InnRay AI Subprocessors

Last Updated: June 22, 2025
Effective Date: June 23, 2025
Version: 1.0

Overview

This page lists third-party service providers ("Subprocessors") that may process customer data in connection with the InnRay AI Assistant service.

Current Subprocessors

ProviderServiceData ProcessingLocation
OpenAIAI Language ProcessingQuery text and document content (temporary processing only)Global (primarily US)
Qdrant CloudVector DatabaseDocument embeddings and search indexesMultiple regions available
Amazon Web ServicesCloud InfrastructureAll customer data for hosting and storageMultiple regions available
StripePayment ProcessingBilling information and payment dataGlobal operations

Important: Customer data is never used for AI model training by any provider. All AI processing is temporary and data is not retained after response generation. Payment data is processed separately by Stripe under PCI DSS compliance standards.

Data Protection Measures

  • Data minimization: Only necessary data shared for service delivery
  • Purpose limitation: Data used solely for specified service functions
  • No data retention: AI providers do not store customer data

International Data Transfers

For subprocessors located outside the European Economic Area:

  • Standard Contractual Clauses (SCCs) govern all data transfers
  • Additional security measures including encryption and access controls
  • Customer notification of all processing locations
  • EU data residency options available for European customers

Customer Options

Bring Your Own Key (BYOK)

Customers may use their own API keys with AI providers for embeddings creation and query processing. Data still flows through our infrastructure but billing and usage tracking is under customer control.

Bring Your Own Cloud (BYOC)

Enterprise customers may deploy the entire service on their own cloud infrastructure, eliminating all shared data processing and providing complete control over data location and security.

Data Residency Control

Standard service deployment uses EU infrastructure (Frankfurt, Germany). Additional AWS regions may become available in the future and can be requested based on customer requirements.

Change Notifications

We notify customers of new subprocessors via email and updates to this page. Customers may contact us with concerns about subprocessor changes.

Notification Methods:

  • Email to account administrators
  • Updates to this page
  • In-platform notifications

Customer Rights

  • Right to Information: Request additional details about subprocessor arrangements
  • Right to Raise Concerns: Contact us regarding subprocessor changes that may affect your requirements
  • Service Termination: Terminate service if subprocessor changes are unacceptable to you
  • Consultation: We will consider customer feedback on subprocessor arrangements where practical

Contact Information

For questions about subprocessors or to raise objections, contact us at:

Email: contact@innray.com

Subject: Subprocessor Inquiry

Mailing Address:

InnRay Rafał Pydyniak
ul. Zalesie 3D
62-090 Mrowino, Poland
VAT ID: PL7812007214

Document Updates

This page is updated regularly to reflect current subprocessor arrangements. Material changes are communicated to customers in advance per our Privacy Policy.