What is a sub-processor?
A sub-processor is a third-party data processor engaged by F5 Advanced WAF with LTM, IPI, and Threat Campaigns (PAYG, 3Gbps). The sub-processor has or potentially will get access to personal data that F5 Advanced WAF with LTM, IPI, and Threat Campaigns (PAYG, 3Gbps) processes on behalf of its customers.
Why and how should I assess this?
If you choose to use F5 Advanced WAF with LTM, IPI, and Threat Campaigns (PAYG, 3Gbps) as a processor, the sub-processors listed will have access to personal data processed on your behalf. When you assess the sub-processors of your vendors, you need to ensure the following:
A signed data processing agreement
You need to have a signed contract in place that commits F5 Advanced WAF with LTM, IPI, and Threat Campaigns (PAYG, 3Gbps) to only use sub-processors with your permission.
Transfers of data out of Europe
If F5 Advanced WAF with LTM, IPI, and Threat Campaigns (PAYG, 3Gbps) uses a sub-processor located outside Europe, there must be a legal basis for the transfer.