Answer subprocessor questions
before they're asked

Building a subprocessor list by hand means chasing the same details across teams and watching them go stale the moment a vendor changes. Trust Exchange lets you publish and maintain an accurate list fast.

• Built for GDPR accuracy: Capture the legal entity name for precise subprocessor disclosure.
• Import or add in seconds: Pull subprocessors straight from fourth-party data in Vendor Risk. Or, add them manually.
• Order that stays put: Set a custom sort order that stays consistent across your Trust Center.

A static list answers today’s question but creates tomorrow’s follow-up. Trust Exchange gives your customers a clear, up-to-date view of your subprocessors — and lets them subscribe to be automatically notified of changes.

• Clear and current: A structured, scannable Subprocessors section on your Trust Center, with a visible “last updated” timestamp.
• A link just for subprocessors: Share a dedicated URL for your Subprocessors page, separate from your main Trust Center link.
• Let visitors opt in: Customers can subscribe to receive email notifications whenever the list changes.

Change notifications only build trust if they’re honest, restrained, and accountable. Here’s how subprocessor updates work on Trust Exchange.

• You decide what’s public: Fields are visible by default, but you can hide sensitive ones, like data center availability zones.
• No annoying notifications: Subscribers only hear about changes that matter, bundled into one email, capped at once a week.
• Every notification is logged: who was notified, when, and how, for your audit trail.
• Webhooks for teams that skip email: Enterprise customers get a signed, real-time event with automatic retries and a delivery log.