Sub-processor
A supplier a data processor uses to process its clients’ personal data, with the controller’s authorisation.
A sub-processor is a third party to which the data processor entrusts part of the work with the data: a hosting, email or AI provider, for example. Under Art. 28 of the GDPR, the processor needs the controller’s authorisation to use them and must impose the same obligations on them.
With meeting tools this matters a lot: your recording may pass through one service for transcription, another for AI and another for storage, each in a different country. The sub-processor list tells you who else sees your data and where.
- Which company it is and what it does.
- Which country it processes the data in.
- Whether it touches meeting content or only other data (such as payment).
In Echo, the servers, database, email and AI are Edorteam’s own: no third party processes your meetings. The only sub-processor is Stripe, and only to charge for paid plans. The list is on the security page and in the data processing agreement (in Spanish).
