Seaboss
Subprocessors
Last updated: 2026-05-15
Seaboss uses the third-party services listed below to operate the platform. Each row identifies the vendor, the purpose it serves, the categories of customer data that may flow to it, and a link to that vendor's Data Processing Agreement (DPA).
Vendors marked per-tenant are activated only when a customer enables the corresponding feature (e.g. selecting an alternative LLM provider, connecting Google Drive, etc.). The non-per-tenant vendors are used by default for every customer.
16 subprocessors
| Vendor | Purpose | Data categories | Location | DPA |
|---|---|---|---|---|
Hetzner Cloud | VPS hosting — mgmt server + tenant agent fleet | EmailAgent contentPaymentEncrypted backups | EU | DPA → |
Cloudflare | DNS, CDN, WAF, rate limiting | IP addressRequest logs | Global edge | DPA → |
Stripe | Subscriptions, payments, Stripe Tax | EmailPayment | US | DPA → |
Anthropic | Default agent LLM (Claude API) | Agent content | US | DPA → |
Resend | Transactional + lifecycle emails | Email | US | DPA → |
Backblaze B2 | Off-site encrypted DB backups (via rclone) | Encrypted backups | US | DPA → |
Healthchecks.io | Cron-job uptime pings (heartbeat metadata only) | Heartbeat only | US | DPA → |
OpenAI per-tenant | Optional per-tenant LLM | Agent content | US | DPA → |
Google (Gemini AI) per-tenant | Optional per-tenant LLM | Agent content | US | DPA → |
Alibaba Cloud (Qwen) per-tenant | Optional per-tenant LLM | Agent content | CN/SG | DPA → |
xAI (Grok) per-tenant | Optional per-tenant LLM | Agent content | US | DPA → |
OpenRouter per-tenant | LLM routing gateway (transit to additional model owners) | Agent content | US | DPA → |
Google (OAuth + Drive/Sheets/Calendar) per-tenant | Customer-initiated integrations (drive.file scope only — no broad drive.readonly) | OAuth tokensIntegration data | US | DPA → |
Intuit (QuickBooks) per-tenant | Customer-initiated integration (OAuth) | OAuth tokensIntegration data | US | DPA → |
Shopify per-tenant | Customer-initiated integration (OAuth) | OAuth tokensIntegration data | CA | DPA → |
Composio per-tenant | Social-media integration proxy (MCP) — Instagram first; Facebook/X/TikTok/LinkedIn to follow. Holds the customer-granted OAuth tokens for each connected social platform. | OAuth tokensIntegration data | US | DPA → |
Hetzner Cloud
VPS hosting — mgmt server + tenant agent fleet
EmailAgent contentPaymentEncrypted backups
Location: EU
OpenRouter
per-tenant
LLM routing gateway (transit to additional model owners)
Agent content
Location: US
Google (OAuth + Drive/Sheets/Calendar)
per-tenant
Customer-initiated integrations (drive.file scope only — no broad drive.readonly)
OAuth tokensIntegration data
Location: US
Intuit (QuickBooks)
per-tenant
Customer-initiated integration (OAuth)
OAuth tokensIntegration data
Location: US
Shopify
per-tenant
Customer-initiated integration (OAuth)
OAuth tokensIntegration data
Location: CA
Composio
per-tenant
Social-media integration proxy (MCP) — Instagram first; Facebook/X/TikTok/LinkedIn to follow. Holds the customer-granted OAuth tokens for each connected social platform.
OAuth tokensIntegration data
Location: US
Changes to this list will be announced in advance via the Seaboss blog. If you need contractual notification of subprocessor changes for a DPA, contact [email protected].