Subprocessors

1. What Are Subprocessors?

Traceable Digital uses carefully selected third-party service providers ("subprocessors") to operate and deliver the Platform. A subprocessor is any entity that processes personal data or customer data on our behalf in the course of providing our services.

Under the General Data Protection Regulation (GDPR) and our Data Processing Agreement, we are required to maintain a list of subprocessors and to inform our customers when we engage new subprocessors or make material changes to existing ones.

Each subprocessor is bound by a data processing agreement that imposes data protection obligations no less protective than those in our own Data Processing Agreement. We conduct due diligence on all subprocessors before engagement, including assessment of their security practices, GDPR compliance, and data transfer mechanisms where applicable.

2. Notification of Changes

We will notify customers at least 30 days before engaging a new subprocessor or making a material change to an existing subprocessor. Notification will be sent to the email address associated with your account.

Notifications will include the name of the new subprocessor, its purpose, location, and the categories of data it will process. The "Last updated" date on this page will also be revised when changes are made.

3. Right to Object

If you have a reasonable objection to a new subprocessor based on data protection grounds, you may notify us in writing at privacy@traceable.digital within 30 days of the notification. Your objection must include specific, documented reasons related to data protection.

Upon receipt of a valid objection, we will work in good faith to address your concerns. This may include offering an alternative configuration that avoids the subprocessor in question, providing additional safeguards, or agreeing to a reasonable workaround. If we are unable to resolve the objection within 30 days, you may terminate the affected services in accordance with the Terms of Service without penalty.

4. Current Subprocessors

The following table lists all third-party subprocessors currently engaged by Traceable Digital to process data on behalf of our customers.

Where a subprocessor is located outside the European Economic Area, Standard Contractual Clauses (SCCs) adopted by the European Commission are in place to ensure an adequate level of data protection in accordance with GDPR Chapter V.