SUB-PROCESSORS

Short lists, clear regions, deployment-specific review

A sovereign document deployment should not hide its processing chain. Project Sovereign's public posture is to keep sub-processor lists short, EEA-resident where required, and confirmed before production handover.

POLICY

What the public posture commits to

01

Document every vendor that can process customer data, metadata, logs, backups, support data, or billing data.

02

Confirm region, purpose, retention, support access, and notification process before deployment.

03

Keep production sub-processor evidence available by request rather than publishing unsupported universal claims.