InnRay AI Subprocessors
Last Updated: June 22, 2025
Effective Date: June 23, 2025
Version: 1.0
Overview
This page lists third-party service providers ("Subprocessors") that may process customer data in connection with the InnRay AI Assistant service.
Current Subprocessors
| Provider | Service | Data Processing | Location |
|---|---|---|---|
| OpenAI | AI Language Processing | Query text and document content (temporary processing only) | Global (primarily US) |
| Qdrant Cloud | Vector Database | Document embeddings and search indexes | Multiple regions available |
| Amazon Web Services | Cloud Infrastructure | All customer data for hosting and storage | Multiple regions available |
| Stripe | Payment Processing | Billing information and payment data | Global operations |
Important: Customer data is never used for AI model training by any provider. All AI processing is temporary and data is not retained after response generation. Payment data is processed separately by Stripe under PCI DSS compliance standards.
Data Protection Measures
- Data minimization: Only necessary data shared for service delivery
- Purpose limitation: Data used solely for specified service functions
- No data retention: AI providers do not store customer data
International Data Transfers
For subprocessors located outside the European Economic Area:
- Standard Contractual Clauses (SCCs) govern all data transfers
- Additional security measures including encryption and access controls
- Customer notification of all processing locations
- EU data residency options available for European customers
Customer Options
Bring Your Own Key (BYOK)
Customers may use their own API keys with AI providers for embeddings creation and query processing. Data still flows through our infrastructure but billing and usage tracking is under customer control.
Bring Your Own Cloud (BYOC)
Enterprise customers may deploy the entire service on their own cloud infrastructure, eliminating all shared data processing and providing complete control over data location and security.
Data Residency Control
Standard service deployment uses EU infrastructure (Frankfurt, Germany). Additional AWS regions may become available in the future and can be requested based on customer requirements.
Change Notifications
We notify customers of new subprocessors via email and updates to this page. Customers may contact us with concerns about subprocessor changes.
Notification Methods:
- Email to account administrators
- Updates to this page
- In-platform notifications
Customer Rights
- Right to Information: Request additional details about subprocessor arrangements
- Right to Raise Concerns: Contact us regarding subprocessor changes that may affect your requirements
- Service Termination: Terminate service if subprocessor changes are unacceptable to you
- Consultation: We will consider customer feedback on subprocessor arrangements where practical
Contact Information
For questions about subprocessors or to raise objections, contact us at:
Email: contact@innray.com
Subject: Subprocessor Inquiry
Mailing Address:
InnRay Rafał Pydyniak
ul. Zalesie 3D
62-090 Mrowino, Poland
VAT ID: PL7812007214
Document Updates
This page is updated regularly to reflect current subprocessor arrangements. Material changes are communicated to customers in advance per our Privacy Policy.