The basis for https://www.whistleblowing.com.au/about/what-we-do/ sharing, adding, uploading, hosting, accessing or sending personal data out of Europe. Vendors can also add a description of their own impact assessment for data transfers.
Subprocessors are companies that provide a service for https://www.whistleblowing.com.au/about/what-we-do/ and who has or potentially will get access to personal data of their customers.