Register
Subprocessor Register Template
This template defines the schema for the organization's Subprocessor Register. The register records all third-party organizations that process personal data on behalf of the organization as data processors or subprocessors. It supports GDPR Article 28 compliance, enables transparency with data subjects and supervisory authorities, and provides the basis for subprocessor notifications to customers where contractually required.
- Type
- Register
- Version
- 1.0.6
- Date
- 2026-10-29
- Owner
- Supplier Risk Maintainer
- Approving authority
- Governance Library Maintainer
- Classification
- Public
- Confidentiality
- Public
- Category
- Supply Chain Governance: Data Processing
- Review frequency
- Updated upon each new subprocessor engagement or change; full register review annually
- Licence
- CC BY-SA 4.0
Read the full text on GitHub (opens in a new tab)
Outline
- Purpose
- Legal context
- Subprocessor record schema
- Sub-subprocessor section
- Register governance
- Connection to records of processing activities (article 30)
- Notification template
Related documents
- supply-chain/
README.md (opens in a new tab) source - Supplier and Cloud Governance Frameworksupply-chain
- Supplier Security and Privacy Assurance Standardsupply-chain
- Supplier Risk Register Templatesupply-chain
- Privacy and Data Governance Policyprivacy
- Privacy Impact and Cross-Border Transfer Procedureprivacy
- Cross-Border Data Flow Registerprivacy
- Data Retention Schedulegovernance
- Legal and Regulatory Compliance Policycompliance
Next
All Documents