Free GDPR subprocessor list template

Every B2B SaaS company that processes personal data on behalf of controllers needs to maintain an accurate list of subprocessors under GDPR Article 28. This template gives you the columns your subprocessor list needs to be audit-ready: subprocessor name, processing purpose, data categories processed, location and transfer mechanism, and the date each subprocessor was added or removed.

Every processor needs an accurate subprocessor list. This template gives you the columns that matter: subprocessor name, processing purpose, data categories, location/region, transfer mechanism, and the date added.

Copy it, fill it in, and publish it — then move to a live subprocessor list when manual updates stop scaling.

This is placeholder content. Attach the downloadable template before launch.