checkmarx.com has no validated subprocessor list in our data, but we have other evidence.

Certifications

Standard	Status	What this means	Source
ISO 27001	Company's own statement	Stated by the company. We have not checked an accreditation registry.	Source
SOC 2	Company's own statement	SOC 2 has no public registry, so this cannot be verified from public data.	Source

Vendor's own statement, retrieved from the source URL on the date shown. StrataDB does not verify the underlying claim. Data sources.