7. Privacy Policies - GitHub Subprocessors

Updated 17 October 2025

This document is a GitLaw Subprocessor List, detailing third-party services authorized to process customer and personal data on behalf of GitLaw for its Enterprise customers. It clarifies that some customer data falls under GDPR definitions and outlines GitLaw's commitment to publishing new subprocessors at least 30 days in advance. The list includes subprocessors like Cloudflare, Google Cloud Platform, SendGrid, and Twilio, along with their processing descriptions and locations.

GitLaw Subprocessors

GitLaw defines customer data as all data provided by the customer to GitLaw through their use of GitLaw services. Some customer data is personal data as defined under GDPR.

The GitLaw Subprocessor List identifies subprocessors authorized to subprocess customer or personal data on behalf of GitLaw to provide services to our Enterprise customers. This list is applicable for all GitLaw services governed by the GitLaw Data Protection Agreement.

GitLaw publishes the names of any new subprocessors for its online services at least 30 days in advance of the subprocessor’s authorization to perform services that may involve access to customer data or personal data.

To receive notifications of updates to this Subprocessor list, please follow the instructions provided in About notifications.

If you have questions about this list, please contact us at [email protected].

Name of Subprocessor	Description of Processing	Location of Processing	Corporate Location
Cloudflare	Content delivery service	United States	United States
Google Cloud Platform (GCP)	Cloud Hosted Infrastructure	United States	United States
SendGrid	SMS notification provider for 2 Factor Authentication	United States	United States
Twilio	SMS notification provider for 2 Factor Authentication	United States	United States

About this template

What is this template?

7. Privacy Policies - GitHub Subprocessors is a free, ready-to-use Commercial law template you can open, customize, and download on GitLaw. It gives you a professionally structured starting point, so you never have to draft from a blank page. The wording is plain and modern, organized into clear sections that are easy to read, edit, and adapt to your own situation before you share or sign it.

When should you use it?

Reach for this Commercial law template whenever you need a reliable agreement quickly and want to be sure the essentials are covered. It suits individuals, freelancers, startups, and established businesses alike. Instead of paying for a document drafted from scratch, you can start here, tailor the details to your arrangement, and have a polished draft ready in minutes. This version is drafted with European Union in mind, though you should always review the final wording against the laws that apply to you.

What's typically included?

A well-drafted Commercial law usually sets out the parties involved, the scope of the agreement, and each side's rights and responsibilities. Expect sections covering key terms and definitions, how long the agreement lasts, how it can be ended, and what happens if something goes wrong. This template brings those building blocks together in a sensible order, so you can focus on the specifics rather than worrying about what to include. Open it to read the full document, then sign up to edit, negotiate, and e-sign it directly in GitLaw.

Related documents

OLOpen Legal Library

Pocket Privacy Policy by Mozilla

The Pocket Privacy Policy explains how Mozilla collects, uses, and protects information from users of Pocket Technologies, including the Pocket app and website. It follows strict global privacy standards, uses secure practices, and gives users clear control over their data, with transparent policies on sharing, storage, and consent.

OLOpen Legal Library

Firefox Better Web (beta) Privacy Notice by Mozilla

The Firefox Better Web (beta) Privacy Notice describes how Mozilla’s experimental service, offered in partnership with Scroll, provides ad-free content through a Scroll account and a Firefox browser extension that manages tracking protection settings. It is issued by Mozilla and aligned with Mozilla’s broader Privacy Policy, clearly limiting data collection and explaining responsibilities between Mozilla and its partner, making it suitable for evaluating privacy practices in experimental consumer web services.

OLOpen Legal Library

Accounts Privacy Notice by Mozilla

The Mozilla Accounts Privacy Notice explains what personal data Mozilla collects, uses, and shares when you create and use a Mozilla account across connected services, including registration, location, interaction, and technical data. It can be trusted as an official, up-to-date privacy notice published by Mozilla Corporation and aligned with its broader Mozilla Privacy Policy and applicable data protection laws.

OLOpen Legal Library

VPN Terms of Service by Mozilla

The Mozilla VPN Terms of Service govern the personal, subscription-based use of Mozilla’s VPN service, setting out how the service works, user rights and responsibilities, privacy protections, payment terms, and limits on liability. The terms are issued by Mozilla Corporation for a VPN built in partnership with Mullvad and distributed under the Mozilla Public License, making them suitable for evaluating consumer VPN use, privacy safeguards, and subscription obligations in a well-established open-source software context.

OLOpen Legal Library

Subscription Services and Privacy Notice by Mozilla

The Mozilla Subscription Services Privacy Notice describes how data is collected, used, and shared across Mozilla’s paid services—Mozilla VPN, Mozilla Monitor, and Firefox Relay—covering account information, payments, technical data, and service-specific processing needed to deliver privacy-focused protection tools. It is issued by Mozilla and integrated with the broader Mozilla Privacy Policy, making it relevant for evaluating data practices and risk considerations for consumer subscription-based privacy and security services.

OLOpen Legal Library

Ad-Targeting Guidelines by Mozilla

The Mozilla Ad-Targeting Guidelines set rules for ethical advertising by prohibiting invasive targeting methods (such as retargeting, cross-device tracking, or using Mozilla’s data) while allowing limited, privacy-respecting tactics like contextual, device, geographic, and browser-based targeting. As an official Mozilla policy, it provides trustworthy standards for privacy-focused marketing practices used by a globally respected open-source organisation.