Vendor record · darktrace.com

What Darktrace promises about your data.

Where Darktrace publishes its promises, how long it gives you when it adds a sub-processor, and what has changed.

Where it publishes

Darktrace lists its sub-processors at cdn.prod.website-files.com/626ff4d25aca2edf4325ff97/6a2140d1add2f8027bfd00c2_Darktrace%20Sub-Processors.pdf. We last read it on October 15, 2026.

What has changed

We've recorded no change to its sub-processor list or data processing agreement between August 31, 2026 and September 15, 2026. Subscribers hear about a change the morning we read it; the public record shows it 30 days later.

Its window

We couldn't find a notice window in Darktrace's data processing agreement at darktrace.com/legal/data-processing-addendum.

Window
—

no window we can quote yet

Sub-processors
3

sub-processors named

Pages
5

pages we watch

Copies
55

dated copies of all its pages, since August 31, 2026

Darktrace DPA

Darktrace's data processing agreement is at darktrace.com/legal/data-processing-addendum; we last read it on October 15, 2026. We have not found a sentence in it that states how much notice customers get before a new sub-processor is engaged, so there is no window we can quote. That is a gap in our reading, not proof that no such term exists.

Notice windows across every vendor we watch

Darktrace sub-processors

Darktrace publishes a sub-processor list at cdn.prod.website-files.com/626ff4d25aca2edf4325ff97/6a2140d1add2f8027bfd00c2_Darktrace%20Sub-Processors.pdf; we last read it on October 15, 2026. It names 3 entries. The entries, as the list prints them: Google LLC; Japan K.K; Korea Ltd.. The same list is in the full table below. The public record holds no change to the list read before September 15, 2026. A change we read after September 15, 2026 is published 30 days after we read it.

3 named · full table

Every public change we have recorded · Where vendors publish their lists

How long Darktrace keeps your data

We hold no statement about data retention from Darktrace's watched pages. The pages we watch: data processing agreement darktrace.com/legal/data-processing-addendum; privacy policy darktrace.com/legal/privacy-policy; status page status.darktrace.com/; sub-processor list cdn.prod.website-files.com/626ff4d25aca2edf4325ff97/6a2140d1add2f8027bfd00c2_Darktrace%20Sub-Processors.pdf; trust and security page darktrace.com/trust.

Retention windows vendors publish · What vendors say about training

What the pages say

Read automatically from the pages below and shown as printed. A missing row is a gap in our reading, not proof it isn’t there.

Sub-processors named · 3

Google LLC

Cloud infrastructure and

Japan K.K

Korea Ltd.

Certifications the trust page names · Cyber Essentials · IRAP · ISO 27001 · ISO 27018 · ISO 42001

Laws the trust page names · GDPR

International transfer notice · European Union

“When you give us personal data, that data may be used, processed or stored anywhere in the world, including countries outside the European Economic Area (“EEA”).”

darktrace.com/legal/privacy-policy · read 2026-10-10

The pages' own stamps: Last updated 2026-06-25

The pages we watch

Every page we read, so you can check it. Each is re-read on a schedule, and we keep a dated copy when it changes.

What this page doesn’t tell you

No score.

Nothing here rates Darktrace. A short notice window is a contract term, not a criticism.

Public pages only.

Private notices and negotiated terms are invisible to us. Your agreement may say something different.

Wrong? Tell us.

Corrections are free, always. We reply within 2–3 business days.

How we read a page · The change log

Work at Darktrace? With an email at darktrace.com you can claim this record, suggest pages we should watch, and take a free copy of it. Claiming changes nothing we publish.

Is Darktrace in your product? Hear the morning we read a change.

You get the lines that moved, in Darktrace’s own words, and the date any window closes. No card. Nothing to cancel.

Every vendor we watch · Redline, our free weekly email