A subprocessor is a vendor Humankind uses to process data on behalf of our customers, who are the data controllers of that data.

What is a Third-Party Subprocessor: Humankind’s Process for Contracting with Third-Party Subprocessors

Humankind requires its subprocessors to satisfy equivalent obligations as those required from Humankind (as a Data Processor) as outlined in Humankind’s Data Processing Agreement (DPA), including but not limited to the requirements to:

• process personal data following data controller’s (i.e., Customer’s) documented instructions (as communicated in writing to the relevant subprocessor by Humankind);
• in connection with the subprocessing activities, use only personnel who are reliable and subject to a contractually binding obligation to observe data privacy and security, to the extent applicable, under applicable data protection laws;
• promptly inform Humankind about any security breach; and
• cooperate with Humankind to address requests from data controllers, data subjects, or data protection authorities, as applicable.