Sub-processors
Last updated: 2026-05-11 (based on current service providers)
Change notice: SeaLink announces new sub-processors 30 days in advance on /changelog. Customers may object in writing within 30 days; if upheld, parties negotiate replacement or termination. See /legal/dpa §6 for the full clause.
Current sub-processors
| Company | Purpose | Region | Data processed |
|---|---|---|---|
| Anthropic, PBC | Upstream LLM provider (Claude family) | United States | Prompts + completions (pass-through, not stored by SeaLink) |
| OpenAI, L.L.C. | Upstream LLM provider (GPT family) + embeddings | United States | Prompts + completions (pass-through) |
| Alibaba Cloud (Aliyun) | Upstream LLM provider (Qwen family) | Singapore / China (mainland) | Prompts + completions (pass-through). Singapore region by default; mainland China only if Customer explicitly opts in. |
| Volcengine (ByteDance) | Upstream LLM provider (Doubao family) | China (mainland), Singapore relay | Prompts + completions (pass-through). Same opt-in rules as Alibaba. |
| Moonshot AI | Upstream LLM provider (Kimi K2) | China (mainland) | Prompts + completions (pass-through) |
| DeepSeek | Upstream LLM provider (DeepSeek V4) | China (mainland) | Prompts + completions (pass-through) |
| Zhipu AI | Upstream LLM provider (GLM-4.6) | China (mainland) | Prompts + completions (pass-through) |
| Stripe, Inc. | Payment processing + invoicing | United States, Ireland (EU) | Customer email, payment instrument (handled by Stripe — SeaLink does not see full card numbers) |
| Resend | Transactional email (magic-link login, billing alerts) | United States | Customer email + email body content |
| Cloudflare | CDN + DDoS protection for sealink.asia | Global edge (PoPs in Singapore, Bangkok, Jakarta) | IP address, browser metadata |
| Sentry | Error monitoring | United States | Stack traces, environment metadata (no PII intentionally) |
Get notified of changes
Subscribe to /changelog RSS (https://sealink.asia/feed). All sub-processor changes are published there.