The document discloses that Unity uses sub-processors, defined as third-party companies that handle personal data on Unity's behalf, and that the current sub-processor list is incorporated by reference into the DPA rather than reproduced inline.
This analysis describes what Unity's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes that the identity and scope of third-party companies processing personal data on Unity's behalf is governed by a separate document incorporated by reference, requiring developer customers and compliance teams to locate and review the sub-processor list independently to assess their data processing chain.
Under this clause, the full list of third parties handling personal data on Unity's behalf is not contained within the privacy hub itself but is accessible through the incorporated sub-processor list referenced in the DPA. Developer customers seeking to assess their data processing chain must review the sub-processor list separately.
Cross-platform context
See how other platforms handle Sub-Processor Disclosure and similar clauses.
Compare across platforms →"Sub-processors are third-party companies that assist Unity by handling personal data on Unity's behalf. These are incorporated by reference in Unity's Data Processing Addendum.Excerpt from Unity's Privacy Policy
1.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision establishes that the identity and scope of third-party companies processing personal data on Unity's behalf is governed by a separate document incorporated by reference, requiring developer customers and compliance teams to locate and review the sub-processor list independently to assess their data processing chain.
Under this clause, the full list of third parties handling personal data on Unity's behalf is not contained within the privacy hub itself but is accessible through the incorporated sub-processor list referenced in the DPA. Developer customers seeking to assess their data processing chain must review the sub-processor list separately.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Unity.