Blog

Guides and data on vendor privacy and risk: subprocessors, DPAs, data transfers, third-party risk, and what vendors do with your customers' data.

Subprocessors 26 Sep 2026 8 min read

GDPR Subprocessors: What Controllers Must Check

What GDPR expects of controllers about subprocessors: authorisation, records, transfers and the checks worth making when a vendor list changes.