Every vendor that touches customer data to run inrelay — what each one does, and where it runs.
inrelay uses a small number of third-party vendors to run the service. Each processes customer data only for the purpose listed, under a data-processing agreement, as described in our DPA and privacy policy. We notify customers before adding a subprocessor.
| Subprocessor | Purpose | Location |
|---|---|---|
| Supabase | database, authentication, and storage for workspace content | United States |
| SendGrid (Twilio Inc.) | inbound and outbound email delivery for connected inboxes | United States |
| AI model API (Gemini) for triage, reply drafting, and help-article generation — our primary AI provider; no training on customer data per API terms | United States | |
| OpenAI | AI model API, used as a standby when our primary provider is unavailable; no training on customer data per API terms, inputs and outputs retained up to 30 days for abuse monitoring | United States |
| Groq | AI model API, used as a second standby when both providers above are unavailable; no training on customer data per API terms, no retention by default | United States |
| Anthropic | AI model API (Claude), used only when a customer connects their own Anthropic account in settings. Those calls run under that customer’s own contract with Anthropic, and inrelay sends Anthropic no data for customers who have not connected a key | United States |
| SendGrid (Twilio) | Email sent and received under the CUSTOMER’s own identity — their support address, their replies to end users, and inbound mail forwarded to us. This carries conversation content and end-user email addresses, so it sees more customer data than any other mail vendor here | United States |
| Resend | Transactional email sent under inrelay’s own identity — account-deletion and data-export notices. These must not come from the customer’s own mailbox, because that mailbox is part of what is being torn down. Recipient address and message content only; no unsubscribe, because a notice that someone is about to lose their data is not marketing | United States |
| Stripe | Payments and subscription billing. Card details are entered on Stripe’s own hosted Checkout and never reach inrelay — we store no card data. We hold only Stripe’s customer and subscription identifiers, plus the plan and period they imply | United States |
Vendor list as drafted August 2026 — verify before publish. AI vendor terms checked 20 August 2026.
Questions about a vendor on this list belong with the data processing agreement; the rights you hold over the data itself are summarised at /gdpr, and the commercial relationship lives in the terms of service.
Give your customers faster answers and your team their evenings back.
Desktop and mobile. Free for solo.