Providers by role.
QualiRelay uses service providers according to the features enabled for the public site or an activated workspace. A role listed here does not mean that every optional service receives your information. Access is limited to the applicable purpose and processing arrangements.
| Provider or service | Role |
|---|---|
| A hosting provider | Application, worker and database infrastructure |
| Cloudflare | Site delivery, network protection and inbound email routing; R2 private storage for exports, the deletion journal and encrypted off-host database backups when configured |
| Clerk | Identity, sessions and authentication emails; QualiRelay manages application MFA and workspace permissions |
| Stripe | Hosted payments, subscriptions, invoices and tax calculation |
| An email inbox provider | Receiving and storing correspondence sent to our contact addresses |
| Resend | Application and administrative emails when configured |
| OpenRouter and TypeSafe, if enabled | Optional bounded label assistance; disabled by default |
| OpenAI, if selected and enabled | Alternative bounded model assistance; disabled by default |
| Sentry and an approved OpenTelemetry destination, if enabled | Restricted operational errors and traces |
| A customer-approved data supplier, if enabled | Optional customer-funded information, subject to separate permitted-use and budget approval |
Customer-connected systems.
HubSpot and Slack receive or provide customer-authorized information through approved connections, CRM fields and Slack channels. Their relationship with the customer can differ from QualiRelay’s own service-provider arrangements. Customers control their installations and the information authorized for those connections.
No visitor-analytics, advertising-pixel, session-replay or fingerprinting provider is installed on the public site. Fonts and site assets do not require a remote font vendor.
Processing and changes.
Personal information may be processed, stored or accessed outside your jurisdiction. Applicable provider terms, retention and transfer safeguards are considered for the enabled service; optional providers require approval before use. We update this register and provide additional notices where required when provider arrangements change.
Contact our Privacy Officer at [email protected] or use privacy assistance for provider information, transfer practices or a rights request. General service questions can be sent to [email protected].