Trust FAQ's

The details of the processing for each Proofpoint Product are captured in a table available here: https://www.proofpoint.com/us/legal/trust/product-processing-operations

The retention period is detailed for each Proofpoint Product in the last column of the right of the table accessible here: https://www.proofpoint.com/us/legal/trust/product-processing-operations

Additional information on personal data processing for each Proofpoint product has been detailed in Personal Data Sheets and Data Maps which are available here: https://www.proofpoint.com/us/legal/trust/data-privacy-and-security-information-sheets

YES all details are available on this page, in the last column on the right: https://www.proofpoint.com/us/legal/trust/subprocessors

Location of servers for each Proofpoint product is detailed in the last column of the table available here: https://www.proofpoint.com/us/legal/trust/subprocessors

Subprocessors are listed per Proofpoint product in the table available here: https://www.proofpoint.com/us/legal/trust/subprocessors

Location of the subprocessors for each Proofpoint Product are detailed in the last column of the table available here: https://www.proofpoint.com/us/legal/trust/subprocessors

Proofpoint may indeed be subject to governmental queries from the US government, as well as from European agencies. Proofpoint has set up comprehensive statement on how those queries are handled, which is available here.

Proofpoint has gathered all technical and organizational measures in an appendix to its proposed DPA, which is available for download and counter signature here (several languages available).

Proofpoint’s strategy hasn’t encompassed ISO certification for any of Proofpoint Products. All certifications of the Proofpoint’s products are available here (SOC 2, FedRAMP, etc…)

YES, Proofpoint has a DPA available for signature by customers, in a pre-signed version, in several languages and ready for download and counter signature. Please visit this page: https://www.proofpoint.com/us/legal/trust/dpa-and-other-important-documents

Within the Proofpoint DPA, international transfers are relying upon the signature of the CCs as the legal basis of the transfer, under the model of the European Union enacted under EU European Commission Decision (EU) 2021/914.

Customer is invited to subscribe to the automated notification process by entering a corresponding email at the bottom of this webpage: https://www.proofpoint.com/us/legal/trust/subprocessors

The Standard Contractual Clauses are attached as a schedule 2 to the Proofpoint DPA, which is available pre-signed here in several language and ready for download and countersignature.

As a global organization, Proofpoint has established a global compliance framework to help ensure compliance with applicable data protection laws. All related documents, agreements, and addenda are available for download and counter signature (unless already pre-signed) here: https://www.proofpoint.com/us/legal/trust/dpa-and-other-important-documents