Relevant · relevant.com.tr
Legal
Subprocessors
Relevant uses a short list of third-party subprocessors to host, deliver and support the service. This page shows who they are, what they do, which data they can reach and where they operate.
Workspace owners are told at least 30 days before the list changes, and can object. The list is part of Annex III of the data processing agreement.
Last updated:
How to read this list#
Relevant engages a small number of third parties to host, deliver and support the service. Each entry below says what the subprocessor does, the data it can reach, the region where it operates and the safeguard that covers any transfer. Subprocessors are listed by the service they provide and the region they operate in.
- Customer content
- Datasets, traces, evaluation results and review items that you submit. Subprocessors with this scope act under the data processing agreement.
- Account data
- Names, work emails, workspace and billing details and website usage that Relevant handles as a controller. They are listed for transparency and are described in the privacy policy.
Current subprocessors#
Last updated . Search the list, narrow it by data scope, or download it as a CSV file for your vendor register.
Data scope
Showing 7 of 7 subprocessors
| Subprocessor | Purpose and data processed | Location and safeguard |
|---|---|---|
| Cloud infrastructure and storageInfrastructureCustomer content | Relevant’s primary hosting provider. Hosts the application, evaluation workers, databases, object storage and encrypted backups. Data: Datasets, traces, evaluation results, review decisions and account data. | EU, UK and US data centers, in the region selected for each workspace Processed in the selected region; no transfer outside it for customer content. |
| Model inference for LLM judgesAI inferenceCustomer content | Runs the LLM judges a workspace enables to score faithfulness, correctness and instruction adherence. Data: Question, retrieved context, model answer and gold answer for the samples being judged. | EU, UK and US regional endpoints, matching the workspace region Contractual no-training commitment; regional endpoint where the provider offers one. |
| Transactional email deliveryCommunicationsAccount data | Delivers transactional email: invitations, report schedules, security and billing notices. Data: Recipient name, email address and message content. | EU Standard Contractual Clauses where the provider is outside the EEA. |
| Error and performance monitoringReliabilityAccount data | Captures application errors and performance traces so incidents can be diagnosed and fixed. Data: Stack traces, request identifiers and technical metadata; pseudonymous user identifiers. | EU Standard Contractual Clauses where the provider is outside the EEA. |
| Website and product analyticsAnalyticsAccount data | Measures aggregate use of the website and product. Loaded only if you opt in to analytics cookies. Data: Page views, interaction events and approximate device information. | EU Consent-gated. Standard Contractual Clauses where the provider is outside the EEA. |
| Payment processingBillingAccount data | PCI DSS Level 1 payment provider. Collects payment for paid plans and issues invoices. Relevant does not store full card numbers. Data: Billing contact, plan, invoice and transaction metadata. | EU and US Standard Contractual Clauses where the provider is outside the EEA. |
| Customer support ticketingSupportAccount data | Receives and tracks messages you send to support and to the contact form. Data: Name, work email, company, message content and any attachments you choose to send. | EU Standard Contractual Clauses where the provider is outside the EEA. |
- Cloud infrastructure and storageCustomer contentInfrastructure
- Purpose
- Relevant’s primary hosting provider. Hosts the application, evaluation workers, databases, object storage and encrypted backups.
- Data processed
- Datasets, traces, evaluation results, review decisions and account data.
- Location
- EU, UK and US data centers, in the region selected for each workspace
- Transfer safeguard
- Processed in the selected region; no transfer outside it for customer content.
- Model inference for LLM judgesCustomer contentAI inference
- Purpose
- Runs the LLM judges a workspace enables to score faithfulness, correctness and instruction adherence.
- Data processed
- Question, retrieved context, model answer and gold answer for the samples being judged.
- Location
- EU, UK and US regional endpoints, matching the workspace region
- Transfer safeguard
- Contractual no-training commitment; regional endpoint where the provider offers one.
- Transactional email deliveryAccount dataCommunications
- Purpose
- Delivers transactional email: invitations, report schedules, security and billing notices.
- Data processed
- Recipient name, email address and message content.
- Location
- EU
- Transfer safeguard
- Standard Contractual Clauses where the provider is outside the EEA.
- Error and performance monitoringAccount dataReliability
- Purpose
- Captures application errors and performance traces so incidents can be diagnosed and fixed.
- Data processed
- Stack traces, request identifiers and technical metadata; pseudonymous user identifiers.
- Location
- EU
- Transfer safeguard
- Standard Contractual Clauses where the provider is outside the EEA.
- Website and product analyticsAccount dataAnalytics
- Purpose
- Measures aggregate use of the website and product. Loaded only if you opt in to analytics cookies.
- Data processed
- Page views, interaction events and approximate device information.
- Location
- EU
- Transfer safeguard
- Consent-gated. Standard Contractual Clauses where the provider is outside the EEA.
- Payment processingAccount dataBilling
- Purpose
- PCI DSS Level 1 payment provider. Collects payment for paid plans and issues invoices. Relevant does not store full card numbers.
- Data processed
- Billing contact, plan, invoice and transaction metadata.
- Location
- EU and US
- Transfer safeguard
- Standard Contractual Clauses where the provider is outside the EEA.
- Customer support ticketingAccount dataSupport
- Purpose
- Receives and tracks messages you send to support and to the contact form.
- Data processed
- Name, work email, company, message content and any attachments you choose to send.
- Location
- EU
- Transfer safeguard
- Standard Contractual Clauses where the provider is outside the EEA.
Providers you connect yourself#
Some features let you connect your own accounts: model providers for judging or generation, observability tools, messaging and source control. These include Vertex AI, Amazon Bedrock, Datadog, LangSmith import, Slack and GitHub.
Those providers act on your instructions and under your agreement with them. They are not Relevant subprocessors, and data reaches them only when you turn the integration on in Settings. You can disconnect an integration at any time, which stops further transfers.
How we vet and bind subprocessors#
- Each subprocessor goes through a security and privacy review before it can access customer data.
- A written agreement binds it to data-protection obligations no less protective than the DPA, and Relevant remains responsible for it.
- Access is limited to the data needed for the stated purpose. Customer content is processed in your workspace region unless the entry above says otherwise.
- Transfers outside the EEA rely on the Standard Contractual Clauses or another mechanism recognized by law. See international transfers.
- No subprocessor may use customer content to train models.
Changes and objections#
We tell you before the list changes:
- Notice at least 30 days aheadWorkspace Owners and Admins receive an email, and this page is updated, before a new subprocessor starts or an existing one is replaced.
- Objection windowYou can object on reasonable data-protection grounds during those 30 days by writing to privacy@relevant.com.tr or using the contact form.
- ResolutionWe discuss the objection with you in good faith and, where we can, offer a configuration that avoids the new subprocessor.
- If it cannot be resolvedYou may end the affected part of the service without penalty, as set out in the data processing agreement.
Change log#
- Oct 1, 2026
- Change
- Subprocessor list published in its current format.
Contact#
Questions about a subprocessor, or a request for a copy of the agreement terms that bind it, can go to the contacts below.
- Legal entity
- Relevant
- Privacy and data protection
- privacy@relevant.com.tr
- Legal notices
- legal@relevant.com.tr