TOMs & sub-processors - Canada
Technical and Organisational Measures
GotPhoto undertakes to implement physical, organisational and technical measures to ensure the security, confidentiality and integrity of personal data.
Technical and Organisational Measures. Last updated: 13 August 2026
Sub-processors
We engage selected sub-processors to provide our contractually agreed services. These sub-processors operate exclusively within the framework of the data processing agreement (DPA) concluded between us and our customers. All sub-processors are contractually bound in accordance with Article 28 of the GDPR and are subject to at least the same data protection obligations as we are.
The current list of sub-processors used can be downloaded here.
Status: 13 August 2026