Effective date: [EFFECTIVE DATE] · Issued by [LEGAL ENTITY NAME]
We may use vetted third parties for hosting, authentication, email delivery, diagnostics, support and other functions needed to operate the service. The exact providers depend on your deployed architecture and enabled features.
Do not publish this page as a final register until the actual providers are verified.
Providers and processing locations: [INSERT VERIFIED SUBPROCESSORS AND LOCATIONS].
For each provider, record its legal name, service purpose, data categories, processing countries, transfer mechanism and a link to its privacy or DPA terms. Microsoft is also an independent provider to customers for their Microsoft 365 environment; its role must be assessed rather than automatically classified as our subprocessor.
Where we act as processor and rely on general authorisation, we will provide notice of intended additions or replacements and a reasonable opportunity for customers to object on data protection grounds in accordance with our DPA.
For register enquiries, contact [PRIVACY CONTACT EMAIL].