This provision establishes an opt-in notification mechanism through which customers can receive advance notice of new sub-processors for services they actively subscribe to, accessed by completing a designated form.
This analysis describes what Slack's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
Under GDPR Article 28, controllers are entitled to object to changes in sub-processor arrangements. This provision establishes the operational mechanism through which Salesforce delivers advance sub-processor change notifications, making subscription to this mechanism a compliance dependency for organizations that need to exercise sub-processor objection rights under their DPAs.
Interpretive note: The document does not specify the advance notice period provided through the notification mechanism, which is material to assessing whether the mechanism satisfies GDPR Article 28 objection opportunity requirements under applicable DPA terms.
The agreement establishes that sub-processor change notifications are delivered on an opt-in basis only; customers who do not subscribe to the notification form will not receive advance notice of new sub-processors added to services they use. Subscription requires completing a separate form, as stated in the document.
Cross-platform context
See how other platforms handle Sub-processor Notification Subscription Mechanism and similar clauses.
Compare across platforms →"Salesforce Customers may subscribe to notifications of new sub-processors for those Covered Services for which Customer has a then-current active subscription by filling out this form.Excerpt from Slack's Sub-Processors (Salesforce)
(1) REGULATORY LANDSCAPE: GDPR Article 28(2) requires that processors inform controllers of intended sub-processor changes and provide the controller an opportunity to object.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
Under GDPR Article 28, controllers are entitled to object to changes in sub-processor arrangements. This provision establishes the operational mechanism through which Salesforce delivers advance sub-processor change notifications, making subscription to this mechanism a compliance dependency for organizations that need to exercise sub-processor objection rights under their DPAs.
The agreement establishes that sub-processor change notifications are delivered on an opt-in basis only; customers who do not subscribe to the notification form will not receive advance notice of new sub-processors added to services they use. Subscription requires completing a separate form, as stated in the document.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Slack.