Customers with an executed DPA may object to a newly added third-party sub-processor by emailing privacy@snowflake.com within twenty-eight days of Snowflake's notice, with the resolution of such objections governed by the terms of the individual DPA.
This analysis describes what Snowflake's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes the procedural mechanism and deadline for exercising sub-processor objection rights, with the practical effect of any objection depending entirely on the contractual language in each customer's individual DPA rather than a uniform procedure.
Interpretive note: The practical effect of an objection depends on the language of each customer's individual DPA, which varies by contract and is not published in this document.
This provision requires customers to submit sub-processor objections within twenty-eight days of notice, and the document states that objection handling is determined by the individual DPA, meaning the available remedies vary by customer contract.
Cross-platform context
See how other platforms handle Twenty-Eight-Day Sub-Processor Objection Window and similar clauses.
Compare across platforms →"If you are a current Snowflake customer, with a fully executed data processing agreement ("DPA") in place with Snowflake, you may notify us of an objection to Snowflake's use of a new Third-Party Sub-processor used to process your Customer Data by sending such objection to privacy@snowflake.com within twenty-eight (28) days after Snowflake's notice of such new Third-Party Sub-processor, or such other period of time as set forth in your DPA. Objections shall be handled as described in your DPA.Excerpt from Snowflake's Sub-Processors
(1) REGULATORY LANDSCAPE: GDPR Article 28(2) requires that controller-processor agreements include provisions giving the controller the ability to object to sub-processor changes.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision establishes the procedural mechanism and deadline for exercising sub-processor objection rights, with the practical effect of any objection depending entirely on the contractual language in each customer's individual DPA rather than a uniform procedure.
This provision requires customers to submit sub-processor objections within twenty-eight days of notice, and the document states that objection handling is determined by the individual DPA, meaning the available remedies vary by customer contract.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Snowflake.