The GitHub Subprocessors Policy identifies the third-party vendors GitHub authorizes to process customer and personal data on its behalf under the GitHub Data Protection Agreement. Maintained and published by GitHub, this list ensures GDPR compliance and transparency by providing at least 30 days’ notice before adding new subprocessors.