SiliconFlow (China)
GDPR Compliance
Data Handling
The privacy policy states that personal data is retained as long as necessary to fulfill the purpose for which it was collected, or as required or permitted by applicable law, and then deleted or de-identified when no longer needed for legal or business purposes.
The privacy policy defines 'Interaction Data' as the customer's business and customer data, but the publicly available primary sources reviewed do not state whether API customer data is used for model training.
Certifications & EU AI Act
No certifications disclosed.
Verification
SiliconFlow's public legal docs identify the contracting entity as SILICONFLOW TECHNOLOGY PTE. LTD. and frame compliance primarily under Singapore law, but the reviewed primary sources do not publish a DPA, sub-processor list, SCC commitment, EU data-residency option, or customer-data training statement. For GDPR-sensitive use cases, major processor-side safeguards appear undocumented in the public materials reviewed.