Global PRP (Privacy Recognition for Processors) is the Forum's certification program for DATA PROCESSORS - organizations that process personal data on behalf of Controllers (rather than determining purposes/means themselves). PURPOSE: bridges Controller-Processor compliance gap in cross-border data transfers + provides Controllers a vetted vendor list + simplifies Controller-Processor agreements + reduces Controller burden assessing each Processor individually. PROCESSORS COVERED: cloud service providers (AWS + Azure + Google Cloud + Oracle Cloud + Alibaba Cloud) + SaaS providers (Salesforce + Workday + ServiceNow + Adobe + HubSpot + Zendesk + many others) + analytics platforms (Mixpanel + Amplitude + Segment + Heap + Adobe Analytics) + customer service (Zendesk + Intercom + Salesforce Service) + marketing automation (Marketo + HubSpot + Mailchimp + ConvertKit) + identity platforms (Auth0 + Okta + Ping + ForgeRock) + payment processors (Stripe + PayPal + Adyen + Worldpay) + AI/ML services + IT-services-providers + many sectors. CERTIFICATION REQUIREMENTS: 50 PROGRAM REQUIREMENTS adapted for processor role including (a) Controller-Processor agreement obligations; (b) sub-processor management + flow-down obligations; (c) information security safeguards (similar to Controller-side but processor-focused); (d) breach notification to Controller; (e) cooperation with Controller in responding to data subject requests; (f) data deletion + return upon agreement termination; (g) accountability + recordkeeping; (h) audit cooperation; (i) sub-processor disclosure + Controller approval where required. ACCREDITED AAs FOR PRP: same as Controller-side + additional Processor-specialist AAs. RECOGNITION: Controllers can rely on certified Processor as adequacy evidence for Processor selection + due diligence; reduces vendor-management burden; certified Processors can market themselves as Privacy-friendly + facilitating cross-border data flows.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.