Get a list of all subprocessors used by Dropbox

What is a subprocessor?

A subprocessor is a third-party data processor engaged by Dropbox. The subprocessor has or potentially will get access to personal data that Dropbox processes on behalf of its customers.

Why and how should I assess this?

If you choose to use Dropbox as a processor, the subprocessors listed will have access to personal data processed on your behalf. When you assess the subprocessors of your vendors, you need to ensure the following:

  • A signed data processing agreement

    You need to have a signed contract in place that commits Dropbox to only use subprocessors with your permission.

  • Transfers of data out of Europe

    If Dropbox uses a subprocessor located outside Europe, there must be a legal basis for the transfer.