Geodd LLC is established in the United States.
Geodd provides AI infrastructure services, including:
Where Customer Personal Data is transferred to, processed in, or accessed from a country that has not been recognized as providing an adequate level of data protection under applicable data protection laws, Geodd uses appropriate transfer safeguards as described in its Data Processing Agreement.
These safeguards may include:
For EU customers, API inference is hosted in EU data center infrastructure by default.
For EU/UK customers using EU, UK, EEA, or other selected regional infrastructure, Geodd processes API requests for inference in the applicable selected region, except where access or transfer is required for:
Geodd may also use subprocessors and operational support locations as described in its Data Processing Agreement and Subprocessor List.
Where Geodd offers Customer a choice of infrastructure region, Customer is responsible for selecting the region appropriate for its use of the Services.
If Customer selects infrastructure located outside the EU, EEA, UK, Switzerland, or another relevant jurisdiction, Customer acknowledges and instructs Geodd that Customer Personal Data submitted to the Services may be transferred to and processed in that selected region for the purpose of providing the Services.
For example, if an EU or UK Customer selects or enables non-EU infrastructure for inference, API requests may be routed outside the EU or UK for inference processing.
Customer is responsible for determining whether the selected region is appropriate for its workloads, users, legal obligations, and data protection requirements.
Support and administrative access may occur from Geodd operational locations, including Sri Lanka, where necessary for:
Geodd limits such access based on role, operational need, and applicable safeguards.
Safeguards may include:
Where the GDPR applies and Customer Personal Data is transferred to a country that has not been recognized as providing an adequate level of protection, the parties agree that the EU Standard Contractual Clauses apply as described in Geodd’s Data Processing Agreement.
The applicable module depends on Customer’s role:
For purposes of the EU Standard Contractual Clauses:
The full EU Standard Contractual Clauses are available from the European Commission at: https://commission.europa.eu/publications/publications-standard-contractual-clauses-sccs_en
Where the UK GDPR applies and Customer Personal Data is transferred to a country that has not been recognized as providing an adequate level of protection, the UK International Data Transfer Addendum applies together with the EU Standard Contractual Clauses.
The UK Addendum is incorporated by reference at: https://ico.org.uk/media2/migrated/4019539/international-data-transfer-addendum.pdf
For purposes of the UK Addendum:
Where the Swiss Federal Act on Data Protection applies, the EU Standard Contractual Clauses will be interpreted to protect personal data subject to Swiss data protection law.
For Swiss transfers:
Upon reasonable request, Geodd will provide information reasonably necessary to assist Customer in assessing international transfers of Customer Personal Data.
This may include information about:
Geodd is not required to disclose confidential, commercially sensitive, or security-sensitive information where disclosure could compromise the security of the Services, Geodd, its infrastructure, or other customers.
Geodd implements supplementary measures designed to protect Customer Personal Data in connection with international transfers and remote access.
These measures may include:
For AI model API services, Geodd processes prompts, inputs, outputs, request bodies, and response bodies transiently to provide the requested inference response. Unless separately agreed in writing, Geodd does not store API prompts, API inputs, API outputs, completions, API request bodies, API response bodies, uploaded files, embeddings, customer datasets, or fine-tuning data.
Geodd does not use API data for model training and does not conduct human review of prompts or outputs by default.
Geodd may use subprocessors to provide, secure, support, and operate the Services.
Geodd’s Subprocessor List is available at: geodd.io/legal/subprocessors
The Subprocessor List describes vendors, purposes, categories of data processed, region or processing location information, transfer mechanisms, and notes.
Geodd provides at least 30 days’ prior notice before adding or replacing a Subprocessor that will process Customer Personal Data, as described in Geodd’s Data Processing Agreement.
Geodd may use third-party suppliers for physical hardware, rack space, power, cooling, connectivity, physical maintenance, and physical security.
Geodd does not treat physical infrastructure suppliers as subprocessors unless they process Customer Personal Data on behalf of Geodd.
Physical infrastructure suppliers are not treated as subprocessors where they do not have logical, administrative, operational, support, storage, backup, monitoring, encryption-key, or readable access to Customer Personal Data, workloads, prompts, outputs, logs, backups, storage, or runtime environments.
Emergency access by physical infrastructure suppliers is limited to physical premises, rack, cabling, power, hardware replacement, cooling, connectivity, and physical security. It does not include logical access to systems, workloads, storage, logs, encryption keys, or Customer Personal Data.
Customer is responsible for:
Where Customer selects non-EU, non-UK, or non-adequate infrastructure, Customer acknowledges and instructs Geodd that Customer Personal Data may be transferred to and processed in that selected region for the purpose of providing the Services.
Geodd may update this International Data Transfers page from time to time to reflect changes in:
Where required by Geodd’s Data Processing Agreement, Geodd will provide notice before adding or replacing a Subprocessor that will process Customer Personal Data.
For privacy or data protection questions, contact: [email protected]
For security questions, contact: [email protected]