Sub-processor

A sub-processor is an external party engaged by a processor (like Bugalou) to carry out part of the data processing, such as a cloud hosting provider, an email delivery service, or an AI model provider.

Under GDPR, a processor must be transparent about which sub-processors are engaged, so the data controller (your business) can assess whether the full processing chain complies with the law.

Bugalou publishes an up-to-date list of all sub-processors, including the purpose of each engagement and the location of data processing, so you always know who has access to your customer data.