Sub-processors
The third parties that may process customer data, and what each is used for.
Before you rely on this
This document is a drafting framework prepared for a platform that is not yet trading. It has not been reviewed by qualified counsel in any jurisdiction, and it must be before it is relied upon by anybody.
This list must reflect the operator’s actual infrastructure. Publishing an inaccurate list is worse than publishing none, because customers rely on it for their own compliance.
1. Current sub-processors
The table below must be completed from the operator’s real infrastructure before this page is published. Each row needs the legal entity, the purpose, and the region the processing takes place in.
| SUB-PROCESSOR NAME | PURPOSE — processed in REGION, under DPA REFERENCE. |
|---|
2. Changes
We will give NOTICE PERIOD notice before adding a sub-processor that processes personal data, so that customers have the opportunity to object.
Before this page is published
The highlighted terms above are facts about a specific legal entity that this draft does not know. Each must be supplied, and the whole document reviewed by qualified counsel, before anybody relies on it.
- THE ACTUAL LIST of infrastructure providers, with entity name, purpose and processing region
- NOTICE PERIOD before a new sub-processor is added, and how customers are told
- DATA PROCESSING AGREEMENT reference for each