Data Residency and Processing Reference

Objective

This reference presents information on the data processing and sub-processing locations for F5 Distributed Cloud Services user data.

Processing and Storage

Refer to the following table for locations of main data storage and processing.

Bot Defense

Includes IBD, SSD, and Aggregator management services.

Category Locations Notes
Persistent storage locations United States
Canada
European Union
Non-persistent processing locations See SOC Locations and TAM Locations
IBD EMEA: locations include Frankfurt, Ireland, Bahrain, Stockholm
APAC: Singapore, Sydney, Mumbai, Tokyo, Hong Kong, Jakarta
United States: North Virginia, Oregon
LATAM: North Virginia/Oregon, São Paulo
In case of IBD, there are four scrubbing center regions. The data is not persistently stored in these locations, and the customer's choice of scrubbing center is independent of the persistent storage location.

Authentication Intelligence

Category Locations Notes
Persistent storage locations United States
Non-persistent processing locations United States and TAM Locations

Account Protection

Category Locations Notes
Persistent storage locations United States
European Union
Canada
India
Australia
Non-persistent processing locations United States
Canada
Israel
Singapore
See SOC Locations and TAM Locations

Data Intelligence

This is same as SAFE or AP.

Client-Side Defense

Category Locations Notes
Persistent storage locations United States
Non-persistent processing locations United States
Israel
See SOC Locations and TAM Locations

Application Traffic Insight

Category Locations Notes
Persistent storage locations United States
European Union
Canada
Indonesia
Japan
Australia
Non-persistent processing locations United States
Israel
See SOC Locations and TAM Locations

Silverline WAF and DDOS

Category Locations Notes
Persistent storage locations United States
Non-persistent processing locations United States, Canada, Mexico, Brazil, United Kingdom, Germany, Poland, Bahrain, India, Singapore, Hong Kong, Japan, Australia

F5XC DDoS, WAF, API Protection, and CDN

Category Locations Notes
Persistent storage locations European Union
Non-persistent processing locations Atlanta
Dallas
Washington,DC
New York
San Jose
São Paulo
Toronto
Seattle
Chennai
Hong Kong
Melbourne
Sydney
Osaka
Tokyo
Singapore
Amsterdam
Frankfurt
Lisbon
London
Madrid
Paris
Stockholm

TAM Locations

  • United States
  • United Kingdom
  • United Arab Emirates
  • Poland
  • Singapore
  • Australia
  • Japan
  • India

SOC Locations

  • United States
  • Poland
  • Mexico
  • India
  • Singapore

Sub Processors

Entity Name Purpose Applicable Services Entity Country
Amazon Web Services, Inc. Repository for file sharing and storing encrypted backups and cloud services hosting platform. Silverline, Beacon, DNS, DNS Load Balancer, Essential App Protect, Distributed Cloud Bot Defense (Managed Service), Distributed Cloud Bot Defense (Self-Service), Distributed Cloud Mesh, Distributed Cloud App Stack, Volt Share United States
ZenDesk, Inc. Customer support ticket tracking. Silverline, Beacon, DNS, DNS Load Balancer, Essential App Protect, Distributed Cloud Mesh, Distributed Cloud App Stack, Distributed Cloud Bot Defense (Managed Service), Distributed Cloud Bot Defense (Self Service), Application Traffic Insight, Distributed Cloud Authentication Intelligence, Distributed Cloud Account Protection United States
Google LLC Communicates monitoring alerts to customers and a messaging application. Silverline, Distributed Cloud Mesh, Distributed Cloud App Stack United States
C-Serv Global Ltd Professional services. Silverline, Distributed Cloud Mesh, Distributed Cloud App Stack United Kingdom
Okta Identity as a service and access authentication. Blackfish, Distributed Cloud Bot Defense (Managed Service), Distributed Cloud Bot Defense (Self Service) United States
Google Cloud Hosting and storage. Blackfish, Distributed Cloud Bot Defense (Managed Service), Distributed Cloud Bot Defense (Self Service), Application Traffic Insight, Distributed Cloud Authentication Intelligence, Distributed Cloud Account Protection United States
Stripe, Inc. Payment processing. Distributed Cloud Mesh, Distributed Cloud App Stack United States
Databricks, Inc. Job orchestration for cloud services. Distributed Cloud Mesh, Distributed Cloud App Stack United States
Microsoft, Inc. O365 productivity software. Silverline, Beacon, DNS, DNS Load Balancer, Essential App Protect, Distributed Cloud Bot Defense (Managed Service), Distributed Cloud Mesh, Distributed Cloud App Stack United States
Microsoft, Inc. Azure hosting NGINX on Azure United States
GitLab, Inc. Development operations platform for customer support. Distributed Cloud Mesh, Distributed Cloud App Stack United States
Zapier, Inc. Workflow automation for customer support. Distributed Cloud Mesh, Distributed Cloud App Stack United States
Kentik Technologies, Inc. DDoS monitoring and logging. Silverline DDoS Protection Service, Distributed Cloud Mesh, Distributed Cloud App Stack United States
Lilac Cloud, Inc. Support and operation of CDN service. Distributed Cloud CDN United States
Accenture, Inc. Provide personnel to assist with support services. Distributed Cloud Account Protection United States, India

Note: You can subscribe to RSS Feeds to receive alerts whenever information on processing and sub-processing is updated.