The document offers a subscription mechanism for customers to receive notifications when new third-party sub-processors are added. Customers can sign up via a linked form, and questions or concerns can be directed to privacy@openai.com.
This analysis describes what OpenAI's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes a voluntary notification mechanism for sub-processor changes, which is relevant to enterprise customers who need to track sub-processor additions for GDPR Article 28 compliance or contractual DPA obligations that may require advance notice of sub-processor changes.
Interpretive note: The document does not specify the notice period provided before new sub-processors become active, nor whether a formal objection right is included, which limits assessment of whether this mechanism satisfies GDPR Article 28(2) requirements without reference to the full DPA text.
The document establishes a voluntary opt-in notification system for new sub-processor additions. Customers who do not subscribe to this service will not receive proactive notice of sub-processor changes and would need to monitor the published list independently.
Cross-platform context
See how other platforms handle Sub-processor Notification Subscription and similar clauses.
Compare across platforms →"Subscribe to new Sub-processor notifications Sign up to receive notification of new third party Subprocessors by filling out this form. Please contact privacy@openai.com with any questions or concerns.Excerpt from OpenAI's Sub-Processor List
1.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision establishes a voluntary notification mechanism for sub-processor changes, which is relevant to enterprise customers who need to track sub-processor additions for GDPR Article 28 compliance or contractual DPA obligations that may require advance notice of sub-processor changes.
The document establishes a voluntary opt-in notification system for new sub-processor additions. Customers who do not subscribe to this service will not receive proactive notice of sub-processor changes and would need to monitor the published list independently.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by OpenAI.