Vendor record · splunk.com
What Splunk promises about your data.
Where Splunk publishes its promises, how long it gives you when it adds a sub-processor, and what has changed.
- Where it publishes
Splunk lists its sub-processors at www.splunk.com/en_us/legal/sub-processors.html. We last read it on October 15, 2026.
- What has changed
We've recorded no change to its sub-processor list or data processing agreement between September 12, 2026 and September 15, 2026. Subscribers hear about a change the morning we read it; the public record shows it 30 days later.
- Its window
When it adds a sub-processor, its clause at www.splunk.com/content/dam/splunk2/en_us/pdfs/legal/splunk-data-protection-agreeement.pdf (read September 30, 2026) gives you 30 days' notice.
- Window
- 30
- Pages
- 8
- Copies
- 31
days' notice when it adds a sub-processor
pages we watch
dated copies of all its pages, since August 31, 2026
Splunk DPA
Splunk's data processing agreement is at www.splunk.com/en_us/legal/splunk-dpa.html; we last read it on October 15, 2026. Splunk's data processing agreement gives 30 days' notice before a new sub-processor is engaged. Here is the clause, from our September 30, 2026 copy:
30
days' notice
“4.2 Splunk will not subcontract its obligations under this DPA to new Subprocessors, in whole or in part, without providing You with at least 30 days advance notice (e.g.: by publishing this information at Cisco’s Trust Portal and/or by email upon Your subscrip- tion at Cisco’s Trust Portal) and an opportunity to object.”
Found automatically and not yet checked by a person. The quote is exact, and the link goes to the source. Nothing here says whether the term is good or bad, only that Splunk published it.
www.splunk.com/content/dam/splunk2/en_us/pdfs/legal/splunk-data-protection-agreeement.pdf · read 2026-09-30 · fingerprint b352bc0d177f1a02…
Splunk sub-processors
Splunk publishes a sub-processor list at www.splunk.com/en_us/legal/sub-processors.html; we last read it on October 15, 2026. We could not read named entries out of it. The public record holds no change to the list read before September 15, 2026. A change we read after September 15, 2026 is published 30 days after we read it.
Every public change we have recorded · Where vendors publish their lists
How long Splunk keeps your data
We hold no statement about data retention from Splunk's watched pages. The pages we watch: data processing agreement www.splunk.com/en_us/legal/splunk-dpa.html; data processing agreement www.splunk.com/content/dam/splunk2/en_us/pdfs/legal/splunk-data-protection-agreeement.pdf; pricing page splunk.com/pricing; privacy policy splunk.com/privacy; status page status.splunk.com/; sub-processor list www.splunk.com/en_us/legal/sub-processors.html; terms of service www.splunk.com/en_us/legal/terms/terms-of-use.html; trust and security page trust.splunk.com/. On training with customer data, Splunk's privacy policy (splunk.com/privacy, in the copy read October 7, 2026) says: “We also use the information to improve our websites and Solutions, provide greater service and value, better understand your potential interest in our websites and Solutions, and provide you with more relevant ads and other content.”
Training on customer data
“Log In Back #### Log In #### Log In - Sign Up - My Dashboard - Instances - My Training - Logout…”
www.splunk.com/en_us/legal/terms/terms-of-use.html · read 2026-10-07
Retention windows vendors publish · What vendors say about training
What the pages say
Read automatically from the pages below and shown as printed. A missing row is a gap in our reading, not proof it isn’t there.
Certifications the trust page names · CSA STAR · FedRAMP · ISO 27001 · ISO 27017 · ISO 27018 · SOC 2 Type II
Laws the trust page names · GDPR · HIPAA
The pages' own stamps: effective 2026-08-14 · LAST UPDATED 2024-05-08 · Previous version of the Privacy Statement
The pages we watch
Every page we read, so you can check it. Each is re-read on a schedule, and we keep a dated copy when it changes.
Data processing agreement
www.splunk.com/content/dam/splunk2/en_us/pdfs/legal/splunk-data-protection-agreeement.pdf2026-10-15
Where we get nothing
What Splunk does not publish where we can read it
Of the 8 public pages we watch for Splunk, these give us nothing right now.
Model or system card
the page at that URL is not that document
www.splunk.com/en_us/products/model-context-protocol.htmlBefore you conclude anything
This only means we couldn’t read it on a public page. Splunk may share it in its agreement, a trust portal, or with any customer who asks.
So treat it as a question to ask them: “Can you send your sub-processor list, and tell us when it changes?”
What this page doesn’t tell you
No score.
Nothing here rates Splunk. A short notice window is a contract term, not a criticism.
Public pages only.
Private notices and negotiated terms are invisible to us. Your agreement may say something different.
Wrong? Tell us.
Corrections are free, always. We reply within 2–3 business days.
How we read a page · The change log
Work at Splunk? With an email at splunk.com you can claim this record, suggest pages we should watch, and take a free copy of it. Claiming changes nothing we publish.
Is Splunk in your product? Hear the morning we read a change.
You get the lines that moved, in Splunk’s own words, and the date any window closes. No card. Nothing to cancel.