Discovery queue open Typical turnaround: one working day The register Method Talk to a reviewer
subprocessor.org
Have us do it →

discovery

Find your sub-processorssix sources, read for youRead your own listsCSV, DPA or procurementDecide the scopewhat touches customer data

publish

Your register pagecurrent to the dayEmbed on your siteor in your trust centreCustomer noticessent in your name

prove

Evidence packsdated and exportableDecision logaccepted, objected, escalatedLedger verificationhash-chained record
and later
Watch your vendors too

Every vendor found in your discovery, monitored daily.

See monitoring →
Six sources. One reviewed list. Re-checked daily.See how the work flows →

by role

In-house privacyyou signed the DPAsGRC & securityyou answer the auditorDPO firmsyou carry it for clients

by situation

Selling into the EUyour first Article 28 annexFinancial servicesDORA subcontracting chains100+ SaaS vendorstoo many to watch by hand

by stage

First DPA annexget it right first timeScaling privacy teamretire the spreadsheetMulti-client practiceone workspace each
for dpo firms
One workspace per client

Cross-client rollups, white-labelled exports, reseller terms.

Compare tiers →
Same engine, different job to be done.Compare the tiers →

european union

GDPR Article 28notice and objection windowsEDPB Opinion 22/2024what “current” now meansDORAregister of informationNIS2supply-chain duties

transfers & elsewhere

SCCs & transferswhere each entity processesUK GDPRsame duty, own regulatorCCPA / CPRAservice provider duties

what we publish

Our methodhow detection worksFalse-positive policywhy we stay quietCoverage and gapswhat we cannot reach yet
annual cycle
The DORA register window

Subcontracting chains, produced as a by-product of discovery.

Talk about DORA →
We publish observations and dated records, never legal conclusions.Read the method →

browse, free

All businesses28 with a dated historyLive changesevery list that movedSub-processor indexwho is named, by whom

go deeper

By countrywhere processing happensFourth-party chainsyour suppliers’ suppliersCoverage and gapswhat we cannot reach yet

if you are listed

Claim your pageverify and take it overSuggest a correctionwe log every onePublishing guidehow to keep it right
free to read
No account needed

The register stays open whether or not you buy anything.

Open the register →
Free to read. No account.Open the register →

The register › nebius.com

nebius.com

A dated copy of the sub-processor list nebius.com publishes on their own site. We read it; nobody here reviewed it and nebius.com did not approve it.

Observed
version 1 of 1
hash f12fc041c5

13 sub-processors

3 countries
Read from their published page. Not reviewed by us, not approved by them.
EntityPurposeCountryScope
Hubspot, Inc. Delivery of customer communications, such as in-product messages and emails SCC —
Microsoft Corporation (Sentinel) Customer communications;Security Information and Event Management SCC —
Nebius AI Spain S.L.U.Nebius Group Service engineering, operations, maintenance and technical support EEA - no Chapter V transfer based on the listed processing location —
Nebius B.V.Nebius Group Service engineering, operations, maintenance and technical support EEA - no Chapter V transfer based on the listed processing location —
Nebius CZ s.r.o.Nebius Group Service engineering, operations, maintenance and technical support EEA - no Chapter V transfer based on the listed processing location —
Nebius DC OyNebius Group Service engineering, operations, maintenance and technical support EEA - no Chapter V transfer based on the listed processing location —
Nebius France SASNebius Group Service engineering, operations, maintenance and technical support EEA - no Chapter V transfer based on the listed processing location —
Nebius GmbHNebius Group Service engineering, operations, maintenance and technical support EEA - no Chapter V transfer based on the listed processing location —
Nebius Inc.Nebius Group Service engineering, operations, maintenance and technical support SCC —
Nebius Israel Ltd.Nebius Group Service engineering, operations, maintenance and technical support EU adequacy decision —
Nebius UK Ltd.Nebius Group Service engineering, operations, maintenance and technical support EU adequacy decision —
Slack Technologies, LLC Customer communications;Customer support SCC —
Tech Hub IL Ltd.Nebius Group Service engineering, operations, maintenance and technical support EU adequacy decision —

Dated history

1 version
Version 1 4 Nov 2026 13 entities f12fc041c5 view

Each version is a snapshot taken when the business approved it, not a pointer at a list that can change underneath you. The hash covers the sorted set of entities, so reordering rows does not produce a new version.