Subprocessors

Every category below covers cloud infrastructure and adjacent services required to operate a BPO. We publish the categories openly so that a reviewer establishes the shape of our supply chain before signing an NDA.

We name the specific vendors within each category in an NDA-gated document rather than on this page. Request it from dpo@upstreambpo.com using the subject line “Subprocessor List Request under NDA”.

The NDA-gated document identifies each vendor, the category it sits in and the role it performs in service delivery. Customers under contract receive it as part of their engagement documentation without a separate request.

Upstream BPO gives customers 30 days advance notice before adding a new subprocessor or replacing an existing one. The notice period runs before the change takes effect, so that a customer completes their own assessment while the current arrangement is still in place.

Notice states the vendor, the category, the service role it performs and the date the change takes effect.

Customers may object to a new subprocessor. On receiving an objection, Upstream BPO works with the customer to identify an acceptable alternative: a different vendor, a different service configuration, or the exclusion of that customer's data from the subprocessor in question.

Where no acceptable alternative is reached, the standard termination provisions of the contract apply. We state this plainly because an objection right that has no consequence attached to it is not an objection right.