The document states that customers must affirmatively subscribe to receive email notifications of sub-processor and affiliate updates by providing an email address and the full legal name of their organization, with no indication that Snowflake delivers notice through other channels by default.
This analysis describes what Snowflake's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision places the burden on customers to affirmatively opt into update notifications; customers who do not subscribe may not receive timely notice of new sub-processor additions, which could affect their ability to exercise the twenty-eight-day objection window.
Interpretive note: Whether the opt-in subscription model satisfies GDPR Article 28(2) notice obligations depends on individual DPA terms and applicable regulatory guidance, which varies by jurisdiction.
This provision establishes that sub-processor update notifications are delivered only to customers who have affirmatively subscribed, requiring customers to submit their organizational email and legal entity name through the subscription mechanism to receive timely notice of changes.
Cross-platform context
See how other platforms handle Update Notification Subscription Requirement and similar clauses.
Compare across platforms →"By subscribing to receive updates about this page, you will be notified by email about relevant updates to Third-Party Sub-processors and Snowflake Affiliates that are involved in processing your Customer Data. You must subscribe to receive email notification of updates to Third-Party Sub-processors and such Snowflake Affiliates by submitting (1) the email address for such notifications and (2) the full name of the legal entity on whose behalf you are subscribing. By submitting this information, you represent that you have all necessary rights to provide this information to Snowflake.Excerpt from Snowflake's Sub-Processors
(1) REGULATORY LANDSCAPE: GDPR Article 28(2) requires that processors inform controllers of intended changes to sub-processors and give controllers the opportunity to object.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision places the burden on customers to affirmatively opt into update notifications; customers who do not subscribe may not receive timely notice of new sub-processor additions, which could affect their ability to exercise the twenty-eight-day objection window.
This provision establishes that sub-processor update notifications are delivered only to customers who have affirmatively subscribed, requiring customers to submit their organizational email and legal entity name through the subscription mechanism to receive timely notice of changes.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Snowflake.