailed directly when material changes occur.

Get notified of changes

Customers on an active subscription are emailed before a change takes effect. Anyone else who wants the notice, such as a procurement or privacy team, can ask to be added to the list at privacy@ransomleak.com.