Data Residency and Processing Reference

Objective

This reference presents information on the data processing and sub-processing locations for F5 Distributed Cloud Services user data.

Processing and Storage

Refer to the following table for locations of main data storage and processing.

Bot Defense

Includes IBD, SSD, and Aggregator management services.

Category Locations Notes
Persistent storage locations United States
Canada
European Union
Non-persistent processing locations See SOC Locations and TAM Locations
IBD EMEA: locations include Frankfurt, Ireland, Bahrain, Stockholm
APAC: Singapore, Sydney, Mumbai, Tokyo, Hong Kong, Jakarta
United States: North Virginia, Oregon
LATAM: North Virginia/Oregon, São Paulo
In case of IBD, there are four scrubbing center regions. The data is not persistently stored in these locations, and the customer's choice of scrubbing center is independent of the persistent storage location.

Authentication Intelligence

Category Locations Notes
Persistent storage locations United States
Non-persistent processing locations United States and TAM Locations

Account Protection

Category Locations Notes
Persistent storage locations United States
European Union
Canada
Indonesia
Australia
Non-persistent processing locations United States
Canada
Israel
Singapore
See SOC Locations and TAM Locations

Data Intelligence

This is same as SAFE or AP.

Client-Side Defense

Category Locations Notes
Persistent storage locations United States
Non-persistent processing locations United States
Israel
See SOC Locations and TAM Locations

Application Traffic Insight

Category Locations Notes
Persistent storage locations United States
European Union
Canada
Indonesia
Japan
Australia
Non-persistent processing locations United States
Israel
See SOC Locations and TAM Locations

Silverline WAF and DDOS

Category Locations Notes
Persistent storage locations United States
Non-persistent processing locations United States, Canada, Mexico, Brazil, United Kingdom, Germany, Poland, Bahrain, India, Singapore, Hong Kong, Japan, Australia

F5XC DDoS, WAF, API Protection, and CDN

Category Locations Notes
Persistent storage locations European Union
Non-persistent processing locations Atlanta
Dallas
Washington,DC
New York
San Jose
São Paulo
Toronto
Seattle
Chennai
Hong Kong
Melbourne
Sydney
Osaka
Tokyo
Singapore
Amsterdam
Frankfurt
Lisbon
London
Madrid
Paris
Stockholm

TAM Locations

  • United States
  • United Kingdom
  • United Arab Emirates
  • Poland
  • Singapore
  • Australia
  • Japan
  • India
  • Canada

SOC Locations

  • United States
  • Poland
  • Mexico
  • India
  • Singapore

Subprocessors

Entity Name Purpose Applicable Services Entity Country
Amazon Web Services, Inc. Repository for file sharing and storing encrypted backups and cloud services hosting platform. Silverline, Beacon, DNS, DNS Load Balancer, Essential App Protect, Distributed Cloud Bot Defense (Managed Service), Distributed Cloud Bot Defense (Self-Service), Distributed Cloud Mesh, Distributed Cloud App Stack, Volt Share United States
ZenDesk, Inc. Customer support ticket tracking. Silverline, Beacon, DNS, DNS Load Balancer, Essential App Protect, Distributed Cloud Mesh, Distributed Cloud App Stack, Distributed Cloud Bot Defense (Managed Service), Distributed Cloud Bot Defense (Self Service), Application Traffic Insight, Distributed Cloud Authentication Intelligence, Distributed Cloud Account Protection United States
Google LLC Communicates monitoring alerts to customers and a messaging application. Silverline, Distributed Cloud Mesh, Distributed Cloud App Stack United States
C-Serv Global Ltd Professional services. Silverline, Distributed Cloud Mesh, Distributed Cloud App Stack United Kingdom
Okta Identity as a service and access authentication. Blackfish, Distributed Cloud Bot Defense (Managed Service), Distributed Cloud Bot Defense (Self Service) United States
Google Cloud Hosting and storage. Blackfish, Distributed Cloud Bot Defense (Managed Service), Distributed Cloud Bot Defense (Self Service), Application Traffic Insight, Distributed Cloud Authentication Intelligence, Distributed Cloud Account Protection United States
Stripe, Inc. Payment processing. Distributed Cloud Mesh, Distributed Cloud App Stack United States
Databricks, Inc. Job orchestration for cloud services. Distributed Cloud Mesh, Distributed Cloud App Stack United States
Microsoft, Inc. O365 productivity software. Silverline, Beacon, DNS, DNS Load Balancer, Essential App Protect, Distributed Cloud Bot Defense (Managed Service), Distributed Cloud Mesh, Distributed Cloud App Stack United States
Microsoft, Inc. Azure hosting NGINX on Azure United States
GitLab, Inc. Development operations platform for customer support. Distributed Cloud Mesh, Distributed Cloud App Stack United States
Zapier, Inc. Workflow automation for customer support. Distributed Cloud Mesh, Distributed Cloud App Stack United States
Kentik Technologies, Inc. DDoS monitoring and logging. Silverline DDoS Protection Service, Distributed Cloud Mesh, Distributed Cloud App Stack United States
Lilac Cloud, Inc. Support and operation of CDN service. Distributed Cloud CDN United States
Accenture, Inc. Provide personnel to assist with support services. Distributed Cloud Account Protection United States, India

F5 Affiliates

The Subprocessors for the SaaS Offerings also include F5 Affiliates.

Entity Name Country
F5 Networks De Argentina S.R.L. Argentina
F5 Networks Australia Pty. Limited Australia
F5 Networks Belgium BVBA Belgium
FCinco Representacoes do Brasil LTDA Brazil
F5 Networks Canada LTD. Canada
F5 Networks Chile Limitada Chile
F5 Networks China China
F5 Networks Colombia S.A.S. Colombia
F5 Networks Zagreb LLC Croatia
F5 Networks Finland Oy Finland
F5 Networks SARL France
F5 Networks GmbH Germany
F5 Networks Hong Kong Limited Hong Kong
F5 Networks India Private Limited India
F5 Networks Innovation Private Limited India
F5 Networks, (Israel) Ltd. Israel
F5 Networks SRL Italy
F5 Networks Japan GK Japan
F5 Networks Korea Co., Ltd. South Korea
F5 Networks Malaysia Sdn. Bhd. Malaysia
F5 Networks Mexico S de RL de CV Mexico
F5 Networks Benelux B.V. Netherlands
F5 Networks New Zealand Limited New Zealand
F5 Networks Poland sp. z o.o. Poland
F5 Networks Singapore Pte Ltd Singapore
F5 Networks South Africa South Africa
F5 Networks Iberia SL Spain
F5 Networks Sweden Aktiebolag Sweden
F5 Networks Taiwan Company Limited Taiwan
F5 Networks Turkey Teknoloji Limited Sirketi Turkey
F5 Networks Ltd United Kingdom
F5, Inc. United States
NGINX International Ltd Ireland
NGINX Ltd Russia
NGINX Asia Pacific Pte. Singapore
Shape Security, Inc. United States
Volterra, Inc. United States
Volterra India Private Limited India
Volterra SG PTE. LTD Singapore
Acorus Networks SAS France

Note: You can subscribe to RSS Feeds to receive alerts whenever information on processing and sub-processing is updated.