Sub-processors
RSA Security LLC’s Outseer business unit (“Outseer”) hires vendors to provide certain services to RSA. These vendors may
act as sub-processors on behalf of Outseer. Sub-processors that may process a data subject’s private data (“Content”) are
itemized below. RSA affiliates may also process Content. As set forth in the Data Processing Addendum, Outseer has
adequate data transfer mechanisms in place with each sub-processor. The lists below do not apply to pre-release versions.

Sub-processor

Country *Use

Product / ServiceOutseer
3-D SecureOutseer
Fraud Manager CloudEquinix

Billerica, MA. USA
Slough, UKAmsterdam, NL

Data Center host for part of the physicalinfrastructure and network interconnect services
needed to operate Outseer 3-D Secure.

Iron MountainPhoenix, AZ. USA

Data Center host for part of the physicalinfrastructure and network interconnect services
needed to operate Outseer 3-D Secure.

Telesign

Dallas, TX
El Segundo, CAAmsterdam, NL

Used for sending an OTP (via SMS) to card holders.

Amazon Web
Services(MLP)

Ireland

Provides a cloud computing platform as acomponent of the operating environment forOutseer 3-D Secure.

LexisNexis /ThreatMetrix* the specific location
will be stated in theapplicable agreement
between customer andRSAAn integration of LexisNexis -ThreatMetrix solution
to enrich the overall decision making of the card
holders transaction.
Only applicable if the service has been specificallypurchased by the customer per the agreement
between customer and RSA.

CallSign* the specific location
will be stated in theapplicable agreement
between customer andRSAAn integration of Callsign’s Behavioral Biometricsolution that adds an authentication layer during
the card holder challenge flow.
Only applicable if the service has been specificallypurchased by the customer per the agreement
between customer and RSA.

RSA USAUSARSA IsraelIsrael

RSA UKUK

Microsoft AzureCloud

USA*
Europe*Provides a cloud computing platform as acomponent of the operating environment forOutseer Fraud Manager Cloud.

Telesign

Dallas, TX
El Segundo, CAAmsterdam, NL

Used for sending an OTP (via Voice and SMS) toend users.

Engineering, Application Support, Operations

Customer Support& MaintenanceProve* the specific location
will be stated in theapplicable agreement
between customer andRSA

Used for sending an OTP (via Voice and SMS) toend users.

1Kosmos* the specific location
will be stated in theapplicable agreement
between customer and1Kosmos

Used for Outseer Account Enrollment protection.
Only applicable if the service has been specificallypurchased by the customer per the agreement
between customer and RSA.

RSA USAUSARSA Israel

Israel

RSA India

India

RSA UKUKRSA Japan

Japan

RSA Egypt

Egypt

RSA India

India

RSA Philippines

Philippines

RSA UKUnited Kingdom

RSA USAUSAImpartner

USAEngineering, Application Support, Operations

Local staff providing customer support on a follow
the sun model. May observe data during screen
share sessions. No direct access to customer
environments.

Business Operations
Alliance & Channels

Information related to login, i.e., name, phone,email, address.

Salesforce

Information related customer contact and dealinformation

Lean Data

Application that routes contacts and leads
between other internal applications.

MarketoInformation related to email.

ServiceCloudby Salesforce

USA

Case Management SaaS application which may
store data submitted related to cases raised.
Sensitive data is typically encrypted by the client
prior to submitting a case, or otherwise redacted.

TalkDesk

USA

IVR software that may store name, phone, oremail. Used to report a case and request response.

Professional Services

TaskRayUSA

A project portfolio management SaaS application
used to plan and track project delivery.

Educational Services

TalentLMS

USA

An online training delivery SaaS application use todeliver training and track progress.

Sales & Marketing

Customer SupportServices* The country listed is the sub-processor’s primary location. RSA purchases the sub-processor’s standard offering and thus
the sub-processor controls the country in which data is stored.
Last Updated: Dec 16, 2022