RelyShield Subprocessors
Digital security and account recovery platform offering data removal, breach checking, password vault, and account recovery services.
- Subprocessors
- 21
- Locations
- 4
- Categories
- 11
- Last scanned
| Name | Category | Purpose | Location | Data processed |
|---|---|---|---|---|
| Google Cloud Platform DPA | Cloud Infrastructure | Primary hosting, compute, storage, managed database, snapshot backups and logging for the Service. |
|
Account data, Vault ciphertext, data-removal and recovery records, application logs and encrypted backups. |
| Cloudflare DPA | Cloud Infrastructure | CDN, WAF, DDoS mitigation, DNS, edge caching, request filtering and DNS resolution. |
|
IP addresses, User-Agent strings, request metadata, security-event telemetry. |
| Stripe DPA | Payment Processing | Payment processing, subscription management, customer portal. |
|
Billing email, name, postal address, card details (held by Stripe), transaction metadata. |
| Twilio / SendGrid DPA | Transactional email delivery and inbound parsing. |
|
Recipient email address, message subject and body, delivery telemetry. | |
| ManyChat DPA | Communications | Automated replies to Instagram comments and messages. |
|
Instagram name and ID, message text, button taps. |
| OpenAI DPA | AI | GPT-4o-mini / GPT-4o API for classification, composition and chat. |
|
Feature-specific prompts (broker reply text, case context, user chat message); never raw Vault ciphertext or master-password material. |
| Have I Been Pwned PP | Security | Breach check API and email monitoring. |
|
Email address for server-side lookups; SHA-1 hash prefix for password checks. |
| MaxMind | Data Enrichment | GeoIP database for country-level resolution of login IP addresses. |
|
Login IP addresses (offline GeoLite2 copy; no per-request transfer). |
| Serper.dev | Search | Programmatic Google search API for Data Removal scanner exposure URL discovery. |
|
Search queries that may contain names, email addresses or phone numbers. |
| Google Search | Search | Custom Search API for Tier 2 exposure checks. |
|
Search API call data. |
| Google Workspace / Gmail | Support and privacy mailbox. |
|
Support and privacy correspondence. | |
| Google LLC — GA4 and advertising signals | Analytics | Site measurement after analytics cookies; ads/personalisation signals after marketing cookies. |
|
Website measurement and advertising signals. |
| Google reCAPTCHA | Security | Bot protection on signup, contact and data-removal forms. |
|
Form interaction data. |
| Sentry | Error Tracking | Optional crash reporting (not enabled in current application code). |
|
Crash reports with PII scrubbing if enabled. |
| Google Sign-In | Authentication | Optional “Sign in with Google” OAuth handshake. |
|
OAuth authentication data. |
| Static CDNs | Cloud Infrastructure | Delivery of minor JavaScript libraries. | – | Visitor IP. |
| Favicon services | Communications | Small site icons on vault entries. | – | Entry domain and visitor IP. |
| Apple / Google / Mozilla push services | Communications | Web Push and mobile push delivery. | – | Encrypted payload and endpoint. |
| CapSolver | Security | CAPTCHA solving during recovery and Google-removal automation. | – | Form page URL and sitekey; not vault secrets or account passwords. |
| Residential proxy ✉ | Communications | Proxy used only after a platform blocks the server IP. | – | Destination URLs for that run. |
| EFF wordlist ↗ | Security | One-time fetch of wordlist for vault passphrases. |
|
No personal data sent; visitor IP visible on first fetch. |
No subprocessors match your filters.
No changes recorded yet. Changes will appear here after the next scan detects updates.