Anyray ← Security & Compliance

Subprocessors

Last updated: 3 July 2026

Who processes what. Because Anyray runs in your own environment, the answer for your deployment's data is unusual: there are no subprocessors in the data path. This page sets out that boundary, the one vendor-operated surface, and the processors behind our website.

01In your deployment's data path: none

Anyray is self-hosted. Prompt and response content never leaves your environment, so no Anyray subprocessor processes your content — there is no vendor in the data path to enumerate.

One clarification a reviewer should note. Your upstream LLM providers (OpenAI, Anthropic, and the cloud model APIs) do receive prompts — but those are providers you select and contract with directly. They are your processors, not Anyray subprocessors; Anyray only forwards to the endpoints you configure.

02Vendor-operated surface — Anyray Portal

The single Anyray-operated surface is the Portal account plane. It exists for sign-in, tenant membership, billing, and metering. No prompt or response content ever reaches it; the non-billing data is content-free metadata only — operator sign-in identities, memberships, content-free usage rollups, and pseudonymous seat hashes. Billing itself runs through Stripe — see the table below. The Portal backend is hosted on Amazon Web Services in the EU (Frankfurt), encrypted in transit and at rest, behind a web application firewall — it is the only vendor infrastructure that touches deployment-derived metadata. See Data Protection for exactly what the metering rollup carries.

03Website, billing & corporate processors

These providers process data related to our website, waitlist, and Portal billing — not your deployment's data. They are listed for completeness and mirror our Privacy Policy.

ProcessorPurposeData
Amazon Web Services / CloudFrontWebsite hosting and content deliveryServer/security logs (e.g. IP, browser, pages requested)
Amazon Web Services (EU, Frankfurt)Anyray Portal & metering backend hostingContent-free usage rollups, pseudonymous seat hashes, operator sign-in identities — no prompt/response content
StripeBilling & payment processing for Anyray Portal accountsBilling contact details, payment method — Anyray does not store card numbers
Plausible AnalyticsCookieless, aggregate web analyticsAnonymous, aggregate metrics — no personal data
SlackInternal waitlist sign-up notificationsWaitlist email address
Google FontsWeb-font deliveryIP address at font-serve time

04Changes to this list

We keep this list current as our providers change. The notification mechanism for material changes to subprocessors (e.g. advance notice to customers under a DPA) is to be confirmed with the team.

05Contact

Email: hi@anyray.ai