RightMessage uses a small number of third-party companies (“subprocessors”) to run the service. This page lists the subprocessors that may process personal data that our customers control, such as data about the visitors to their websites and the contacts in their email platforms. It forms Schedule 3 of our Data Processing Agreement.
Each subprocessor is bound by a written contract with data protection terms at least as protective as our DPA. RightMessage remains responsible for their work.
Infrastructure and service delivery
| Subprocessor | What it does for RightMessage | Location |
|---|---|---|
| Laravel Holdings Inc. (Laravel Cloud), running on Amazon Web Services | Hosts the RightMessage application, integration API, database, cache and background jobs | United States (AWS us-east-1) |
| Cloudflare, Inc. | Delivers the RightMessage script, receives analytics events, serves hosted pages, stores published scripts and files, and protects our network | Global edge network; storage in the United States |
| Elastic (Elastic Cloud) | Stores and analyzes website activity for reporting, segmentation and personalization | United States |
| DigitalOcean, LLC | Holds a copy of the RightMessage database retained from before our September 2026 move to Laravel Cloud. It doesn’t run the live service. | United States |
| SnapShooter | Holds backups of that retained DigitalOcean database copy | United States |
AI features
| Subprocessor | What it does for RightMessage | Location |
|---|---|---|
| OpenRouter, Inc. | Routes requests from AI features (Righty, summaries, lead alerts, page generation) to model providers. Prompt logging is off and Zero Data Retention routing is on, so requests go only to model provider endpoints that don’t retain them. Customer data is never used to train models. | United States |
| Anthropic PBC, Google LLC, OpenAI, L.L.C. (through OpenRouter) | Run the language and image models behind those features | United States |
Email, monitoring and support
| Subprocessor | What it does for RightMessage | Location |
|---|---|---|
| Bento | Sends service email to customer users, such as flow notifications and reports | United States |
| PostHog, Inc. | Product analytics for the RightMessage app, monitoring of AI feature usage, and diagnostics for requests to connected integrations | United States |
| Functional Software, Inc. (Sentry) | Error monitoring | United States |
| Laravel Holdings Inc. (Laravel Nightwatch) | Application performance monitoring | United States |
| Help Scout PBC | Customer support conversations | United States |
Account and billing
These vendors mainly process information about our customers’ own accounts, not their website visitors. We list them for completeness.
| Subprocessor | What it does for RightMessage | Location |
|---|---|---|
| Stripe | Billing and payments | United States |
| Google LLC (Google Workspace) | Company email and documents | United States |
Changes to this list
We will update this page at least 30 days before a new subprocessor starts processing customer personal data. To get an email when it changes, join the subprocessor update list. Customers can object to a new subprocessor under section 6 of the DPA.
Questions: support@rightmessage.com.