Subprocessors
Every third party that touches customer data, what they do with it, and what we would tell you before adding another.
The list
Three, and we would rather keep it that way. Each operates under a data processing agreement with the same obligations we owe you.
- Meta Platforms
- Message delivery on WhatsApp, Instagram and Messenger. Receives message content, the recipient’s phone number or account handle, and delivery status. This one is not a choice: it is the channel you signed up to use, and no messaging platform can route a WhatsApp message without it.
- Our cloud infrastructure provider
- Application hosting, the managed database and the object storage holding attachments — so, in practice, everything RelayPlus stores. Named to customers under NDA on request; we do not publish which one, and you should weigh that when you assess us.
- Transactional email only — sign-in links, workspace invitations and account notices. Receives the recipient’s email address and the contents of that email. No conversation data, no contact records, no attachments.
What we do not use
Worth stating, because an earlier version of our privacy policy named four companies that never received anything, and a subprocessor list is only useful if it is exact.
- No payment processor. Wallet balances are recorded directly and no card data exists to share.
- No AI or model provider. The AI features described on our marketing pages are not built, and nothing is sent anywhere for inference.
- No analytics, advertising or attribution vendor. There are no third-party tags on this site or in the app.
- No support or CRM tool holding your conversations. Support runs on the same email address published here.
Adding one
We will post the change here and email every workspace owner at least 30 days before a new subprocessor begins processing. If you object within that window, tell us and we will either exclude your workspace where that is technically possible or let you terminate for the remainder of your term with a pro-rata refund. That is a real commitment and not a formality — but be aware that objecting to Meta means objecting to the product working at all.
Where processing happens
All three operate in and transfer data across multiple jurisdictions. Transfers out of the EEA and the UK rely on the European Commission’s Standard Contractual Clauses. We do not currently offer a choice of data region, and we will say so here before that changes.
Questions
Write to [email protected]. Data processing agreements, subprocessor terms and the identity of our infrastructure provider are available to customers on request, under NDA for the last of those. Our EU representative is Ravenholm Data Services BV, Prinsengracht 263, Amsterdam.