Subprocessor governance
Register snapshot
Quarterly housekeeping
Operations reviews payment rails, ticketing, infra upstreams on a rolling quarterly basis unless urgent risk signals appear. Routine vendor churn that does not change personal-data categories rolls into the next register revision date.
Material-change triggers
- New category touching billing PAN/GST artefacts, PHI-equivalent payloads, or large-scale egress of customer content
- Processor insolvency affecting invoice settlement or ticket retention
- Regulatory questionnaires mandating contractual assignment of sub-processing
Concrete notice mechanics live in Privacy Policy — materially adverse changes use email/client-area bulletins for active subscriptions.
Formal matrix for procurement spreadsheets: [email protected].