A vendor's public trust portal still lists outdated sub-processors while live support traffic already routes through new providers. Which practice best aligns with responsible processor obligations?
Select an answer to reveal the explanation.
Short Explanation
If the trust page says one set of helpers and production uses another, controllers are flying blind. Keep the sub-processor list honest and current—like a cast list that matches who's actually on stage. Outdated portals break the transparency processors owe.
Full Explanation
Processors engaging sub-processors must do so with appropriate controller authorisation and transparency about who processes personal data on their behalf. Maintaining an accurate, up-to-date sub-processor disclosure supports those obligations and controller oversight; stale or misleading listings undermine responsible vendor practice.