# List subprocessors

URL: /en/docs/api/v1/subprocessors/get
Last Updated: 2026-07-30T21:15:44.962Z

## Description
No description available.

## Available Actions
- Execute GET request
- View request parameters
- View response schema
- Get code examples
- Navigate to related topics
- View step-by-step instructions
- Get best practices

## Content
### GET /api/v1/subprocessors

**List subprocessors**

Retrieve the subprocessor register for the authenticated tenant.

**Authentication:** Bearer token (`Authorization: Bearer <token>`)

**Responses:**

- `200` - List of subprocessors for the current tenant
  - `subprocessors` (array of Subprocessor (object))
    - `id` (string): Subprocessor ID
    - `title` (string): Vendor display name
    - `description` (string): Short plain description
    - `description_markdown` (string): Detailed Markdown usage description
    - `location` (string): Location of processing
    - `badge` (string): Public URL for the vendor badge asset
    - `template` (string): Template ID used during creation
    - `type` (enum: required | optional): Whether the subprocessor is required for core operations or optional
    - `featured` (boolean): Pin this vendor to the Trust Center overview preview
    - `date_created` (string (date-time))
    - `date_updated` (string (date-time))

  Example (success):
  
  ```json
  {
  "subprocessors": [
    {
      "id": "vendor-123",
      "title": "Acme Cloud Hosting",
      "location": "eu-west-1 (Ireland)",
      "type": "required",
      "description": "Core infrastructure provider for production workloads.",
      "description_markdown": ""
    },
    {
      "Data classes": "application logs, analytics events"
    },
    {
      "Retention": "30 days"
    },
    {
      "Contract": "ISO 27001, SOC 2 Type II"
    }
  ],
  "badge": "https://directus.example.com/assets/vendor-badge",
  "template": "template-001",
  "featured": true,
  "date_created": "2025-03-01T10:05:00.000Z",
  "date_updated": "2025-04-12T08:30:00.000Z"
}
  ```
- `401` - Unauthorized
  - `error` (string, required): Machine-readable error code
  - `details` (string): Human-readable error details

  Example (unauthorized):
  
  ```json
  {
  "error": "unauthorized",
  "details": "Missing or invalid bearer token"
}
  ```
- `500` - Internal server error
  - `error` (string, required): Machine-readable error code
  - `details` (string): Human-readable error details

  Example (server_error):
  
  ```json
  {
  "error": "server_error",
  "details": "Unexpected error occurred"
}
  ```

**Code samples:**

cURL:

```bash
curl -X GET "https://app.orbiqhq.com/api/v1/subprocessors" \
  -H "Authorization: Bearer $ACCESS_TOKEN"
```

JS (fetch):

```javascript
const res = await fetch("https://app.orbiqhq.com/api/v1/subprocessors", {
  headers: { Authorization: `Bearer ${apiKey}` }
});
const { subprocessors } = await res.json();

```

