Current publication state

The repository does not contain enough executed vendor and deployment evidence to publish a truthful production subprocessor list. Product dependencies or marketing names alone do not prove that a vendor processes customer data. The executed customer DPA and deployment-specific register are authoritative until verification is complete.

Required register fields

• Vendor legal entity and contracted service or purpose.
• Data categories, enabled products, processing and support regions.
• Transfer mechanism, DPA record, onward-processing terms, and deletion commitment.
• Effective date, customer notice period, objection route, and prior-version history.

Change process

Privacy and security owners verify every proposed entry against the agreement and production configuration before publication. Customers receive the notice required by their DPA and can use privacy@lawielabs.com for the documented objection process.