DeltaBlue

Approved Sub-Processors

DeltaBlue

Version 1.0

Effective from: 25 September 2025

List of Approved Sub-processors

Processing of Customer Data for Relationship Management, Project Management, Communication and Accounting

DeltaBlue uses sub-processors to process personal customer data for legitimate business purposes such as maintaining the customer relationship, project manangement, sending communications, and performing proper accounting. These processing activities are necessary for the performance of the contract and to comply with legal obligations (such as statutory tax retention requirements). The data is limited to what is strictly necessary and is used exclusively for the aforementioned purposes.

Processing of customer data by cloud providers via the DeltaBlue Cloud Platform

The DeltaBlue Cloud Platform facilitates the processing of customer data on cloud infrastructure in data centers. A key feature is that the customer retains full control over where and how their data is processed.

• Customer Control: Customers can independently determine where data is stored and processed, or instruct DeltaBlue to manage these settings on their behalf. Where required, DeltaBlue will configure the platform parameters in accordance with the customer's instructions.
• Transparency and Oversight: The platform provides 24/7 monitoring and visualization of the locations where data is stored and processed. This enables the customer to permanently demonstrate evidence of the geographic location of processing, which is essential for compliance with regulations such as the GDPR.
• Use of Sub-processors: This Data Processing Addendum (DPA) includes a list of approved sub-processors. While the platform supports a global infrastructure, the customer retains control over which sub-processor(s) and in which region(s) their data may be stored and processed.

Below you will find a list of Approved Sub-processors: