This document outlines GitHub's authorized third-party subprocessors and internal subsidiaries that process customer and personal data for its Enterprise services. It details the types of processing performed and the locations involved. The list also explains GitHub's notification policy for new subprocessors and provides contact information for inquiries related to data processing under the GitHub Data Protection Agreement.