[corpospec]
Privacy pillar · v0.16.0

subprocessor SubprocessorEntry

Sub-processor entry (one record per (parent processor, sub- processor) pair).

$id · https://corpospec.com/schemas/v0.16.0/subprocessor.schema.json

View raw JSON → ← all schemas

Fields

Field Type Required Description
authorisation_regime AuthorisationRegime yes Authorisation regime.
authorised_on IsoDate yes Authorisation date.
confidentiality Confidentiality yes Cross-cutting confidentiality classification used across privacy, security, knowledge, IR pillars. Default rendering rule: `corpospec-report` excludes `Restricted | BoardOnly | InvestorOnly` records from public output unless an explicit audience parameter overrides. See BDR 0076 §1.
controller_objected boolean yes Whether the controller has objected.
data_categories string[] yes Categories of personal data sub-processed.
id PathRef yes Path-based cross-reference relative to .corpospec/ root. Pattern: `^[a-z0-9_-]+(/[a-z0-9_.-]+)+$`
jurisdiction IsoCountry yes ISO 3166-1 alpha-2 country code.
name string yes Sub-processor display name.
parent_dpa PathRef yes PathRef to the parent DPA / processor we engage.
parent_processor PathRef yes PathRef to the parent processor vendor record.
purpose string yes Purpose for engagement.
status SubprocessorStatus yes Sub-processor onboarding lifecycle.
subject_categories string[] yes Categories of data subjects affected.
transfer_mechanism SubprocessorTransferMechanism yes Transfer mechanism (if applicable).
decommissioned_on IsoDate? — When the entry was decommissioned (if applicable).
flow_down_dpa_ref PathRef? — PathRef to flow-down DPA (Art. 28(4)).
objected_on IsoDate? —
objection_period_end IsoDate? — Objection-period end date (typically authorised_on + 30 days under general regime).
public_listing_ref PathRef? — PathRef to a public catalogue page (for B2B transparency).

Definitions

Shared types referenced within this schema.

AuthorisationRegime
Authorisation regime.
Confidentiality
Cross-cutting confidentiality classification used across privacy, security, knowledge, IR pillars. Default rendering rule: `corpospec-report` excludes `Restricted | BoardOnly | InvestorOnly` records from public output unless an explicit audience parameter overrides. See BDR 0076 §1.
IsoCountry
ISO 3166-1 alpha-2 country code.
pattern: ^[A-Z]{2}$
IsoDate
ISO 8601 date (YYYY-MM-DD).
type: string
PathRef
Path-based cross-reference relative to .corpospec/ root. Pattern: `^[a-z0-9_-]+(/[a-z0-9_.-]+)+$`
pattern: ^[a-z0-9_-]+(/[a-z0-9_.-]+)+$
SubprocessorStatus
Sub-processor onboarding lifecycle.
SubprocessorTransferMechanism
Transfer mechanism (when sub-processor is in a third country).
enum: "adequacy", "scc", "bcr", "dp_framework", "derogation", "none_applicable"

Reference in your YAML

# yaml-language-server: $schema=https://corpospec.com/schemas/v0.16.0/subprocessor.schema.json