Legal
Sub-processors
Every third party that processes data on our behalf, what it does, and where it operates.
Placeholder, the list is not final
This page must be a table, not prose, and it must be accurate on the day the product handles real data. It also has to stay in step with the privacy policy and the BAA. Publish it only once the production stack is settled.
Owner: Operator, reviewed by counsel
Current sub-processors
Table: vendor, purpose, data categories, region, and whether a BAA is in place.
How we choose them
The requirements a vendor has to meet before it touches customer data.
Notice of changes
How customers are told before a new sub-processor is added, and their right to object.