1. Register status
No verified production subprocessor inventory has been supplied for this launch draft. The categories below are an inventory to complete, not vendor disclosures or a claim that Atomic uses no subprocessors.
A provider belongs on the customer-data subprocessor list only where its actual role supports that classification. Providers handling the company’s own business records may instead be recipients described in the Privacy Notice.
2. Providers to verify
| Service category | Details required |
|---|---|
| Hosting, database & storage | Legal provider, data categories, processing and access locations, retention, transfer basis |
| AI inference | Legal provider, prompt/code handling, model routing, training restrictions, retention, locations |
| Email & support | Legal provider, message and attachment handling, locations, retention, contractual role |
| Monitoring & diagnostics | Legal provider if used, log fields, redaction, locations, retention |
| Billing & payments | Legal provider if used, payment-data flow, controller/processor role, locations |
3. Changes and objections
The finalized DPA should specify advance notification of additions or replacements and the customer’s opportunity to object on relevant data-protection grounds. A website update alone must not be assumed to satisfy a contractual notice obligation.
To finalize: versioned register, effective dates, notification mechanism, notice period, and objection-resolution process.
4. Request information
For supplier or data-processing questions, contact info@absmach.eu. Obtain the finalized register and applicable DPA before relying on Atomic to process production personal data.