From 263c11a7386ca79d8f3f45a44b94c92577b8b00b Mon Sep 17 00:00:00 2001 From: Alex Mitchell <105945793+alexmitchelliii@users.noreply.github.com> Date: Mon, 17 Jul 2023 13:28:14 -0500 Subject: [PATCH] Update security-policies.md (#12814) Added Authorized Sub-Processors for Fleet Cloud services to be referenced in standard DPA # Checklist for submitter If some of the following don't apply, delete the relevant line. - [ ] Changes file added for user-visible changes in `changes/` or `orbit/changes/`. See [Changes files](https://fleetdm.com/docs/contributing/committing-changes#changes-files) for more information. - [ ] Documented any API changes (docs/Using-Fleet/REST-API.md or docs/Contributing/API-for-contributors.md) - [ ] Documented any permissions changes - [ ] Input data is properly validated, `SELECT *` is avoided, SQL injection is prevented (using placeholders for values in statements) - [ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for new osquery data ingestion features. - [ ] Added/updated tests - [ ] Manual QA for all new/changed functionality - For Orbit and Fleet Desktop changes: - [ ] Manual QA must be performed in the three main OSs, macOS, Windows and Linux. - [ ] Auto-update manual QA, from released version of component to new version (see [tools/tuf/test](../tools/tuf/test/README.md)). --- handbook/business-operations/security-policies.md | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/handbook/business-operations/security-policies.md b/handbook/business-operations/security-policies.md index de42c04b38..772f91dd32 100644 --- a/handbook/business-operations/security-policies.md +++ b/handbook/business-operations/security-policies.md @@ -373,6 +373,12 @@ Encryption and key management for local disk encryption of end-user devices foll 4. Transmission encryption keys are limited to use for one year and then must be regenerated. +### Authorized Sub-Processors for Fleet Cloud services + +| Sub-processor Name | Purpose | Location | +| ------------------ | ------- | -------- | +| Amazon Web Services, Inc. and sub-processors located at https://aws.amazon.com/compliance/sub-processors/ | Database hosting platform | USA | + ## Human resources security policy > _Created from [JupiterOne/security-policy-templates](https://github.com/JupiterOne/security-policy-templates). [CC BY-SA 4 license](https://creativecommons.org/licenses/by-sa/4.0/)_