Companies / Sumo Logic / Subprocessors
Sumo Logic provides a cloud platform for log analytics, security monitoring, and observability. It serves security and engineering teams who monitor, troubleshoot, and defend their systems.
Summarized from its homepage on 3 Nov 2026.
855 Main St., Suite 100, Redwood City, CA, 94063, US
Subprocessors of Sumo Logic
Sumo Logic declares 3 subprocessors.
| Subprocessor | Purpose |
|---|---|
| Data Hosting; Generative AI features and functionalities optional through AWS Bedrock | |
| Customer Success Platform with genAI for communication utilizing their Staircase feature | |
| Customer Support Ticketing System |
Certifications
| Standard | What the source says | Checked |
|---|---|---|
| FedRAMPListed in registry | Sumo Logic, ModerateListed as FedRAMP Authorized in the official FedRAMP Marketplace data. | 8 Nov 2026Source |
| HIPAACompany's statement | “HIPAA PCI DSS 4.0.1 CCPA Secure”The company's own statement of compliance. There is no official HIPAA certification or registry. | 11 Nov 2026Source |
| ISO 27001Company's statement | “ISO 27001 GDPR HIPAA PCI DSS 4.0.1”The company's own statement. We have not checked an accreditation registry. | 11 Nov 2026Source |
| PCI DSSCompany's statement | “PCI DSS 4.0.1 CCPA Secure by design”The company's own statement. We have not checked a card network registry. | 11 Nov 2026Source |
| SOC 2 Type IICompany's statement | “SOC 2 Type II FedRAMP Moderate Authorized”The company's own statement. SOC 2 has no public registry; the report itself is shared by the company, usually under NDA. | 11 Nov 2026Source |
We last read its homepage on 11 Nov 2026 and the FedRAMP Marketplace on 8 Nov 2026. A standard not shown here was not found in these sources. That does not mean Sumo Logic lacks it.
Vendor's own statement, retrieved from the source URL on the date shown. StrataDB does not verify the underlying claim. Data sources.
See Sumo Logic's full stack
Every vendor with its source and date, and an alert when Sumo Logic adds or drops one. The same lookup works for any company.
- Every company and vendor, with its public source
- 100 API calls a month, plus MCP and the Chrome extension
- Work email only. No card, no sales call