The document authorizes Snowflake to engage Amazon Web Services, Microsoft Azure, Google Cloud Platform, and Cloudflare as third-party sub-processors for specific infrastructure and feature-level purposes, with each entity's legal name, address, geographic region, and transfer mechanism disclosed in the tables.
This analysis describes what Snowflake's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes the contractual basis for Customer Data processing by third-party entities outside of Snowflake's direct corporate structure, requiring customers to account for each listed sub-processor in their own data processing records and transfer impact assessments.
This provision establishes that Customer Data processed on the Snowflake platform may be handled by four named third-party entities (AWS, Azure, GCP, Cloudflare) operating across multiple geographic regions, with Standard Contractual Clauses as the stated transfer mechanism for all cross-border data flows.
Cross-platform context
See how other platforms handle Authorized Third-Party Sub-processors and similar clauses.
Compare across platforms →"To deliver services, Snowflake Inc. ("Snowflake") and its Affiliates may use third-party data processors ("Third-Party Sub-processors") and Snowflake Affiliates to process Customer Data.Excerpt from Snowflake's Sub-Processors
(1) REGULATORY LANDSCAPE: This provision engages GDPR Article 28, which requires controllers to use only processors providing sufficient guarantees and to maintain written processor agreements.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision establishes the contractual basis for Customer Data processing by third-party entities outside of Snowflake's direct corporate structure, requiring customers to account for each listed sub-processor in their own data processing records and transfer impact assessments.
This provision establishes that Customer Data processed on the Snowflake platform may be handled by four named third-party entities (AWS, Azure, GCP, Cloudflare) operating across multiple geographic regions, with Standard Contractual Clauses as the stated transfer mechanism for all cross-border data flows.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Snowflake.