Subprocessors

About This Page

This page lists all third-party service providers (subprocessors) that ProcureLabs Pte. Ltd. engages to process personal data on behalf of our customers. We carefully select subprocessors that maintain high security and privacy standards.

For subprocessors that require explicit consent (marked below), you can manage your preferences in the Privacy Settings section of your account.

Current Subprocessors

Change Notification Policy

We will notify you of any changes to our subprocessor list:

• New Subprocessors: At least 30 days advance notice via email
• Removed Subprocessors: Notification within 30 days of removal
• Material Changes: Immediate notification for changes affecting data processing scope

You may object to any new subprocessor by contacting us within the notice period. If we cannot address your concerns, you may terminate your subscription without penalty.

Data Protection Agreements

We have executed Data Processing Agreements (DPAs) with all subprocessors that process personal data. These agreements ensure that:

• Subprocessors process data only on our instructions
• Appropriate technical and organizational security measures are in place
• Subprocessors assist with data subject rights requests
• Data is deleted or returned upon termination of services
• Subprocessors submit to audits and inspections

International Data Transfers

Some of our subprocessors are located outside the European Economic Area (EEA). For these transfers, we rely on:

• Standard Contractual Clauses (SCCs) - EU-approved transfer mechanisms
• UK International Data Transfer Agreement (IDTA) - For UK data
• Supplementary Measures - Additional safeguards where required by Schrems II