Zansa › Answers › Privacy, security and ownership
What is a sub-processor and why should I ask about them?
A sub-processor is another company that your provider uses to help process your data, such as a hosting or software service. You should ask because your data may flow to parties you have not vetted, and under GDPR a processor generally needs your authorisation to engage one. This is general information, not legal advice.
Ask for a list of sub-processors, where they are located, and how you will be told about changes. The provider should bind them to equivalent data protection terms and remains responsible for them.
AI tools and cloud services count as sub-processors if they handle your personal data, so include them in your questions. Rules differ by country and sector, so check how this applies to you with a qualified adviser.
Want this applied to your business? Zansa builds dashboards and forecasts for small and mid-sized companies worldwide. Start with a free intro call.
Book a call