# Vendor and Subprocessor Policy

Rendro (www.rendro.net). Version 1.0, effective 2026-10-29. Owner: Franklin Lupichuk, Founder.

How we choose providers that handle customer data, and how customers hear about changes.

## Choosing providers

- We use established providers that publish their own security programmes, and we prefer providers with independent audits.
- Each provider receives only the data it needs for its job.
- We require our subprocessors to protect customer data under written terms, and we remain responsible for them.

## Transparency

- The current list of subprocessors, what each one processes and where, is published at www.rendro.net/subprocessors.
- We announce a new subprocessor on that page and by email to workspace owners at least 30 days before it starts processing customer personal data (our DPA, section 5).

## Current limitations

- We don't have a formal periodic vendor review programme yet. Provider security pages are linked from www.rendro.net/trust.

Published at https://www.rendro.net/trust/policies/vendor-management