Subprocessors and Locations

BMC Helix services rely on a limited set of approved subprocessors to support delivery and operation of cloud services (such as infrastructure hosting, monitoring, and support activities). Subprocessors are contractually required to meet BMC Helix's security and privacy obligations. BMC Helix remains accountable for the protection of customer data.

Use of subprocessors

Subprocessors may support:

  • cloud infrastructure and hosting,
  • data storage and backups as part of service operation,
  • monitoring, security, and operational support,
  • customer support and service delivery.

Subprocessors are assessed before engagement and reviewed over time for alignment with BMC Helix's security and privacy requirements.

BMC Helix may integrate with third party service providers, including AI or platform services, based on customer configuration and choice.

Data processing locations

BMC Helix services are delivered from multiple cloud locations designed to support availability, resiliency, and regulatory requirements. Customer data may be processed in regions associated with the selected service location. Access to customer data by BMC Helix personnel or subprocessors is restricted to authorized individuals with a legitimate business need and governed by access controls, monitoring with audit trail.

Privacy and regulatory safeguards

International transfers of personal data are protected using approved legal mechanisms, including Binding Corporate Rules, EU & UK Standard Contractual Clauses, and contractual commitments as set out in BMC Helix's Data Processing Agreement.

Transparency and updates

Information about approved subprocessors and processing locations is made available to support privacy, risk, and regulatory assessments. Material changes are managed in accordance with contractual and regulatory obligations.