ShareFile
Search the Trust Center...
Ctrl +K
ShareFile | Trust Center
Everything you need to complete your security review is here. Browse documents, certifications, and compliance details with confidence. Our Trust Center is regularly updated to reflect the latest audit results, and subprocessor disclosures.
Quick links
Badges
ISO 27701
PCI
GDPR
Documents & Knowledge Base FAQs
Quick Summary
One or more annual third-party audit(s)
Annual third-party penetration testing
Has a disaster recovery plan
Subprocessors list available
Has cyber insurance
Will enter into a DPA
Has a bug bounty or vulnerability disclosure program
Has an API available
Uses a centralized IAM solution (SSO) to manage employee access
Featured Documents
Subprocessors18
Subprocessor
Location of Processing
Usage Details
AWS
United States, Canada, Germany, Ireland
Services: Storage, diagnostics, monitoring, analytics, logging, reporting, AI, and general cloud services.
Data Type(s): File uploads, input into free-text fields, contact details, support, telemetry, user IDs, and metadata.
Cyclr
United States, United Kingdom
Third-Party cloud services integration. Personal data that may be contained in end-user input into open fields and file uploads, user IDs.
Elastic
United States
Logging and reporting.
Data Type(s): Telemetry, user IDs, or input into free-text fields
GBG IDology
United States
Identity Verification. Personal data that may be contained in authentication services (e.g. contact details, identifying dates and numbers, telemetry).
Google Cloud
United States
Security Monitoring , Traffic logging and analysis. Personal data which may be contained in security analytics (e.g. event or usage logs, user IDs, telemetry).
Microsoft
United States
Security monitoring. Personal data which may be contained in security analytics (e.g. event or usage logs, user IDs, telemetry).
MongoDB
United States
Analytics. Personal data which may be contained in end-user input into open fields, contact details, event or usage logs, user IDs, telemetry.
New Relic
United States
Connectivity monitoring, logging and analytics. Personal data which may be contained in event or usage logs, telemetry.
Novu
United States, EU
Notifications. Personal data which may be contained in end-user input into open fields and file uploads, contact details, user IDs.
Pendo
United States
In app communications and analytics. Personal data which may be contained in end-user input into open fields, event or usage logs, user IDs, and telemetry.
Salesforce
United States
Customer Support. Personal data which may be contained in contact details, support data, user IDs, analytics.
SendGrid
United States
Email service provider. Personal data which may be contained in contact details, end-user input into open fields, user IDs.
Sentry
United States
Monitor logs and events. Personal data which may be contained in monitoring or crash reports (e.g. event or usage logs, telemetry).
Slack
United States
Communications, general account administration. Personal data which may be contained in contact details, end-user input into open fields, event or usage logs, support data, user IDs, telemetry.
Snowflake
United States
Analytics. Personal data which may be contained in end-user input into open fields, event or usage logs, user IDs, telemetry.
TeleSign
United States
Multifactor Authentication Mechanism. Personal data which may be contained in authentication services (e.g. contact details).
Temporal Technologies Inc.
United States
Workflows. Personal data which may be contained in end-user input into open fields and file uploads, contact details.
Wiz
United States
Security tools. Personal data which may be contained in monitoring reports (e.g. telemetry, user IDs, or end-user input into open fields.)
Last updated . .
View as:
Powered by Conveyor, the first end-to-end customer trust platform.
Learn more