Sub-processors

Last updated 2026-10-12

About this list

This page lists the sub-processors that SeqOps AB uses to provide the SeqOps platform. A sub-processor is a third party that processes, or can technically access, personal data that SeqOps processes on behalf of its customers. This list forms part of Annex III of our Data Processing Agreement (DPA). For each sub-processor we state where the processing takes place, why it is necessary, which personal data is involved and the safeguard used for any transfer outside the European Economic Area (EEA).

Amazon Web Services EMEA SARL, Sverige filial

Location: Sweden / EEA (AWS eu-north-1, Stockholm). Disaster-recovery copies of audit logs are stored in eu-central-1 (Frankfurt), Germany. Function: Cloud hosting, databases, file storage, backups and transactional email delivery (Amazon SES), required to host and operate the Services. Personal data processed: All customer personal data in the Services: user account data (name, email address, role); Monitoring Agent data (host names, IP and MAC addresses, user names, process, file and sign-in activity); cloud activity logs (user identities, email addresses, IP addresses); security findings and reports; content of service emails. Transfer mechanism: Processing within the EEA.

Functional Software, Inc. d/b/a Sentry

Location: United States (entity); error data is stored in Sentry's EU region, Germany. Function: Error monitoring of the SeqOps web application backend, required to detect and fix software errors affecting the security and availability of the Services. Personal data processed: Technical error reports (stack traces and request metadata) which may incidentally contain a user identifier, email address or IP address. Transfer mechanism: Standard Contractual Clauses (Module 3), incorporated in Sentry's Data Processing Addendum.

Opsio Pvt. Ltd.

Location: India. Function: Software development, maintenance, technical support, infrastructure and operations, required to develop, operate and support the Services on behalf of SeqOps. Personal data processed: Access to customer personal data, technical data, logs, configurations and SeqOps systems as necessary to provide the Services. Transfer mechanism: Standard Contractual Clauses (Module 3), with supplementary measures and a transfer impact assessment.

GitHub, Inc.

Location: United States. Function: Source code hosting and automated build and deployment of the Services (CI/CD), required to build and deploy every change to the Services. Personal data processed: No routine processing of customer personal data. The deployment pipeline has technical access to the production environment and may record short excerpts of technical logs when a deployment fails. Transfer mechanism: Standard Contractual Clauses (Module 3), incorporated in GitHub's Data Protection Agreement.

Vexora Solutions LLP

Location: India. Function: Software development and maintenance contractor, required to develop and maintain the Services. Personal data processed: Technical access to SeqOps source code and the ability to deploy to the production environment, which gives technical access to customer personal data where necessary to develop, maintain and deploy the Services. Transfer mechanism: Standard Contractual Clauses (Module 3), with supplementary measures and a transfer impact assessment.

AI providers

SeqOps does not use any third-party AI provider to process customer personal data in the SeqOps platform. Remediation guidance is generated by SeqOps's own rule-based knowledge base.

Changes to this list

SeqOps gives customers prior notice before adding or replacing a sub-processor. Customers may object on reasonable data-protection grounds within thirty (30) calendar days of the notice, as set out in the DPA. Vendors that process only SeqOps's own data as controller, such as for our public website, billing or the website chatbot, are described in our Privacy Policy, not in this list. Questions about this list can be sent to support@seqops.io.