Subprocessors

1. How we use subprocessors

Riska runs on production-proven, secure infrastructure from established providers. Each one processes customer data only to provide its service to Riska, under a written agreement that requires it to protect the data. We remain responsible for their processing of customer data under our agreement with each customer.

2. Infrastructure

The Riska platform is hosted on Google Cloud Platform in the United States. Customer data is stored and processed within Riska's private cloud network (VPC), isolated from the public internet and from other environments.

3. Payments

Customers that collect payments through Riska do so through Stripe, which processes card and bank payments to industry security standards.

4. AI models

Riska's AI features are powered by leading model providers, including Google Gemini, Anthropic and OpenAI. Each customer has oversight and control over which AI providers and features are enabled for its organization.

We do not use customer data to train AI models, unless the customer has given its explicit permission or has asked for it as part of its own use case.

5. Services you connect

When a customer connects a Google Workspace or Microsoft 365 mailbox or calendar, Riska exchanges data with that provider at the customer's direction. Those providers act for the customer under the customer's own agreement with them, and are not Riska subprocessors.

6. The detailed list

A detailed list of our subprocessors, with what each one does and the data it handles, is available to prospective and current customers. Book a demo and we will share it, or write to privacy@riska.io.

7. Changes to our subprocessors

We update the detailed list before a new subprocessor begins processing customer data. To be told about changes, or to ask about a subprocessor, write to privacy@riska.io.