1. Introduction

This document sets out the third-party service providers ("sub-processors") that Cybnode uses to support the delivery of its products and services. These sub-processors may process limited personal data on behalf of Cybnode's clients in accordance with the UK General Data Protection Regulation (UK GDPR) and the EU GDPR.

Cybnode engages only trusted, industry-recognised partners and ensures that appropriate technical and organisational safeguards are in place to protect personal data. Each sub-processor is subject to a written data processing agreement and required to comply with Cybnode's standards for security, confidentiality, and data protection.

2. Purpose

The purpose of this policy is to provide transparency about the organisations that may process customer data as part of Cybnode's infrastructure or service delivery. This list enables our clients to understand where their data may be handled, and under what safeguards.

Cybnode regularly reviews its sub-processors and updates this statement as necessary to reflect changes in our technology stack or business operations.

3. Current Sub-processors

The following third-party service providers currently act as authorised sub-processors for Cybnode:

Cybnode selects each sub-processor based on their proven commitment to data protection, compliance certifications, and operational reliability. All processing is governed by contracts that incorporate data protection obligations consistent with UK and EU law.

4. Updates and Notifications

Cybnode may from time to time engage new sub-processors or remove existing ones as our services evolve. When such changes occur, we will update this document and, where applicable, notify our clients at least 30 days in advance of the effective date of the change.

Clients who object to the engagement of a new sub-processor may contact Cybnode within that notice period to discuss any concerns or alternative arrangements.

5. Data Protection and Compliance

All sub-processors engaged by Cybnode are required to:

• Process personal data only under Cybnode's documented instructions.
• Implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk.
• Assist Cybnode in meeting its obligations under applicable data protection laws, including rights of data subjects and breach notification requirements.
• Ensure that any international transfers of personal data are protected by adequate safeguards such as Standard Contractual Clauses or UK Addendum provisions.

Cybnode remains responsible for the acts and omissions of its sub-processors to the same extent that Cybnode would be responsible if performing the relevant data processing activities itself.

6. Review

This Product Sub-processors Policy will be reviewed annually or sooner if Cybnode's operational requirements change. Updated versions will always be made available on our website or upon request.