# Subprocessor Page

Last Modified: November 26, 2025

Abnormal AI uses certain service providers (as well as Abnormal affiliates) that may act as subprocessors when we provide our solutions to you. A subprocessor is a third party (or an affiliate) that we use to process personal data on behalf of our customers, who are the controllers of that personal data.

Abnormal performs thorough due diligence on all subprocessors, and all subprocessors are required to satisfy at least equivalent data protection and information security obligations as those provided to you by Abnormal, so your data is always protected.

This page describes the subprocessors Abnormal engages in.

1. [Core Subprocessors](https://abnormal.ai/subprocessors/__pm__plasmic_seed%3D3#infrasubprocessors)

2. [Product Subprocessors](https://abnormal.ai/subprocessors/__pm__plasmic_seed%3D3#productsubprocessors)

3. [Customer Support-Specific Subprocessors](https://abnormal.ai/subprocessors/__pm__plasmic_seed%3D3#supportsubprocessors)

4. [Abnormal AI Affiliates](https://abnormal.ai/subprocessors/__pm__plasmic_seed%3D3#securityaffiliates)

## 1. Core Subprocessors

Abnormal uses the following subprocessors to support its core offering (Inbound Email Security).

| Subprocessor                             | Purpose                                                  | Location                             |
|-----------------------------------------|----------------------------------------------------------|-------------------------------------|
| Amazon Web Services, Inc.               | Hosting and provision of the Abnormal Service            | United States, E.U. (Ireland)      |
| Microsoft Corporation (Azure)           | Hosting for the Abnormal Service                          | E.U. (Ireland)                     |
| Databricks, Inc.                      | Analytics Infrastructure Provider                          | United States, E.U. (Ireland)      |
| Microsoft Corporation (Azure) OpenAI   | Artificial intelligence-enabled functionality             | United States, E.U (France, Sweden)|

1. The applicable location is determined according to the Customer’s chosen selection upon implementation, or as otherwise agreed with Abnormal.
2. This only applies to certain existing customers implemented in Azure Ireland as part of their original selection during implementation.

## 2. Product Subprocessors

In addition to the subprocessors listed above, the following subprocessors are used for specific Abnormal add-on products and features, as outlined below.

| Subprocessor                             | Purpose                                                  | Location                             |
|-----------------------------------------|----------------------------------------------------------|-------------------------------------|
| Twilio Inc. (SendGrid)                 | Email functionality for AI Security Mailbox              | United States                       |
| Microsoft Corporation (Azure) OpenAI   | AI Security Mailbox, AI Phishing Coach, ...              | United States, E.U (France, Sweden)|

1. The applicable location is determined according to the Customer’s chosen selection upon implementation, or as otherwise agreed with Abnormal.

## 3. Customer Support-Specific Subprocessors

Abnormal uses the following subprocessors to provide support services to customers.

| Subprocessor                             | Purpose                                                  | Location                             |
|-----------------------------------------|----------------------------------------------------------|-------------------------------------|
| Atlassian Corporation Plc               | Troubleshoot Ticketing System and Bug Fixes             | United States                       |
| Gainsight, Inc.                        | Customer Success and Product Experience                   | United States                       |
| Salesforce, Inc.                       | Customer Relationship Management Tool and Customer Support| United States                       |

### 4. Abnormal Security Affiliates

The entities listed below may be engaged by Abnormal as subprocessors to provide support for our products.

| Affiliate Name                          | Purpose                                                  | Location                             |
|-----------------------------------------|----------------------------------------------------------|-------------------------------------|
| Abnormal Security Australia Pty Ltd.    | To provide customer support to deliver the Service      | Australia                           |
| Abnormal Security Canada LTD.           | To provide customer support to deliver the Service      | Canada                              |
| Abnormal Security SGP PTY.LTD          | To provide customer support to deliver the Service      | Singapore                           |
| Abnormal Security UK Ltd.               | To provide customer support to deliver the Service      | United Kingdom                      |
| Abnormal Security India Private Ltd.    | To provide customer support to deliver the Service      | India                               |

Please reach out to [support@abnormalsecurity.com](mailto:support@abnormalsecurity.com) for more information on subprocessors applicable to you.