Last updated July 21, 2026. This describes the data-processing terms Seal offers during beta. It supplements the Terms of Service and the Privacy Policy. To put a countersigned copy in place for your organization, request one at hello@useseal.dev.
1. Roles
For the approval payloads, context, and audit events your organization submits, you are the controller and Seal is the processor. For account and billing data, Seal is the controller, as described in the Privacy Policy.
2. Scope and instructions
Seal processes personal data only to provide the service and on your documented instructions, including these terms and your use of the API and dashboard. We do not sell personal data or use approval content to train models.
3. Confidentiality and security
Personnel with access are bound by confidentiality. We apply technical and organizational measures appropriate to the risk: org-scoped access to every request and key, fail-closed evaluation of untrusted input, and a hash-chained, tamper-evident audit log. See the security page.
4. Subprocessors
You authorize the subprocessors listed on our subprocessors page. We remain responsible for their compliance and will make the current list available on request.
5. International transfers
Data may be processed in the United States and other countries where our subprocessors operate. Where required, transfers rely on appropriate safeguards such as Standard Contractual Clauses.
6. Data-subject requests and assistance
We will assist you, taking into account the nature of the processing, in responding to requests from data subjects and in meeting your security, breach-notification, and impact-assessment obligations.
7. Breach notification
We will notify you without undue delay after becoming aware of a personal-data breach affecting your data, with the information you need to meet your own obligations.
8. Return and deletion
On termination you can export your data, and deleting your organization removes it, subject to anything we are legally required to keep. The audit log is append-only by design.
9. Contact
Data-protection questions: hello@useseal.dev.