Sub-Processor List

1.1This page lists all sub-processors — third-party entities engaged by Seismic Swift AI, Inc. to process Customer Data in connection with the Datum platform. It is maintained in accordance with our Data Processing Addendum (DPA), Section 5.

1.2We maintain a deliberately short sub-processor list. We do not engage sub-processors for analytics, marketing, or advertising — our PostHog analytics instance is self-hosted on our own Azure infrastructure and is therefore not a sub-processor.

1.3All sub-processors are contractually bound to: (a) process Customer Data only as instructed by Seismic Swift AI; (b) implement security measures equivalent to or more stringent than those in our DPA; (c) not further sub-contract processing without our prior written consent; and (d) delete or return Customer Data upon termination.

3.1Seismic Swift AI will provide at least thirty (30) calendar days’ prior written notice before: (a) adding a new sub-processor that will process Customer Data; or (b) replacing an existing sub-processor with a different entity. Notice will be provided via:

• Email notification to the Customer’s designated legal or privacy contact on file
• In-platform notification banner for account administrators
• Update to this page (version-controlled, with a changelog at the bottom)

3.2Notices will specify: the name and registered address of the new or replacement sub-processor; the nature of the processing activity; the categories of Customer Data affected; the applicable transfer mechanism; and the anticipated effective date of the change.

3.3To receive email notifications of sub-processor changes, log in to the Datum platform, navigate to Settings → Privacy & Compliance → Sub-processor Notifications, and enable email alerts. You may also email legal@seismicswiftai.com to be added to our manual notification list.

3.4Changes to existing sub-processors that do not affect the nature or scope of processing (e.g., internal corporate restructurings, name changes, or updates to contact information) do not require advance notice but will be reflected on this page.

4.1Upon receiving notice of a proposed sub-processor addition or replacement, the Customer may object to the change within thirty (30) calendar days of the notification date by sending written notice to legal@seismicswiftai.com with the subject line “Sub-Processor Objection — [Sub-Processor Name]”.

4.2Any objection must state the specific, legitimate grounds on which the Customer objects to the use of the proposed sub-processor as they relate to data protection. General or commercial objections unrelated to data protection do not constitute valid grounds.

4.3Upon receipt of a valid objection, the parties will negotiate in good faith for a period of up to thirty (30) days to resolve the concern. Seismic Swift AI may, at its discretion: (a) agree not to use the proposed sub-processor with respect to the objecting Customer’s data; (b) propose an alternative sub-processor acceptable to both parties; or (c) implement additional contractual or technical safeguards addressing the Customer’s concerns.

4.4If the parties are unable to resolve the objection within thirty (30) days, Customer may, as its sole and exclusive remedy, terminate the affected Service upon thirty (30) days’ written notice, with a pro-rata refund of prepaid fees for the unused portion of the Subscription Term. This right of termination does not apply where the proposed sub-processor is required by applicable law or regulation.

4.5If Customer does not object within the thirty (30) day objection window, Customer is deemed to have consented to the proposed change, and the sub-processor list will be updated accordingly.

Questions about this Sub-Processor List, our data processing practices, or the change notification process should be directed to our Legal team:

For data subject rights requests, contact privacy@seismicswiftai.com. See our DPA and Privacy Policy for full details on our data processing practices.