Glossary: Compliance, Privacy and Penetration Testing

Sub-processor

A company a processor hires to do part of the work, such as the cloud host behind the newsletter service. Under the GDPR the processor needs the controller's written authorization before hiring one.