Data assurance
Data Processing & Subprocessors
Roles, instructions, security measures, subprocessors, international transfers and deletion/return arrangements are established for the actual engagement. We do not publish an invented universal processor list where the systems and scope can differ by client.
DPA framework
A reusable UK GDPR-oriented drafting template is maintained in the assurance pack. The executed contract must reflect the real controller/processor relationship, data, systems, retention and security measures.
Subprocessor register
Subprocessors are recorded by service, processing purpose, data type, location/transfer mechanism, status and verification date. Client-specific processors are disclosed as required by contract.
Download register schemaThis page provides operational transparency, not legal advice. Engagement-specific data protection terms should be reviewed appropriately.