Subprocessors
Maintain the subprocessor register of the platform (annex 2 of the DPA).
Open "Subprocessors". This is the register of companies that process personal data on behalf of the platform (Art. 28 GDPR). Tenants see the active entries in BizCortex, and the public privacy policy lists them.
Self hosted services (LiveKit) and authorities (BZSt, ELSTER) are not subprocessors. Tenants must be informed about changes in advance.

Who can use this
- Platform operators
Steps
1. Add
Click "Add entry" and fill in the form.
2. Edit
Click the edit action of an entry.
3. Deactivate or delete
Prefer switching "Active" off for former providers to keep the history. Delete removes the entry from the register.
Fields and options
- Key
Lowercase letters, digits, the hyphen and the underscore.
- Company, Purpose, Data categories
Who, why and which data. Separate several categories with commas.
- Place of processing, Country
Where the data is processed, with a two letter ISO country code such as DE.
- Safeguards
EU/EEA, Adequacy decision, Data Privacy Framework or Standard contractual clauses.
- DPA reference, DPA dated, Notes
The contract with the subprocessor.
- Order, Active
Position in the list (a whole number) and whether the entry is shown.
Related
- Data processing agreement versions
Publish new versions of the DPA and track which tenants accepted them.