Material changes to Abnormal Security’s public trust documents, each linked to its source.
Data as of 2026-10-22 — refreshed on a rolling bake, not live. · abnormalsecurity.com
Documents are silent on training
Reviewed by a Driftline analyst · as of 2026-09-26
3 material changes in the last 12 months
Summaries are AI-generated and can be wrong. Check the source document linked on each change before relying on it. Vendor? Request a correction.
high · AI subprocessor added · 2026-08-27 · Subprocessor List
Abnormal Security added 2 subprocessor(s): Microsoft Corporation, Twilio Inc.; removed 8: Microsoft Corporation (Azure OpenAI Service), Twilio Inc. (SendGrid), Abnormal AI Australia Pty Ltd, Abnormal AI Canada LTD., Abnormal AI PTE. LTD, Abnormal AI Netherlands B.V., Abnormal AI UK Ltd, Abnormal Security India Private Limited.
Source documentmedium · Data retention changed · 2026-08-21 · DPA
Abnormal Security expanded the scope of customer data subject to retention and transfer to their servers. The DPA now explicitly includes data that "Customer configures or elects the Service to process, analyze, or retain in connection with a capability of the Service," broadening the categories of data retained beyond just identified security risks and malicious activity.
Source documenthigh · AI subprocessor added · 2026-08-11 · Subprocessor List
Abnormal Security added 3 subprocessor(s): Microsoft Corporation (Azure OpenAI Service), IPQualityScore, Inc., Abnormal AI Netherlands B.V.; removed 2: Microsoft Corporation (Azure), Microsoft Corporation (Azure OpenAI).
Source documentPaste your vendor list and confirm your email, and we build your report and email it to you — the material changes across your vendors in the last 12 months, which of them added AI subprocessors or reserved the right to train on your data, and where your nth-party exposure concentrates. Free.