Last updated 13 July 2026
The accurate, per-processor list of sub-processors with purpose, residency, and honest notes. This is the canonical version and is not a draft.
| Sub-processor | Purpose | Residency | Honest note |
|---|---|---|---|
| OVHcloud | EU hosting (compute, database, search) + object storage + key custody | EU (FR, Gravelines) | EU-resident, no-training. Relay-hosted content at rest lives here. |
| Mistral AI | Semantic-search embeddings (mistral-embed) + OCR for scanned / image pages | EU (FR, Paris) | EU-resident, no-training. OCR runs on the Batch API by default (roughly 30-day retention, not zero-retention) - we disclose this rather than claim ZDR. |
| AWS SES | Transactional email | EU (eu-west-1, Ireland) | EU-resident region of a US-parent processor. Transfers rely on the EU Standard Contractual Clauses / EU-US Data Privacy Framework - resident, not sovereign. |
| Stripe | Payments and checkout | US (global) | PCI-handled; no card data touches our servers. Transfers rely on the EU Standard Contractual Clauses / EU-US Data Privacy Framework. |
| Telegram | Optional notification channel | Non-EEA | Opt-in only, no DPA; metadata-only pings, never secret values or codes. May be removed at launch. |
We disclose each processor accurately, including residency and retention. The “EU-resident by default” claim elsewhere on the site is footnoted to this list. Storage you bring yourself (BYO) is your own provider, not one of our sub-processors - data at rest there lives wherever you put that bucket, and Relay still processes it on EU infrastructure.
WELLDONE · VAT PL8531508847 · Szczecin, Poland. Governed by Polish law.
Questions? Contact privacy.relay@sairaph.com.