Update DPA subprocessor list URLs from Delve to Trust Center

[ulziibay-kernel]

Summary

• Replaced 2 stale trust.delve.co/kernel URLs in the DPA with trust.kernel.sh/subprocessors (Exhibit B sections 2 and 4)
• Updated Last Modified date from November 10, 2025 to April 13, 2026

Kernel migrated from Delve to Vanta for compliance management, but the published DPA still pointed customers to the old Delve trust center for the authorized subprocessor list. That URL no longer works.

Test plan

• Verify https://trust.kernel.sh/subprocessors loads correctly
• Confirm the DPA renders properly at kernel.sh/docs/dpa after merge

Made with Cursor

---

Note

Low Risk
Edits a legal document only, updating referenced URLs and the modification date with no impact on product behavior. Risk is limited to potential broken/incorrect links if the new trust center URL changes.

Overview
Updates dpa.mdx to replace the Authorized Subprocessors list link from trust.delve.co/kernel to https://trust.kernel.sh/subprocessors in Exhibit B (transfer recipients and subprocessor list sections).

Also updates the DPA Last Modified date to April 13, 2026.

^{Reviewed by Cursor Bugbot for commit 7bf5bbb. Bugbot is set up for automated code reviews on this repo. Configure here.}

[mintlify]

Preview deployment for your docs. Learn more about Mintlify Previews.

Project	Status	Preview	Updated (UTC)
Kernel	🟢 Ready	View Preview	Apr 13, 2026, 10:52 PM

💡 Tip: Enable Workflows to automatically generate PRs for you.

[firetiger-agent]

Firetiger deploy monitoring skipped

This PR didn't match the auto-monitor filter configured on your GitHub connection:

Any PR that changes the kernel API. Monitor changes to API endpoints (packages/api/cmd/api/) and Temporal workflows (packages/api/lib/temporal) in the kernel repo

Reason: PR updates DPA documentation URLs but does not change kernel API endpoints or Temporal workflows.

To monitor this PR anyway, reply with @firetiger monitor this.

[cursor]

Risk assessment: Very Low.

I verified the diff directly. The PR changes only dpa.mdx and is limited to:

• Updating the "Last Modified" date
• Replacing two subprocessor list URLs from trust.delve.co/kernel to trust.kernel.sh/subprocessors

There are no application codepath changes, no logic/runtime behavior changes, and no infrastructure/security boundary changes. Blast radius is limited to documentation/legal content links, so this is safe to approve.

  

_{Sent by Cursor Automation: Assign PR reviewers}