Subprocessors
Version 2026-08-14 · Effective August 14, 2026
This list forms part of the Data Processing Addendum. We give 30 days' notice before adding a provider, and you may object on reasonable data protection grounds — see §6.3 of that document.
1. Always engaged
1.1These providers are used for every account. They are the infrastructure the platform runs on, and the Service cannot be provided without them.
| Provider | Purpose | Data processed | Location |
|---|---|---|---|
| Supabase | Primary database, authentication and file storage. | All Customer Data and Account Data, including customer records, documents, photographs and message logs. | United States |
| Vercel | Application hosting and serverless functions. | All data in transit; request logs including IP addresses. | United States |
| Stripe | Payment processing, subscription billing, and Connect account onboarding. | Customer and End Customer name, email, billing address, payment amounts and card data. Card numbers are held by Stripe and never reach RelayHand. | United States |
| Resend | Outbound email delivery and sending-domain verification. | Recipient email address, message subject and body, delivery status. | United States |
| Telnyx | SMS delivery and receipt, telephone number provisioning, 10DLC brand and campaign registration. | Sender and recipient phone numbers, message content, delivery status; and for registration, business name, address and EIN. | United States |
| Anthropic | AI features: drafting messages, extracting lead details from transcripts, and serving MCP requests. | The content submitted for each request — message history, transcript text or record data as applicable. | United States |
| Upstash | Rate limiting and short-lived session state. | IP addresses and counters; transient session content where applicable. | United States |
2. Engaged only if you enable the feature
2.1These receive data only where you turn on the feature they support. If you never enable it, no data reaches them.
| Provider | Purpose | Data processed | Location |
|---|---|---|---|
| ElevenLabs | AI voice receptionist — answering inbound calls and producing transcripts. | Call audio, transcripts, caller phone number. | United States |
| Intuit (QuickBooks Online) | One-way accounting synchronisation. | End Customer name and contact details, invoice and payment records. | United States |
| Address autocomplete and geocoding; one-way bookkeeping sync to Google Sheets; sign-in with Google. | Partial address strings typed into address fields; expense and invoice records for the Sheets sync; email address and name for sign-in. | United States | |
| RentCast | Property, parcel and ownership data lookup. | Property address submitted for lookup. | United States |
| Telegram | Operational alerts to a business owner who connects the notification bot. | Alert content, which may include a customer name and job detail. | International |
3. Commitments that apply to all of them
3.1Each provider is engaged under terms requiring it to process data only on our instructions, to keep it confidential, and to apply appropriate security measures. We remain responsible to you for their performance.
3.2No training on your data. Our AI providers are engaged under terms that prohibit using content submitted through their APIs to train or improve their models. This is the commitment the “we do not train on your data” statement in the Privacy Policy and §10.4 of the Terms rests on.
3.3Payment card data never reaches us. Card details are collected by Stripe directly from the cardholder. We store a reference, not a card number.
3.4Some providers engage their own subprocessors — chiefly cloud infrastructure. Those relationships are governed by our agreements with the provider concerned.
4. Notice of changes
4.1We will update this page and email the address on your account at least 30 days before engaging a new subprocessor, except where an emergency replacement is needed to keep the Service running, in which case we will give as much notice as is practicable.
4.2To object, or to ask a question about a provider on this list, write to privacy@relayhand.com.