Sub-Processors
Last updated August 26, 2026
This page lists the sub-processors authorised to process Customer Personal Data on behalf of Seamless.ly App Ltd under our Data Processing Addendum (DPA). Customer Personal Data means personal data contained in captured images and voice recordings, Salesforce field metadata, extraction results, and customer content supplied in support requests, processed on the customer's behalf.
Current Sub-Processors
| Sub-processor | Service | Location |
|---|---|---|
| Google Cloud EMEA Limited and/or Google LLC (Google Cloud Platform / Firebase) | Backend infrastructure hosting the transient AI-request path. Captured inputs, field metadata, and extraction results are relayed in memory only and are not persisted by Seamless.ly. | United States |
| OpenAI OpCo, LLC and/or OpenAI Ireland Limited (OpenAI API Platform) | Transcription, image analysis, and structured extraction of captured inputs and generation of extraction results. OpenAI may retain request inputs and outputs for up to 30 days for abuse and misuse monitoring unless a different approved retention setting applies; API data is not used to train OpenAI models by default. | United States |
| Salesforce (Seamless.ly's internal Salesforce service) | Storage of customer content supplied in support requests (support materials), only to the extent a customer or user provides it, retained for two years after the ticket closes. | European Union |
Controller-Side Service Providers
Providers we use solely for our own processing as an independent controller, such as Plus Five Five, Inc. (dba Resend) for website-form email delivery, Firebase Analytics for pseudonymized product-usage events, and our internal Salesforce CRM for customer-relationship administration, are not sub-processors of Customer Personal Data. They are disclosed in our Privacy Policy.
Change Notifications
We email each customer's contractual administration or privacy contact at least 30 days before authorising a new sub-processor to process Customer Personal Data. Customers may object within 14 days after notice on reasonable data-protection grounds, as set out in the DPA. Questions: privacy@seamless.ly.