Policy | Family 3, Security, Privacy & Trust Disclosures

Sub-Processor Management Policy

POL-GL-135v1.0.0NDAPolicyGL1234S3 Evaluation & AssuranceCritical path

The Subprocessor Register (DIS-GL-009) is the source of truth for who the sub-processors are. It is public, dated and live; this policy does not list them and never will, because a list in two places goes stale in one of them. DIS-GL-010 is the change log and notification feed. This policy states the rules

Permalink trust.pensievelabs.org/documents/POL-GL-135

Classification

NDAMutual NDA required

The five axes

Kind: Policy
Tier: Mutual NDA required
Direction: Pensieve → Hospital
Lifecycle: S3 Evaluation & Assurance
State: Published templateTokens resolve live. An issued instance freezes its render, its token values and its hash.

Record

Doc ID: POL-GL-135
Version: v1.0.0
Last modified: 31 July 2026
Review due: 31 October 2026
Owner: Legal
Family: 3. Security, Privacy & Trust Disclosures
Language: en-IN
Retention: 8 years after the record closes

Execution

Signature: No signature
Stamp duty: No stamping required
Letterhead: standard

Applicability

Jurisdiction: Global (GL)
Applies to: 1234Dedicated, Shared, Customer Cloud, On-Premise
Lane: Assurance
Exit gate: Security review closed; no open blockers
Critical path: On the critical path to cash

Integrity

Length: 1,507 words
SHA-256: B2095ADB861Ab2095adb861abda43534efae57e6b7e6eef09c382534f82e269f41db551a9840

No-repetition rule

This document is the source of truth for: trust:/policies/sub-processors, trust:/documents/POL-GL-135

Those surfaces render this text from here. They do not keep their own copy, so they cannot drift from it.

Depends on

Artefacts this one references or cannot be issued without.

Referenced by

Artefacts that would be blocked if this one were missing or out of date.

Mutual NDA required

Accept the mutual NDA to request access to this tier. Your acceptance is recorded at once and protects both sides; an administrator then grants access, with a target of four business hours.

Accept the mutual NDATime to clear: Target 4 business hours | A person at Pensieve reviews this one.

Where you are

PublicCleared
EmailNot cleared
NDARequired for this document
ClientNot cleared

What this page did not send you

The body of POL-GL-135 was not rendered and was not transmitted to your browser. Everything you can see here (the classification, the summary, the dependency graph, the integrity hash) is register metadata, and it is published deliberately. Knowing that a document exists is not the same as reading it, and hiding the title only makes you send an email.

Available to you right now, without clearing anything

From the same family: Security, Privacy & Trust Disclosures.