Security

Data resides in Japan — not mainland China, not the US

Your data is processed and stored in the Tokyo, Japan region, hosted on cloud platforms certified to ISO 27001 and SOC 2. Data does not transit mainland China and does not land on US soil — balancing data sovereignty with world-class infrastructure security.

Successful relay requests do not persist full conversation content

For ordinary successful relay requests, BazaarLink does not store full prompts or model responses as product data. We primarily retain usage metadata required for billing and operations (timestamp, model, token count, cost, latency). For troubleshooting and abuse investigation, error paths may store truncated request summaries or upstream error bodies.

Upstream model providers, public probes, model tests, and image/video generation features have their own data-handling boundaries; the full documentation controls those details.

Security design aligned with international standards

BazaarLink has initiated the implementation of an ISO/IEC 27001:2022 information security management system (ISMS), covering scope definition, risk assessment, implementation of Annex A controls, and an information security policy framework (approved and effective by top management). We are also strengthening our privacy and data protection practices according to the core principles of the GDPR data protection framework (data minimization, purpose limitation, security safeguards, and data subject rights), and handle access, correction, and deletion requests in accordance with Taiwan's Personal Data Protection Act.