수탁자

Running a database platform means engaging other companies for infrastructure and for a handful of business functions. Each one is engaged under a written agreement with the same data-protection obligations we owe you, receives only the data its function requires, and is prohibited from using it for its own purposes.

Nothing below has access to the contents of your database cells. Cell storage and its backup archive stay inside the infrastructure categories, in the European Union.

Listed by the function performed rather than by vendor name, with the data categories that reach each one.

We publish categories rather than vendor names on the open web, and give the current named list - company, role, processing location, and transfer mechanism - to customers and to anyone running a vendor assessment, on request. Write to us with the subject line "Subprocessor notifications" and you will have it the same working day.

We are aware this is stricter than the common practice of publishing the list outright. If your procurement process requires a public list, tell us: that is a reason to change the policy, and we would rather change it than lose the assessment.

Ask to be added to the subprocessor change list and you will be told before a new subprocessor is engaged or an existing one is replaced, with at least 30 days' notice where the change is planned rather than forced by an incident.

The notice names the incoming processor, what it will process, where, and on what transfer mechanism.

If you have a reasonable, data-protection-based objection to a new subprocessor, raise it during the notice period. We will try to offer an alternative; where we cannot, you may terminate the affected service without penalty and export your data - see Data portability and exit.

Infrastructure processors operate in the European Union. Identity, payments, and email processors are established in or supported from the United States; those transfers rely on an adequacy decision where one applies, and otherwise on Standard Contractual Clauses with the supplementary measures identified in a transfer risk assessment.