RightResponse AI Subprocessors
Last updated: August 1, 2025
Applies to: All RightResponse AI (“RRAI”) customers and plans
To support delivery of our services (“Services”), RightResponse AI, Inc. engages certain third parties that process Customer Data on our behalf (each, a “Subprocessor”). This page identifies those Subprocessors, their purpose, and primary processing locations.
Capitalized terms used but not defined here have the meanings given in the Data Processing Addendum (DPA) and/or your governing agreement with RRAI.
Infrastructure Subprocessors
These vendors host Customer Data or provide core infrastructure that helps deliver the Services.
| Entity Name | Relevant RRAI Services | Purpose of Processing | Primary Location(s) |
|---|---|---|---|
| Microsoft Azure | Core platform (all cloud environments) | Cloud infrastructure & hosting | United States* |
| Insight Results Solutions Pvt. Ltd. | Application development, infrastructure management, and ongoing technical operations | To host, maintain, and support the Platform, and to process personal data necessary to deliver, secure, and improve the service. | India |
* Region may vary by deployment and availability. Appropriate safeguards in place (including SCCs, where applicable)
Product-Specific Subprocessors (AI/ML)
These vendors power specific AI-assisted features.
| Entity Name | RRAI Product / Feature | Purpose of Processing | Primary Location(s) |
|---|---|---|---|
| OpenAI, L.L.C. | AI-assisted features | Third-party model provider | United States |
| Anthropic PBC | AI-assisted features | Third-party model provider | United States |
Other Subprocessors
These vendors support messaging and internal admin/support tooling that may involve processing limited Customer Data.
| Entity Name | Purpose of Processing | Primary Location(s) |
|---|---|---|
| Twilio Inc. (SendGrid) | Email delivery for review requests/notifications | United States |
| Retool, Inc. | Internal admin/support dashboards (service operations) | United States |
International data transfers & safeguards
Where transfers of personal data outside the EEA, UK, or Switzerland occur, RightResponse AI ensures appropriate safeguards are in place, including Standard Contractual Clauses where applicable. Copies of these clauses may be made available to customers upon request, subject to confidentiality requirements and redactions.
Updates and notice of changes
As our Services evolve, we may add, replace, or remove Subprocessors. RRAI will endeavor to provide at least 15 days’ advance notice of new Subprocessors, as described in the DPA (e.g., by updating this page and notifying the account owner where required). Customers may object to a new Subprocessor where permitted by the DPA.
- Subscribe to updates / submit objections: email [email protected] with subject line “Subprocessor Notifications.”
Please include your company name and Customer account email so we can associate your request.
Definitions (summary)
- Customer Data: As defined in your agreement/DPA (generally, data provided by or on behalf of Customer in connection with the Services).
- Subprocessor: A third party engaged by RRAI to process Customer Data to deliver the Services.
- Services: The RRAI hosted software-as-a-service platform and related offerings as defined in your agreement/DPA.
Questions
If you have questions about this page or our Subprocessors, contact [email protected]
