Effective: 2026-07-25
Subprocessor Register
FORALL publishes providers that may process customer personal data. The production operator must replace configuration fields with the approved live register before launch.
Required register fields
Legal provider name and service purpose; data categories; processing/storage country or region; transfer mechanism where applicable; retention/deletion commitment; and the date added or changed.
Current status
No provider should be inferred from sample configuration. The approved production register is generated from the deployment privacy inventory and must match email, hosting, storage, observability, payment, and support integrations actually enabled.
Changes
Material additions are assessed for security and privacy and notified through the contractual channel before processing where required. Objections can be sent to privacy@forall.ir.