Sendbird sub-processor notification

Dear Customer, At Sendbird, trust and security are foundational to everything we do. We continuously enhance our platform to maintain a secure and reliable environment, so you can confidently deliver the same level of trust to your own users. As part of our ongoing improvements and in accordance with our data protection obligations, we are notifying you of new service providers that will be added as Sendbird sub-processors effective October 07, 2026 (5 days after the date of this notice). These service providers may process your organization's "personal data" (as defined under the EU General Data Protection Regulation (GDPR)) in connection with Sendbird's products and services. This email serves as formal notice of these additions. All information handled by these sub-processors will remain protected as confidential information under the terms of Sendbird's Data Processing Agreement (DPA) and sub-processing obligations. Sub-Processor Information Please find the list of newly added sub-processors below: Name: MongoDB, Inc. (Voyage AI / Atlas) Data Location: United States Description of Processing: Reranking API (Voyage AI rerank models) accessed via MongoDB Atlas, used to reorder knowledge-base search candidates by relevance in Sendbird's AI Agent RAG pipeline before answer generation. Data Processed: End-user queries and retrieved knowledge-base content chunks. No direct identifiers (name, email, phone) sent as separate fields. Name: TypeSafe AI Data Location: United States Description of Processing: Classification/decision-model API (Jev, System One models) used for intent classification, actionbook routing, and guardrail-style checks in the AI Agent pipeline. Zero Data Retention and No-Training enabled on every request. Data Processed: End-user messages and conversation context sent for classification/routing decisions. Name: Claude Code (Anthropic, PBC) Data Location: AI-assisted software development, debugging and support engineering Description of Processing: Used internally by Sendbird engineering and support personnel for AI-assisted software development, debugging, and troubleshooting. Data is processed transiently to generate code suggestions, debugging assistance, and technical support; not used for production customer-facing processing. Customer Data is not used to train models. Provider may retain inputs and outputs for up to 30 days solely for abuse monitoring. Data Processed: Source code, technical logs, error messages, and related debugging artifacts that may contain limited Customer Data. Name: Codex (OpenAI, L.L.C.) Data Location: United States Description of Processing: Used internally by Sendbird engineering and support personnel for AI-assisted software development, debugging, and troubleshooting. Data is processed transiently to generate code suggestions, debugging assistance, and technical support; not used for production customer-facing processing. Customer Data is not used to train models. Provider may retain inputs and outputs for up to 30 days solely for abuse monitoring. Data Processed: Source code, technical logs, error messages, and related debugging artifacts that may contain limited Customer Data. This list has been reviewed and approved through Sendbird's Vendor Risk Assessment and third-party risk management process. If you have any questions or wish to raise a concern, please contact us at privacy@sendbird.com within 5 days of receiving this notice. Thank you for trusting Sendbird. Best regards, Sendbird