How to maintain a GDPR Article 28 sub-processor register that survives an audit: discovery, dated change log, objection windows, DORA chain documentation, templates and code.
-
Updated
Sep 24, 2026
How to maintain a GDPR Article 28 sub-processor register that survives an audit: discovery, dated change log, objection windows, DORA chain documentation, templates and code.
A curated awesome-list of EEA and UK-hosted alternatives to common US SaaS (analytics, email, database, auth, error-tracking, hosting, payments), each with concrete region-pinning and verification notes. For engineers and operators proving where personal data actually lives.
Plain-English UK GDPR Data Processing Agreement (Article 28) and sub-processor disclosure templates for small SaaS and lean agencies. Real, ready-to-adapt text with worked examples and a 30-day change-notice discipline. Not legal advice.
To associate your repository with the sub-processors topic, visit your repo's landing page and select "manage topics."