RelyShield Subprocessors
Digital security and account recovery platform offering data removal, breach checking, password vault, and account recovery services.
- Subprocessors
- 21
- Locations
- 4
- Categories
- 11
- Last scanned
| Name | Category | Purpose | Location | Data processed |
|---|---|---|---|---|
| Google Cloud Platform DPA | Cloud Infrastructure | Primary hosting, compute, storage, managed database, snapshot backups and logging for the Service. |
|
Account data, Vault ciphertext, data-removal and recovery records, application logs and encrypted backups. |
| Cloudflare DPA | Cloud Infrastructure | CDN, WAF, DDoS mitigation, DNS, edge caching, request filtering and DNS resolution. |
|
IP addresses, User-Agent strings, request metadata, security-event telemetry. |
| Stripe DPA | Payment Processing | Payment processing, subscription management, customer portal. |
|
Billing email, name, postal address, card details (held by Stripe), transaction metadata. |
| Twilio / SendGrid DPA | Transactional email delivery and inbound parsing. |
|
Recipient email address, message subject and body, delivery telemetry. | |
| ManyChat DPA | Communications | Automated replies to Instagram comments and messages. |
|
Instagram name and ID, message text, button taps. |
| OpenAI DPA | AI | GPT-4o-mini / GPT-4o API for classification, composition and chat. |
|
Feature-specific prompts (broker reply text, case context, user chat message); never raw Vault ciphertext or master-password material. |
| Have I Been Pwned PP | Security | Breach check API and email monitoring. |
|
Email address for server-side lookups; SHA-1 hash prefix for password checks. |
| MaxMind | Data Enrichment | GeoIP database for country-level resolution of login IP addresses. |
|
Login IP addresses (offline GeoLite2 copy; no per-request transfer). |
| Serper.dev | Search | Programmatic Google search API for Data Removal scanner exposure URL discovery. |
|
Search queries that may contain names, email addresses or phone numbers. |
| Google Search | Search | Custom Search API for Tier 2 exposure checks. |
|
Search API call data. |
| Google Workspace / Gmail | Support and privacy mailbox. |
|
Support and privacy correspondence. | |
| Google LLC — GA4 and advertising signals | Analytics | Site measurement after analytics cookies; ads/personalisation signals after marketing cookies. |
|
Website measurement and advertising signals. |
| Google reCAPTCHA | Security | Bot protection on signup, contact and data-removal forms. |
|
Form interaction data. |
| Sentry | Error Tracking | Optional crash reporting (not enabled in current application code). |
|
Crash reports with PII scrubbing if enabled. |
| Google Sign-In | Authentication | Optional “Sign in with Google” OAuth handshake. |
|
OAuth authentication data. |
| Static CDNs | Cloud Infrastructure | Delivery of minor JavaScript libraries. | – | Visitor IP. |
| Favicon services | Communications | Small site icons on vault entries. | – | Entry domain and visitor IP. |
| Apple / Google / Mozilla push services | Communications | Web Push and mobile push delivery. | – | Encrypted payload and endpoint. |
| CapSolver | Security | CAPTCHA solving during recovery and Google-removal automation. | – | Form page URL and sitekey; not vault secrets or account passwords. |
| Residential proxy ✉ | Communications | Proxy used only after a platform blocks the server IP. | – | Destination URLs for that run. |
| EFF wordlist ↗ | Security | One-time fetch of wordlist for vault passphrases. |
|
No personal data sent; visitor IP visible on first fetch. |
No subprocessors match your filters.
Your data may flow beyond direct subprocessors. Click to expand and see the chain.
Loading data flow...
No changes recorded yet. Changes will appear here after the next scan detects updates.