Workflow

How to send a subprocessor change notice

Use this workflow when a vendor change needs a customer notice, an objection window, and a clean proof trail. The goal is to make the process repeatable, not to guess at legal requirements.

Operational guide, not legal advice.

Your DPA, customer contracts, privacy commitments, and counsel decide whether notice is required and what wording applies.

When this workflow applies

Start here when you add a new subprocessor, change the purpose of an existing vendor, move processing regions, or replace one vendor with another.

If the change is small enough that no customer obligations apply, keep the same process anyway so your team has a consistent audit trail.

Send it in five steps

1

Confirm the trigger

Write down what changed, which vendor is involved, and which agreement controls the notice period.

2

Segment the customers

Separate customers by contract or DPA language before you draft copy. One notice rarely fits every account.

3

Gather the facts

Capture vendor name, service purpose, data categories, processing region, notice date, and planned effective date.

4

Draft the notice

Include the change summary, objection deadline, reviewer owner, and the path for customer follow-up.

5

Save the proof

Keep the final notice, recipient list, page snapshot, and internal approval note in one evidence folder.

Example notice outline

Subject: Upcoming subprocessor update

Vendor: Acme Email Cloud

Purpose: Transactional email delivery

Data: Customer names and email addresses

Region: United States and European Union

Notice date: 2026-04-23

Effective date: 2026-05-23

Objection deadline: 2026-05-23

Next step: Route objections to the assigned reviewer before the deadline closes.

Common mistakes

Sending before the dates are final

If the effective date changes after the message goes out, the evidence trail becomes harder to trust.

Using one notice for every customer

Enterprise customers often have different notice periods, recipients, or approval expectations.

Skipping the objection deadline

Without a clear deadline, follow-up becomes manual and procurement questions take longer to answer.

Losing the proof

Notice copy, screenshot evidence, and reviewer notes should stay together so a later audit is painless.

Keep it simple

If you only need one clean workflow, use the free checklist to capture the facts before you send. If you need editable notice variants, the Starter kit adds the templates, tracker, and evidence log for one vendor change.

Need the ready-made files?

NoticeKit Starter gives you the notice templates, objection-window tracker, evidence log, and attorney handoff note for one subprocessor change.

See pricing