{
  "$schema": "https://json-schema.org/draft-07/schema#",
  "id": "https://clarivy.ai/legal/subprocessors.json",
  "version": "1.0",
  "effective_date": "2026-06-11",
  "controller": "HG-Solution Co., Limited",
  "controller_cr": "80121024",
  "notice_period_days": 30,
  "objection_right": "Customer may terminate the affected services and receive a pro-rata refund; or, if the objection is material, terminate the entire MSA with 90 days' transition assistance.",
  "subprocessors": [
    {
      "n": 1,
      "name": "Stripe Inc.",
      "country": "US / IE",
      "purpose": "Payment processing",
      "data_shared": ["customer_name", "email", "billing_amount", "ip", "payment_method_last4"],
      "retention": "7y (txn); 30d (logs)",
      "dpa_status": "Standard Stripe DPA signed",
      "zdr": false,
      "url": "https://stripe.com/legal/dpa"
    },
    {
      "n": 2,
      "name": "Cloudflare Inc.",
      "services": ["R2", "Workers", "Pages", "Email Routing"],
      "country": "US with EU/APAC edge",
      "purpose": "Hosting, storage, transactional email routing",
      "data_shared": ["audit_pdf", "raw_json", "telemetry", "transactional_email"],
      "retention": "Customer-controlled",
      "dpa_status": "Click-to-sign DPA available",
      "zdr": false,
      "url": "https://www.cloudflare.com/cloudflare-customer-subprocessor-list/"
    },
    {
      "n": 3,
      "name": "OpenAI OpCo LLC",
      "country": "US",
      "purpose": "AI-search query execution (ChatGPT engine)",
      "data_shared": ["prompt_text", "brand_mentions"],
      "retention": "0 (ZDR)",
      "dpa_status": "ZDR + DPA signed",
      "zdr": true,
      "url": "https://openai.com/policies/data-processing-addendum/"
    },
    {
      "n": 4,
      "name": "Anthropic PBC",
      "country": "US",
      "purpose": "AI-search query execution (Claude engine)",
      "data_shared": ["prompt_text", "brand_mentions"],
      "retention": "0 (ZDR)",
      "dpa_status": "ZDR + DPA signed",
      "zdr": true,
      "url": "https://trust.anthropic.com/"
    },
    {
      "n": 5,
      "name": "Perplexity AI Inc.",
      "country": "US",
      "purpose": "AI-search query execution (Perplexity Sonar engine, online)",
      "data_shared": ["prompt_text", "brand_mentions"],
      "retention": "30d (commercial default)",
      "dpa_status": "Commercial DPA + ZDR on request",
      "zdr": "available on request",
      "url": "https://docs.perplexity.ai/guides/processors-data-retention"
    },
    {
      "n": 6,
      "name": "ByteDance Volcengine",
      "country": "CN",
      "purpose": "AI-search query execution (Doubao 豆包 engine)",
      "data_shared": ["prompt_text_zh", "brand_mentions_zh"],
      "retention": "0 (ZDR)",
      "dpa_status": "ZDR enterprise contract signed",
      "zdr": true,
      "url": "https://www.volcengine.com/docs/82379"
    },
    {
      "n": 7,
      "name": "Moonshot AI Inc.",
      "country": "CN",
      "purpose": "AI-search query execution (Kimi engine)",
      "data_shared": ["prompt_text_zh", "brand_mentions_zh"],
      "retention": "0 (ZDR)",
      "dpa_status": "ZDR enterprise contract signed",
      "zdr": true,
      "url": "https://platform.moonshot.cn/"
    },
    {
      "n": 8,
      "name": "Resend Inc.",
      "country": "US with EU edge",
      "purpose": "Transactional email delivery",
      "data_shared": ["customer_email", "audit_pdf_link"],
      "retention": "30d (delivery logs)",
      "dpa_status": "Standard Resend DPA signed",
      "zdr": false,
      "url": "https://resend.com/legal/dpa"
    }
  ]
}