Subprocessors
The providers below may process customer data when Inly operates Core. Each one is named, along with what it does and where it is established.
Amazon Web Services
Data storageUnited States (EU infrastructure region)Long-term backup storage (S3).
ISO 27001SOC 2GDPRCloudflare
Cloud providerUnited States (global edge)DNS, CDN, and R2 object storage for assets.
ISO 27001SOC 2GDPRLaravel Cloud
Managed application platformUnited States (EU infrastructure region)Application hosting and managed PostgreSQL database (Neon) for Core.
SOC 2GDPRLaravel Nightwatch
MonitoringUnited States (EU infrastructure region)Application monitoring and error tracking.
GDPROpenAI
AIUnited StatesAI features in Core. Customer prompts and outputs are not used to train OpenAI's models. OpenAI may retain API content for up to 30 days for abuse monitoring before deletion.
SOC 2GDPRResend
Email deliveryUnited States (EU infrastructure region)Transactional email from Core.
SOC 2GDPRTwilio
SMS deliveryUnited StatesSMS delivery from Core.
ISO 27001SOC 2GDPR
The data processing agreement defers to the current subprocessor list rather than freezing a copy of it. This page is kept up to date, and material changes are notified to customers in advance.
We use EU-based infrastructure regions. EU residency covers application data and backups; the regions above name where each provider is established, and the infrastructure region we run it in.