Compliance and Privacy Assurance

SOC 2

AppDynamics’ privacy controls are examined at least once a year by a qualified and independent third-party auditor as part of AppDynamics’ SOC 2 Type II audit. Audit reports are available to customers upon request, as well as potential customers under NDA. Our SOC 2 has been in place for five years and covers security, availability, confidentiality, and privacy.

Personnel Controls

All employees are required to undergo annual security training and must comply with Cisco’s Global Personal Data Protection and Privacy Policy and binding corporate rules.

GDPR

The GDPR reinforces existing data protection principles in the European Union (EU) and expands legal protections and privacy rights for EU citizens. A cross-functional effort between our privacy and product teams has led to many product enhancements designed to make it simple for our customers to use our products and SaaS service in compliance with GDPR. Learn more about AppDynamics' compliance with GDPR.

Privacy Shield

We comply with Privacy Shield, a voluntary framework that introduced stronger protections for the flow of data from Europe to the United States. All personal data received from the European Union and Switzerland are subject to the Framework’s applicable principles. To learn more about the Privacy Shield Frameworks and to view our certification, visit the U.S. Department of Commerce's Privacy Shield List. Read the blog post written by Cisco’s Chief Privacy Officer about our participation in this framework.

Privacy Policy

Our privacy policy reflects our commitment to protecting personal data. It provides details on the type of personal information we collect, how we store it, how we use it, and what rights individuals have and how to exercise them. Read our Privacy Policy.

Subprocessors

AppDynamics performs due diligence reviews of all third parties that support the delivery and availability of our products and services. Contractual agreements ensure sub-processing meets our high standards and applicable laws. Learn more about the subprocessors we use.

What is a subprocessor?

AppDynamics engages third parties to support the delivery and availability of our products and services. Some of these third parties are engaged as “subprocessors” to host or process customer data, which may include personal data.

AppDynamics’ subprocessors

Prior to engaging any third party that accesses production infrastructure or processes customer data, including the subprocessors listed below, AppDynamics performs due diligence reviews of each third party's information security program, privacy practices, confidentiality commitments and puts appropriate contractual terms in place to ensure sufficient guarantees that the processing will meet the high standards required by AppDynamics and applicable laws.

A list of subprocessors currently used to provide AppDynamics software products and services is set out below. AppDynamics will update this page when necessary. Please review this page frequently for any updates and to view the most current subprocessor list.

Infrastructure subprocessors

Other subprocessors

AppDynamics Affiliates

AppDynamics may engage any of its affiliates listed below as a subprocessor, depending where a customer may be geographically located and what products and services a customer consumes.

Data Residency

We offer customers the ability to meet data residency requirements in multiple jurisdictions including the EU, the United States, Australia and India.

International Data Transfers

We transfer personal data according to applicable laws. If your use of our products and services requires us to transfer personal data outside the European Economic Area and/or Switzerland, we follow mechanisms laid out in the EU-US Privacy Shield or the Swiss-US Privacy Shield. We are also able to enter into the Standard Contractual Clauses (commonly referred to as EU Model Clauses).