Release Council

Service providers and subprocessors

Effective 11 July 2026 · Provider use depends on configured features

OpenAI

Processes selected inspection evidence and real-time voice content when AI review or live voice is used. Target passwords are excluded from AI prompts.

Railway

Hosts the application runtime and managed PostgreSQL deployment.

GitHub

Provides optional authentication, repository metadata, read-only source evidence and approved issue delivery.

Stripe

Processes subscription checkout, invoices and billing events when paid plans are enabled. Release Council does not store complete card details.

Resend

Delivers account and inspection-update emails when email delivery is configured.

Object storage

Stores authorised recording evidence in a private bucket with integrity metadata and tenant-scoped access.

Changes

This list is updated before a newly configured provider processes customer data. Customers remain responsible for reviewing provider terms relevant to their jurisdiction.