Cisco Webex

Video conferencing · webex.com · last read 2026-10-12

Identity

Legal entity	Cisco Systems, Inc.
HQ	US
Parent company	—
Ultimate ownership	US
EU contracting entity	—
LEI	549300LKFJ962MZ46593
US CLOUD Act reach	Contracting entity incorporated in the US
Source	cisco.com · 2026-10-08

Legal entity from the vendor's own terms. LEI, registered country and parent company from the Global LEI Index (GLEIF); ownership is left empty where GLEIF names no parent. The CLOUD Act row is arithmetic over those countries, not an assessment of risk.

Data location

Region	EU data location	Minimum plan	Source	Observed
EU	EU by default	—	help.webex.com	2026-10-08

EU: During provisioning, the Country Selector assigns a new organization's data to a region (Europe or North America) based on the country it maps to; the customer doesn't opt in separately. The document names no plan and no cost.

Subprocessor chain

No subprocessor list transcribed. Either the vendor does not publish one where we could reach it, or it is gated — see the documents table below for which.

Processing terms

No data processing agreement read yet.

Assurance

Scheme	Status	Scope	Source	Observed
GDPR	Claimed	Webex	help.webex.com	2026-10-08
ISO/IEC 27001:2013 · ISO27001	Claimed	Webex	help.webex.com	2026-10-08

Claimed means the vendor asserts the scheme on its own page and offers nothing further. Available on request means the report or certificate exists but sits behind a request, a login or an NDA. Neither is a certificate we have seen. That is a distinction an auditor makes, so we make it too.

Official registers

Register	Offering, as the register names it	Status	Level	Valid until	Observed
Data Privacy Framework List (US)	EU-U.S. Data Privacy Framework · Cisco Systems, Inc.	Active	HR data, non-HR data	2027-03-13	2026-10-09
Data Privacy Framework List (US)	Swiss-U.S. Data Privacy Framework · Cisco Systems, Inc.	Active	HR data, non-HR data	2027-03-13	2026-10-09
Data Privacy Framework List (US)	UK Extension to the EU-U.S. DPF · Cisco Systems, Inc.	Active	HR data, non-HR data	2027-03-13	2026-10-09
EU Cloud Code of Conduct (GDPR Art. 40)	Cisco International Limited (webex.com) · Cisco International Limited	adherent	Level 3	2027-06-28	2026-10-09
FedRAMP Marketplace (US)	Webex for Government · Cisco Systems Inc.	FedRAMP Authorized	Moderate	—	2026-10-09
Global LEI Index (GLEIF)	CISCO SYSTEMS, INC. · CISCO SYSTEMS, INC.	ISSUED	US-DE	2027-05-18	2026-10-09

ACN qualified cloud (Italy): checked 2026-10-09, no entry under Cisco Systems, Inc.; Cisco Webex
DORA critical ICT third-party providers (ESAs): checked 2026-10-09, no entry under Cisco Systems, Inc.; Cisco Webex
Data Privacy Framework List (US): checked 2026-10-09, 3 entries under Cisco Systems, Inc.; Cisco Webex
EU Cloud Code of Conduct (GDPR Art. 40): checked 2026-10-09, 1 entry under Cisco Systems, Inc.; Cisco Webex
FedRAMP Marketplace (US): checked 2026-10-09, 1 entry under Cisco Systems, Inc.; Cisco Webex
SecNumCloud qualified services (ANSSI, France): checked 2026-10-09, no entry under Cisco Systems, Inc.; Cisco Webex

What the authority publishes, not what the vendor claims. An entry covers the offering it names and nothing else: a FedRAMP authorisation for a government edition says nothing about the commercial service. No entry is not a finding about security - most vendors never apply - and an entry filed under a name not listed above would not have been found.

Support window

Product	Support period	State	SBOM	Source	Observed
Webex App	—	Not declared	unknown	help.webex.com	2026-10-11

Vulnerability reporting: no security.txt at the well-known path (read 2026-10-11)

Documents

What we read, how it was disclosed, and when.
Document	Disclosure	Transcription	HTTP	Observed
certifications	Public	full	200	2026-10-08
lifecycle	Public	full	200	2026-10-11
residency	Public	full	200	2026-10-08

History

Nothing has moved since we started watching this vendor on 2026-10-08. Changes appear here only after a human has reviewed them.