Vendor record · wiz.io
What Wiz promises about your data.
Where Wiz publishes its promises, how long it gives you when it adds a sub-processor, and what has changed.
- Where it publishes
We haven't found a sub-processor list from Wiz anywhere we've looked.
- What has changed
We've recorded no change to its sub-processor list or data processing agreement between August 31, 2026 and September 15, 2026. Subscribers hear about a change the morning we read it; the public record shows it 30 days later.
- Its window
When it adds a sub-processor, its clause at wiz.io/data-processing-agreement (read September 13, 2026) gives you 10 days to object.
- Window
- 10
- Pages
- 4
- Copies
- 16
days to object when it adds a sub-processor
pages we watch
dated copies of all its pages, since August 31, 2026
Wiz DPA
Wiz's data processing agreement gives 10 days to object to a new sub-processor. Here is the clause, from our September 13, 2026 copy:
10
days to object
“Failure to object to such Sub-Processor in writing within ten (10) days following Wiz's notice shall be deemed as acceptance of the Sub-Processor.”
Found automatically and not yet checked by a person. The quote is exact, and the link goes to the source. Nothing here says whether the term is good or bad, only that Wiz published it.
wiz.io/data-processing-agreement · read 2026-09-13 · fingerprint cdbea69a54eefc13…
How it says it sends notice
“Wiz offers a mechanism for Customers to subscribe to notifications of changes to Wiz's Sub-Processor List via https://www.wiz.io/sub-processor-list.”
wiz.io/data-processing-agreement · read 2026-09-13
Notice windows across every vendor we watch · Silence as consent
Wiz sub-processors
We have not found a sub-processor list published by Wiz anywhere we looked.
Every public change we have recorded · Where vendors publish their lists
How long Wiz keeps your data
Two statements on retention, quoted from its own pages. Wiz's privacy policy (wiz.io/legal/privacy, in the copy read October 10, 2026) says: “We retain most types of Service Data for a set period of up to 180 days (the exact number depends on the specific type of data).”
Retention
“Notwithstanding Wiz's data retention policy, if upon termination, Customer requests expedited deletion of its Customer Data, Customer Data shall be deleted within 63 days. 3.5.”
wiz.io/data-processing-agreement · read 2026-09-13
Training on customer data
“To the maximum extent permitted by law but without derogating from Wiz's obligations under this Agreement, Wiz shall not bear and expressly disclaims all responsibility or liability of any kind relating to such Third Party Integrations, including, without limitation, for any disclosure of, access to or other processing of Customer Data by Third Party Service providers. 7.5. AI.*…”
wiz.io/data-processing-agreement · read 2026-09-13
Training on customer data
“Notwithstanding the foregoing, Customer Data may be used to train Customer tenant-specific AI models to provide customized findings and recommendations to Customer solely for Customer's benefit.”
wiz.io/data-processing-agreement · read 2026-09-13
Training on customer data
“This includes suggesting ways to better secure your account or data, options to reduce service charges or improve performance, and information about new or related products and features, including third party products that can be used with the Services.”
wiz.io/legal/privacy · read 2026-10-10
Retention windows vendors publish · What vendors say about training
What the pages say
Read automatically from the pages below and shown as printed. A missing row is a gap in our reading, not proof it isn’t there.
Certifications the trust page names · ISO 27001 · ISO 27017 · ISO 27018 · ISO 27701 · PCI DSS · SOC 2 Type II · SOC 3
Laws the trust page names · HIPAA
The pages' own stamps: Effective 2024-06-20 · Effective Date 2026-09-28 · Last modified 2026-09-28 · Last updated 2023-02-23 · published on 2026-07-09 · Updated 2023-11-15
The pages we watch
Every page we read, so you can check it. Each is re-read on a schedule, and we keep a dated copy when it changes.
Where we get nothing
What Wiz does not publish where we can read it
Of the 4 public pages we watch for Wiz, these give us nothing right now.
Sub-processor list
we have not found one published anywhere we looked
Before you conclude anything
This only means we couldn’t read it on a public page. Wiz may share it in its agreement, a trust portal, or with any customer who asks.
So treat it as a question to ask them: “Can you send your sub-processor list, and tell us when it changes?”
What this page doesn’t tell you
No score.
Nothing here rates Wiz. A short notice window is a contract term, not a criticism.
Public pages only.
Private notices and negotiated terms are invisible to us. Your agreement may say something different.
Wrong? Tell us.
Corrections are free, always. We reply within 2–3 business days.
How we read a page · The change log
Work at Wiz? With an email at wiz.io you can claim this record, suggest pages we should watch, and take a free copy of it. Claiming changes nothing we publish.
Is Wiz in your product? Hear the morning we read a change.
You get the lines that moved, in Wiz’s own words, and the date any window closes. No card. Nothing to cancel.