FAQ
Short answers to the questions security teams and customers ask most.
Is this a certification or an audit?
No. This is a registry for disclosures published by the company. SubProcessorRegistry does not verify, audit, or certify the information on a public page.
Can anyone edit my public page?
No. Only the authenticated owner account can manage the company and publish updates. Public pages are read-only.
What does “Publish update” do?
Publishing creates a timestamped snapshot of your current disclosure statement and sub-processor list, then records the last published date on your public page.
What should I list as data categories?
Use plain-language categories that match what the vendor processes (for example: Account data, Contact information, Usage data, Support content, Billing information). Keep it consistent and understandable.
Is it free?
You can start free. A paid plan can be added later for branding, multiple pages, and more operational features.
Can I share an example?
Yes. You can link a public page directly. For example, /demo-saas.
Next step
Create your company page, add your vendors, and publish a timestamped update so you have a clean URL ready for security reviews.