Skip to content
  • There are no suggestions because the search field is empty.

List of sub-processors

Here's a list of Holm Security's sub-processors. Reach out to our DPO if you have questions.

Cleura AB

General

Company details:

  • Legal company name: Cleura AB
  • Organization ID/number: 556630-7806
  • Location of registration: Sweden
  • Owners outside EU/EES and Europe: none

Privacy details:

Location 
Location for processing and storage:

  • Sweden

Purpose
Cleura provides Holm Security with the infrastructure required to deliver the Holm Security Vulnerability Management Platform (VMP).

Data types

Security Center
Data types processed for all end customers and partners using Security Center :
  • Names
  • Countries
  • Email addresses
  • Phone numbers
  • IP-number

System & Network Security

Scanner Appliance and external scanners (cloud scanners)

No personal data is processed when using the product System & Network Security with a Scanner Appliance or external scanners (cloud scanners).

Device Agent

When using the product System & Network Security with the software endpoint agent Device Agent, the following personal data will be processed and stored:

  • Name
  • Email address
  • Username
  • MAC address
  • IP address

Web Application Security
 The product Web Application Security scans for exposed personal data, like personal IDs, on websites. Identified personal data is presented in Security Center and stored in the platform. In the scan policy, there's a possibility to exclude tests related to personal data. If the tests are excluded, no personal data will be processed or stored.  

If exposed when scanning a website:

  • Personal numbers/IDs

  • Credit card numbers

Phishing Simulation & Awareness Training
 The product Phishing Simulation & Awareness Training requires that personal email addresses be imported to Security Center and stored on the platform. These email addresses are used for simulating email attacks. Personal names can be imported or entered manually into Security Center to be used in the simulations. Personal data processed and stored for this product: 

  • Names
  • Countries
  • Email addresses
  • Phone numbers
  • Behavioral data in phishing simulations and awareness training