Sub-processors

1. What a sub-processor is

Sub-processors are third-party suppliers that help us deliver the service and may access part of the entrusted data. Under PIPL and the GDPR we disclose all sub-processors and supervise their processing. This page is an annex to the Data Processing Agreement (DPA).

2. Categories and processing

(1) AI engine and model providers (domestic): process monitored question terms and text excerpts for sampling and generation; (2) AI engine and model providers (overseas, only when the Customer enables cross-border features): same, protected by cross-border transfer mechanisms; (3) Cloud infrastructure providers: servers, storage, networking — data encrypted at rest; (4) SMS and email providers: phone/email and notification content for verification codes and service notices; (5) Payment providers: order and payment data (card data handled by licensed institutions; we store none); (6) Analytics providers (website only): anonymous traffic statistics. The definitive supplier names and processing locations are those in the formal Sub-processor List provided at contracting (customers may request the latest version).

3. Requirements we impose

(1) Data protection terms no less protective than our commitments to customers; (2) no use of customer data to train public models (AI category); (3) processing only on our instructions, no secondary use; (4) security attestations and compliance credentials where applicable; (5) allowing our compliance audits or providing audit reports.

4. Change notice and objection

We give 30 days' notice of new or replacement sub-processors (in-app or email; contracting customers may subscribe to change notices). A Customer with reasonable objection (e.g. unable to meet security requirements) may raise it in writing within the notice period; the parties discuss, and failing agreement the Customer may terminate the affected part with a pro-rata settlement.

5. Requesting the current list

Request the latest sub-processor list via Contact us (enterprise customers may agree a notification channel in contract); we provide it within 5 business days, with change history traceable.