Trust center / Policies
Vendor and Subprocessor Policy
How we choose providers that handle customer data, and how customers hear about changes.
Version 1.0 · effective 2026-10-29 · owner Franklin Lupichuk, Founder
Choosing providers
- We use established providers that publish their own security programmes, and we prefer providers with independent audits.
- Each provider receives only the data it needs for its job.
- We require our subprocessors to protect customer data under written terms, and we remain responsible for them.
Transparency
- The current list of subprocessors, what each one processes and where, is published at www.rendro.net/subprocessors.
- We announce a new subprocessor on that page and by email to workspace owners at least 30 days before it starts processing customer personal data (our DPA, section 5).
Current limitations
- We don't have a formal periodic vendor review programme yet. Provider security pages are linked from www.rendro.net/trust.