[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"glossary-subprocessor::en":3,"gloss-cluster-subprocessor::en":26,"gloss-next-subprocessor::en":9},{"slug":4,"category":5,"name":6,"definition":7,"meta_desc":8,"faq":9,"schema_markup":9,"related":10},"subprocessor","saas","Subprocessor","A subprocessor is a third-party vendor your SaaS uses to process customer data on your behalf — your cloud host (AWS), your email sender (Postmark), your analytics or support tools. Under GDPR and similar regimes, if you're a data processor for your customers, every downstream vendor that touches their data is your subprocessor, and you carry contractual and legal responsibility for them. Practically, this means two things for builders. First, you must maintain and publish a subprocessor list (usually a page customers can subscribe to for change notifications) and pass those obligations down via data processing agreements (DPAs). Second, when you evaluate tools to build with, you inherit their subprocessors and their risk — adding a vendor is a compliance decision, not just a technical one. Enterprise and security reviews scrutinize this list closely. Keeping it short, documented, and located in acceptable jurisdictions (see data residency) is part of being enterprise-ready and passing SOC 2 and vendor assessments.","A subprocessor is a third-party vendor that processes your customers' data on your behalf — and under GDPR you must list them and pass your obligations down.",null,[11,14,17,20,23],{"slug":12,"name":13},"data-residency","Data Residency",{"slug":15,"name":16},"data-retention-policy","Data Retention Policy",{"slug":18,"name":19},"gdpr","GDPR (General Data Protection Regulation)",{"slug":21,"name":22},"iso-27001","ISO\u002FIEC 27001",{"slug":24,"name":25},"soc-2","SOC 2",[27,31,35,38,41,44,47,51,54,57,60,63],{"slug":28,"category":5,"name":29,"updated_at":30},"activation","Activation","2026-08-24T02:46:36+00:00",{"slug":32,"category":5,"name":33,"updated_at":34},"aha-moment","Aha Moment","2026-08-24T02:46:37+00:00",{"slug":36,"category":5,"name":37,"updated_at":34},"annual-contract-value","Annual Contract Value (ACV)",{"slug":39,"category":5,"name":40,"updated_at":30},"api-first","API-First",{"slug":42,"category":5,"name":43,"updated_at":30},"arpa","Average Revenue Per Account (ARPA)",{"slug":45,"category":5,"name":46,"updated_at":30},"arr","Annual Recurring Revenue (ARR)",{"slug":48,"category":5,"name":49,"updated_at":50},"auto-renewal-clause","Auto-Renewal Clause","2026-08-24T02:46:38+00:00",{"slug":52,"category":5,"name":53,"updated_at":50},"build-vs-buy","Build vs. Buy",{"slug":55,"category":5,"name":56,"updated_at":34},"burn-multiple","Burn Multiple",{"slug":58,"category":5,"name":59,"updated_at":50},"burn-rate","Burn Rate",{"slug":61,"category":5,"name":62,"updated_at":30},"cac","Customer Acquisition Cost (CAC)",{"slug":64,"category":5,"name":65,"updated_at":30},"cdn","Content Delivery Network (CDN)"]