Sub-processors
The review status and evidence requirements for Defrost's launch vendor schedule.
On this page
Scope
A sub-processor is a service provider that processes customer personal data for Defrost in connection with the processor services covered by an accepted Data Processing Agreement.
A vendor is not necessarily a sub-processor for every customer or data flow. The final schedule must identify the service, processing purpose, personal data, data subjects, location, and role supported by evidence.
Launch vendor annex
No named launch vendor annex is approved for publication. Operator evidence must first reconcile production configuration, contracts, processing roles, purposes, and locations with the customer-facing schedule.
This draft does not activate, appoint, endorse, or imply the use of any vendor. Internal integrations, disabled code paths, planned services, and historical providers must not be presented as current sub-processors.
Changes, notice, and objections
An executed DPA may authorize Defrost to appoint sub-processors subject to specified flow-down terms and a change-notice process. The accepted agreement controls any notice, objection, mitigation, or termination right.
No notice period, objection standard, or remedy is promised by this preview. Those terms require an approved operating process and authorized counsel review.
Locations and international transfers
The final annex must state where each covered provider processes personal data and identify the approved safeguard for any restricted international transfer. A corporate address, infrastructure region, and data-processing location are not interchangeable.
Processing locations and transfer safeguards remain blocked until supported by vendor documentation, production evidence, and counsel approval.
Questions and publication status
Send sub-processor and transfer questions to privacy@defrostmail.com. The Privacy Policy and Data Processing Agreement explain the related roles.
Counsel review and launch vendor evidence are required before a named schedule may be published or treated as contractually current.