What should we agree when a technical service provider is involved?
Identify the data the provider receives and whether it acts on another party’s instructions or determines its own purposes. Align instructions, security, further service providers and deletion arrangements with that role. A technical connection or data transfer alone does not make the provider a joint controller.