This page is the single source of truth for the third-party companies SkyRaileon LLC uses to run the Service. As to the list of sub-processors and where they process data, this page is the one to rely on, subject to your signed Service Agreement and the Data Processing Addendum, which control if they say otherwise.
1. What a sub-processor is
When you use Raileon, you are the controller of your business data and we process it on your behalf. To deliver the Service we in turn rely on other companies: hosting providers, a database platform, a payment processor, third-party AI providers, and so on. Those companies are our sub-processors: they process your data under our instructions, for a defined purpose, under a written contract.
We publish this list so you can see exactly who touches your data before you decide to trust us with it, and so you can keep your own vendor records accurate without having to ask us.
What is not on this list
- Tools you connect yourself. When you link an external account to your workspace, your Modules access it under your credentials and your agreement with that vendor. That vendor is not our sub-processor. The exception is Google, which appears below because the Workspace connection runs through the Google connection in our own application. Your own Twilio, Vapi and similar accounts are in this group too. Raileon's own Twilio and Vapi accounts, which run Raileon's phone line, are listed below.
- Our own internal tools. Software we use to run the company that never receives customer data is out of scope.
- Third-party embeds your browser contacts directly. The dashboard's market chart loads TradingView's widget straight into your browser when you choose to load it; we never send your account data to TradingView ourselves, so it is not our sub-processor. See the note after the table below.
How we vet them
We choose sub-processors that offer a data processing agreement and encrypt data in transit and at rest. We review that documentation before onboarding a vendor and again when their terms change. To be plain about the limits: Raileon holds no SOC 2 report, no ISO 27001 certification, and no third-party penetration test report, and we do not sign HIPAA business associate agreements. Some vendors below hold certifications of their own; ours are theirs, not ours, and we do not claim them.
2. Current sub-processors
Raileon is based in the United States. We have not recorded the specific data-center regions each provider uses, and several run global networks, so data may be processed in the United States and in other countries where a provider operates, as shown in the last column. We do not offer regional data residency. Anthropic, which runs Raileon-managed AI, says in its commercial terms that it may not train models on customer content; we have not configured zero data retention, so a provider may keep API data for a limited period under its own policies. If you connect your own AI provider account, that provider processes your data under the terms of your own account with it, including whether it may train on it.
| Sub-processor | Purpose | Data categories processed | Processing location |
|---|---|---|---|
| Anthropic | AI language-model processing for Module tasks on Raileon-managed AI (the default). Also, through Raileon's own account, for the Business Audit: writing report wording (including the automation ideas), reading business names out of the answers of ChatGPT and Perplexity, and drafting the grade of how a business replied to the lead response test. If you connect your own Anthropic account, that use is separate: Listed for transparency; not a Raileon sub-processor (DPA Section 6, no advance notice). | Prompt and task content sent by your Modules, which may include any business content, documents, or messages you route through them. If you connect your own Anthropic account, the same processing happens under your agreement with Anthropic instead of ours. Business Audit only: measured results about a website (no Google ratings, reviews, hours or map results, and no contact details), the text of ChatGPT and Perplexity answers, and the text of replies the business sent to the test enquiry (the first 2,000 characters of up to three replies), which may include names and contact details of people at that business. No client workspace data is sent. | United States, and other countries where the provider operates |
| OpenAI | ChatGPT searches for the Business Audit's AI search visibility area, run through Raileon's own account (Business Audit only). Separately, AI language-model processing only if you connect your own OpenAI account: Listed for transparency; not a Raileon sub-processor (DPA Section 6, no advance notice). | Business Audit: generic questions a customer might ask, built from a business category and city. They hold no business name and no contact details, and no client workspace data is sent. Own account: applies only when you connect your own OpenAI account in Settings → AI provider. The prompt and task content your Modules send is processed by OpenAI under your own agreement with it, not ours; we transmit it on your instruction. Your API key is held only in our encrypted credential vault and is never sent to your dedicated instance. No Raileon dashboard or staff tool displays it beyond its last four characters; it is decrypted only inside the inference proxy when a call is made. | As set by your own account with the provider |
| Perplexity | Answer-engine searches for the Business Audit's AI search visibility area, run through Raileon's own account (Business Audit only) | Generic questions a customer might ask, built from a business category and city. They hold no business name and no contact details, and no client workspace data is sent. | United States, and other countries where the provider operates |
| xAI | AI language-model processing, only if you connect your own xAI (Grok) account. Listed for transparency; not a Raileon sub-processor (DPA Section 6, no advance notice). | Applies only when you connect your own xAI account in Settings → AI provider. The prompt and task content your Modules send is processed by xAI under your own agreement with it, not ours; we transmit it on your instruction. Your API key is held only in our encrypted credential vault. | As set by your own account with the provider |
| Access to the Google Workspace tools you choose to connect, and AI language-model processing (Gemini) only if you connect your own Google AI account. For that Gemini use: Listed for transparency; not a Raileon sub-processor (DPA Section 6, no advance notice). We do not use Google to run AI models on Raileon-managed AI. | Only if you connect Workspace: your Gmail mailbox, Google Calendar, and Google Drive, as far as the access you grant allows. Only if you connect your own Google AI account: the prompt and task content your Modules send, under your own agreement with Google. | United States, and other countries where the provider operates | |
| Google Maps Platform | The business search on the Business Audit order form, and the Google listing, ratings, reviews and competitor details shown in a Business Audit report (Business Audit only) | The text typed into the business search, and a Google place ID or business name used to fetch a listing. We save the information Google returns for up to 30 days, so the same business isn't looked up twice, then delete it; a copy of what a report shows is kept with that audit's results and deleted with them after 90 days. We keep the place ID, and notes our team writes in its own words. | United States, and other countries where the provider operates |
| Google PageSpeed Insights | Measures how fast a website loads, for the Business Audit's speed area (Business Audit only) | The web address of the buyer's website and of each competitor website the audit measures. No contact details and no client workspace data. | United States, and other countries where the provider operates |
| Cloudflare and Google (DNS lookups) | Look up the public DNS records of a website's domain to check its email set-up (mail servers, SPF, DKIM, DMARC), for the Business Audit's security and email area. Cloudflare is asked first and Google only if Cloudflare does not answer (Business Audit only) | The domain name of the buyer's website, and the standard mail-record names under it. No contact details and no client workspace data. | United States, and other countries where the provider operates |
| Convex | Application database and backend platform | Account and organization records, workspace and Module configuration, chat and conversation history, uploaded attachments, activity logs, token-usage counters, messaging channel conversations and contacts, inbound SMS text, call summaries and transcripts, encrypted integration credentials, and the details a prospect enters in our website inquiry form. | United States, and other countries where the provider operates |
| Clerk | Authentication and user-account management | Name, email address, and authentication metadata: sessions, sign-in timestamps, IP address, and device or browser identifiers. No business content. | United States, and other countries where the provider operates |
| Stripe | Invoice and card billing, setup fees, and payment processing, including the one-time Business Audit payment; also payouts to Partner Program partners through Stripe Connect | Billing contact details and payment metadata: amounts, invoices, tax details, card brand, and last four digits. Full card numbers are entered directly into Stripe (or DocuSign Payments, which runs through Stripe) and are held by Stripe; they never reach Raileon systems. For Partners, the identity, tax and bank details entered during payout setup are collected by Stripe directly; Raileon keeps the connected-account ID, payout status and transfer records. No business content. | United States, and other countries where the provider operates |
| DocuSign | Signing your Raileon Service Agreement, and collecting the card payment you make when you sign | Signer names and email addresses, signatures, the agreement you sign, and signing audit-trail metadata such as IP address and timestamps. Card details you enter to pay are processed through our Stripe account and never reach Raileon systems. No business content from your workspace. | United States, and other countries where the provider operates |
| Vercel | Hosting and delivery of the Raileon web application | HTTP request data handled in transit: IP address, user agent, requested URL, and referrer. Also cookieless, aggregate page analytics that set no identifiers. | United States, and other countries where the provider operates |
| Hostinger | Virtual-server hosting for your dedicated container and its encrypted volume, and for the Raileon backend services | Everything in your dedicated container: Module configuration, workflow inputs and outputs, working files, and logs, on an encrypted volume. The backend running on the same host handles requests and background jobs, so prompts, responses and queued task data pass through its memory and short-lived job queue. Integration credentials are stored encrypted in Convex; the key that unlocks them is held on this server. | United States, and other countries where the provider operates |
| Cloudflare | Network security, DNS, TLS termination, and bot protection (including Turnstile on our inquiry form and Business Audit order form); R2 object storage for our encrypted backups | HTTP request data handled in transit: IP address, user agent, requested URL, TLS and connection metadata, and security event logs. Web traffic content is passed through, not stored as a record. Turnstile reads browser and connection signals when you use the inquiry form. Separately, R2 stores our encrypted nightly backups of tenant volumes and of the application database; each backup is encrypted with our own key before it is uploaded. | United States, and other countries where the provider operates |
| Daily (Daily.co) | The video room for our free online events, shown inside our site at raileon.com/events | The name you enter in the room, your camera, microphone and screen-share streams if you turn them on, chat messages, and connection data such as your IP address and browser. | United States, and other countries where the provider operates |
| Resend | Transactional and notification email delivery, including alert emails to our staff | Recipient name and email address, plus the subject and body of the messages we or your Modules send, which can include business content you put in an email. | United States, and other countries where the provider operates |
| SendGrid | Relaying email sent to your Module's forwarding address to our systems, and relaying replies to a Business Audit's lead response test | The full inbound message: sender, recipient, subject, body and attachments. | United States, and other countries where the provider operates |
| Twilio | Phone calls and text messages for Raileon's own phone number | The phone number of each person who calls or texts Raileon's number, call details such as the time and length of the call, the call audio while it is connected, and the text of messages sent to or from the number. No client workspace data is sent. | United States, and other countries where the provider operates |
| Vapi | The AI voice and text assistant that answers Raileon's phone line and passes calls to a person | The caller's phone number, the call audio and what the caller says or texts, which may include a name, business and the reason for the call, and the transcript and summary of the conversation. No client workspace data is sent. | United States, and other countries where the provider operates |
| Sentry | Application error monitoring and diagnostics | Error diagnostics: stack traces, browser and operating system, route, and request metadata. These may incidentally include a user identifier or a fragment of the input present when the error occurred. | United States, and other countries where the provider operates |
| Discord | Our internal operations alert channel | What happened and which workspace or record it concerns, by business name and internal identifier. Alerts about a new inquiry or a support ticket say only that one arrived and where to look: no inquiry or ticket contents, names, email addresses or phone numbers. | United States, and other countries where the provider operates |
| GitHub | Runs the scheduled export of our application-database snapshot (GitHub Actions) | The export job pulls a copy of the application database, which holds all clients' data, onto a GitHub-hosted runner for the minutes the job runs. It is encrypted with our key before upload and the unencrypted file is deleted from the runner immediately afterward. The same job can also run on our own server instead. | United States, and other countries where the provider operates |
| Market-data providers | Stock and crypto price quotes and price charts for the dashboard's Markets card (Finnhub, CoinGecko, Coinbase and Yahoo Finance; Alpha Vantage with our key where one is configured; Twelve Data, Polygon or Alpha Vantage with your own key if you connect one) | The ticker or coin symbols requested, and an API key (ours, or yours if you connect one; Yahoo Finance and Coinbase need none). No personal information. | Not applicable: no personal information is sent |
Each sub-processor is bound by a written agreement or published terms limiting it to the purpose above. Access inside Raileon is separately restricted. See the security section of our Privacy Policy and our Security page for how per-customer isolation, encryption, and backups work.
SMS text, voice-call summaries and transcripts, and inbound email content are held in Convex like the rest of your workspace data. How long we keep them is stated in the retention schedule in our Privacy Policy.
Third-party embeds (not sub-processors)
TradingView powers the market chart in the dashboard. Unlike the sub-processors above, we do not route your data to TradingView ourselves: when you click to load the chart, your own browser requests it directly from tradingview.com, the same way it would if you visited TradingView's own site. Loading it is optional: the chart is gated behind a click, and nothing is requested from tradingview.com until you choose to load it. Because we do not control what TradingView does with that direct connection, it is not bound by our sub-processor agreements; see TradingView's own privacy policy for that relationship, and our Cookie Policy for what it may store in your browser.
3. Advance notice and your right to object
Before we add a new sub-processor, or materially change what an existing one does with your data, we will publish the change on this page and give at least 30 days' notice before the new sub-processor starts processing customer data. The only exception is an emergency replacement needed to keep the Service running or secure, in which case we will notify you as soon as we can and no later than the switchover.
How you are told
We email your account contact at least 30 days ahead, the same mechanism as in Section 6 of our Data Processing Addendum. There is nothing to subscribe to. A provider you choose yourself, such as your own AI provider account, is not a Raileon sub-processor (Section 6 of the DPA), so no advance notice applies to it. We list it above only for transparency.
Objecting to a new sub-processor
If you have a reasonable, good-faith objection to a new sub-processor on data-protection grounds, tell us at privacy@raileon.com within 30 days of the notice. We will then:
- Work with you in good faith to find a workaround, for example, keeping your workspace on the existing provider or scoping the new one out of your data.
- If no reasonable workaround exists, let you terminate the affected part of your service without penalty, with a pro-rated refund of any prepaid fees for the period after termination, excluding the setup fee.
- Give you the standard 7-day export window before deletion, as described in our Privacy Policy.
These rights are available to every customer, wherever you are. We do not gate them by country.
4. Change log
Every addition, removal, or material change to the list above is recorded here, newest first.
- October 20, 2026: Google Maps Platform: we now save the information Google returns for up to 30 days, and keep a copy of what a Business Audit report shows with that audit's results until they are deleted. No sub-processor was added or removed.
- October 20, 2026: Added Twilio and Vapi for Raileon's own phone number. Twilio carries the calls and text messages; Vapi is the AI voice and text assistant that answers the line and passes calls to a person. They handle calls and texts to Raileon's own number only: no client workspace data is sent to them. Twilio and Vapi accounts a client connects are still the client's own, not Raileon sub-processors.
- October 15, 2026: Described Stripe's role in the Partner Program. Partners are paid through Stripe Connect, and Stripe collects their identity, tax and bank details directly. No sub-processor was added or removed.
- October 15, 2026: Completed the Business Audit entries. Anthropic now also lists its Business Audit use through Raileon's own account (report wording and automation ideas, reading business names out of AI answers, and drafting the grade of a business's reply to the lead response test). Added Google PageSpeed Insights (receives the web addresses of the websites measured) and Cloudflare and Google DNS-over-HTTPS lookups (receive a website's domain name). These process Business Audit data only: no client workspace data is sent to them. No sub-processor of a client's workspace was added or removed.
- October 14, 2026: Added Perplexity and Google Maps Platform, and described Raileon's own use of OpenAI (ChatGPT searches), for the new Business Audit. They process Business Audit data only: no client workspace data is sent to them. No sub-processor of a client's workspace was added or removed.
- October 9, 2026: Narrowed what Discord receives. Operations alerts sent to Discord now say what happened and which workspace or record it concerns, by business name and internal identifier. They no longer carry inquiry or support-ticket contents, names, email addresses or phone numbers; those stay in our internal email alerts. No sub-processor was added or removed.
- October 8, 2026: Corrected the list to match what the platform actually calls. Added DocuSign (signing the Service Agreement and the card payment at signing), SendGrid (inbound email relay), Discord (our operations alert channel), GitHub (the scheduled database-snapshot export), Cloudflare R2 (encrypted backup storage) and Turnstile, and the market-data providers. Listed OpenAI, xAI and Google (Gemini), and Anthropic on a client's own account, for transparency only: they are not Raileon sub-processors, because the client contracts with them directly (DPA Section 6). Google is now listed for Workspace access, not as an AI provider on Raileon-managed AI. Corrected the Hostinger entry to virtual-server hosting (integration credentials are stored encrypted in Convex, not on that server) and replaced the blanket United States statement with the processing-location column. Described SMS, voice and inbound email content as held in Convex. Who processes AI requests on Raileon-managed AI is unchanged.
- October 6, 2026: Terminology. Wording updated to the Module vocabulary; no change in substance.
- September 24, 2026: Documented TradingView as a directly-contacted third-party embed (not a sub-processor, since we never route your data to it) alongside the click-to-load gate added to the dashboard's market chart. No sub-processor was added or removed.
- July 27, 2026: Initial published list.
5. Related documents and contact
- Data Processing Addendum: the contractual terms that govern how we process your data, incorporated into your Raileon Service Agreement, including sub-processor obligations.
- Privacy Policy: what we collect, how we use it, how long we keep it, and your rights.
Questions about this list, a specific vendor, or a due-diligence questionnaire:
SkyRaileon LLC, a Florida limited liability company
Miami, Florida
privacy@raileon.com: data-protection matters
security@raileon.com: security questions and disclosures
admin@raileon.com: general and billing