What is a sub-processor?
A sub-processor is a Vendor or Tool and Third Party which you use to offer your services when acting as a processor. You can think of these as sub-contractors or sub-contracted software you use to deliver your service.
You can find more examples and information about sub-processors here.
Adding a sub-processor
Add the Vendor or Tool and Third Party to your inventory. Follow these steps.
Go to the process that is attached to the vendor and make sure that the role is Processor. Go to Processes > Authenticating Users (in our example):
Select Legal Responsibility to be Processor and save changes.
If the vendor Auth0 and the process Authenticating Users are not missing any information, Auth0 will appear in your Privacy Policy and both will appear on your Record of Processing Activities (ROPA).
ℹ️ Note that the process Authenticating Users will not appear on your Privacy Policy as you are marked as a processor and your Privacy Policy only shows processes for which you are a Controller.
If you have a linked Data Processing Agreement for which you are a processor, the Vendor should appear as a sub-processor.
