Processors have more yasal obligations placed on them in the case of a breach however a controller will be responsible for ensuring the contracts with the processor comply with the GDPR.Secureframe güç simplify the heavy-lift