Sub-Processor

A sub-processor is any third party engaged by a processor to process personal data on the controller's behalf. Typical VDR sub-processors include the underlying cloud infrastructure (AWS, Azure, GCP, OVH, IONOS), email-delivery providers, customer-support tools, and monitoring services. GDPR requires controllers to be informed of new sub-processors and given the opportunity to object.

Last updated: May 2026.