Problem Statement
We want to formally document Auth0 as a sub-supplier in our Data Processing Agreement.
According to GDPR rules, Data Processors need a legal entity in the EU to comply with Data Protection Regulations. We are unable to identify Auth0 as a legal entity within the EU.
Solution
Auth0 is a subsidiary of Okta. Okta is the legal entity for GDPR purposes and is the parent company of Auth0.
Here is the list provided by our Compliance team:
Okta UK LTD (United Kingdom)
Okta France SAS (France)
Okta GmbH (Germany)
Okta Identity Netherlands BV (Netherlands)
Okta Switzerland GmbH (Switzerland)
Okta Identity Ireland Limited