Which vendor would you rather use in this context, with your sensitive customer data?
-vendor A's list of sub-processors is a mile long and includes providers of questionable repute;
-vendor B's list is short and includes AWS and GCP
It is refreshing actually. They can accurately answer questions on how everything works and there is no subsubsubprocessors to worry about.