# InRule

InRule (inrule.com): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/inrule
- Documents last verified: 2026-10-08
- Transparency rating: 67/100 (how much it publishes, not how secure it is): Subprocessor list 30/30; Processing locations 8/8; Purposes 7/7; Data processing addendum 0/12 (not found); Trust center 8/8; Privacy policy 6/6; security.txt 0/6 (not found); Security page 0/5 (not found); Status page 0/5 (not found); Vulnerability disclosure 0/5 (not found); Pages still reachable 8/8
- Supply chain: relies on 11 tracked vendors directly, 122 within two hops, 393 within three; 0 tracked vendors rely on it directly, 0 within two hops, 0 within three
- Cite as: InRule, Third Party Index, https://thirdpartyindex.com/vendors/inrule (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Trust center | https://trust.inrule.com/ | 2026-10-08 | 2026-10-08 |
| Subprocessor list | https://trust.inrule.com/subprocessors | 2026-10-08 | 2026-10-08 |
| Privacy policy | https://inrule.com/about-inrule/legal-and-security/privacy/ | 2026-10-08 | 2026-10-08 |
| Terms | https://inrule.com/about-inrule/legal-and-security/terms/ | 2026-10-08 | 2026-10-08 |

## Subprocessors (13)

As its own list states them.

| Subprocessor | Purpose | Location | Listed since |
|---|---|---|---|
| [Anthropic](https://thirdpartyindex.com/vendors/anthropic.md) (AI model provider: Anthropic) | - \*\*Applicable Services:\*\* InRule Decision Platform and InRule Process Automation (not applicable to end-user data processing) - \*\*Data Processing:\*\* Provision of enterprise AI services supporting internal business workflows, such as account management, support ticket analysis, and operational insights. Data submitted through Anthropic is not used to train or improve Anthropic's models. - \*\*Hosting Location:\*\* United States (default storage), with processing occurring in additional regions through Anthropic's cloud infrastructure and authorized subprocessors, depending on deployment and routing configuration.; Internal Business Operations | United States | 2026-10-08 |
| [Auth0](https://thirdpartyindex.com/vendors/okta.md) | - \*\*Applicable Services\*\*: InRule Decision Platform. - \*\*Data Processing\*\*: Manage authentication requests for users logging into platform.; Authentication Requests | United States | 2026-10-08 |
| [Azure](https://thirdpartyindex.com/vendors/microsoft.md) | - \*\*Applicable Services\*\*: InRule Decision Platform - \*\*Data Processing\*\*: IaaS and PaaS hosting including web services, databases, log aggregation and monitoring. - \*\*Hosting Location\*\*: Customers may choose to have their data hosted in the United States, Canada, Europe, Asia, or Australia.; Hosting/PaaS Provider | Varies | 2026-10-08 |
| [Box](https://thirdpartyindex.com/vendors/box.md) | - \*\*Applicable Services\*\*: InRule Decision Platform - \*\*Data Processing\*\*:Document storage and file sharing platform used for exchanging customer data between InRule personnel and customers; Document storage and file sharing platform used for exchanging customer data between InRule personnel and customers | United States with the option of EU | 2026-10-08 |
| [Flowmailer](https://thirdpartyindex.com/vendors/flowmailer.md) | - \*\*Applicable Services\*\*: InRule Process Automation - \*\*Data Processing\*\*: Queue management of outgoing email from the service. It is the Controller that chooses which data to send out of the service via e-mail.; Email Management (temporary storage) | Netherlands | 2026-10-08 |
| [FreshWorks](https://thirdpartyindex.com/vendors/freshworks.md) | - \*\*Applicable Services\*\*: InRule Process Automation - \*\*Data Processing\*\*: Freshwork provides a SaaS platform which is used by InRule to collect and manage support tickets. The Controller chooses which data is attached to the submitted support ticket.; Support Ticketing (Freshdesk) | United States | 2026-10-08 |
| Iver Sverige AB | - \*\*Applicable Services\*\*: InRule Process Automation - \*\*Data Processing\*\*: Data storage and hosting of operating environment for agreed service in which the Controller can choose to insert and process personal data.; Hosting Services | Sweden | 2026-10-08 |
| [Microsoft (SE)](https://thirdpartyindex.com/vendors/microsoft.md) (AI model provider: Azure OpenAI) | - \*\*Applicable Services\*\*: InRule Decision Platform. - \*\*Data Processing\*\*: Email services for InRule employees. Customer decides what data to include in emails to InRule staff.; - \*\*Applicable Services\*\*: InRule Process Automation - \*\*Data Processing\*\*: Email communications and document storage between InRule staff and InRule Customers.; - \*\*Applicable Services:\*\* InRule Decision Platform - \*\*Data Processing:\*\* Cloud infrastructure and hosting provider for Azure OpenAI Service, supporting agentic functionality within the business user portal. Data submitted to the underlying AI model is hosted and processed on Microsoft's own Azure infrastructure and is not sent to OpenAI's servers, nor is it accessible to OpenAI directly. Prompts and completions are not used to train or improve Microsoft's or OpenAI's foundational AI models. - \*\*Hosting Location:\*\* United States, Canada, Europe, Asia, or Australia (customer-selectable); Cloud AI Infrastructure Hosting; Email Services for InRule Employees | Sweden; United States; Varies | 2026-10-08 |
| [OpenAI](https://thirdpartyindex.com/vendors/openai.md) (AI model provider: OpenAI) | - \*\*Applicable Services:\*\* InRule Decision Platform & InRule Process Automation (not applicable to end-user data processing). - \*\*Data Processing:\*\* Provision of enterprise AI services supporting internal business workflows, such as account management, support ticket analysis, and operational insights. Customer data submitted through OpenAI's enterprise offering is not used to train or improve OpenAI's foundation models. - \*\*Hosting Location:\*\* United States (primary storage), with processing occurring in other supported regions including Europe, Asia, and Australia depending on service architecture and infrastructure availability.; Internal Business Operations | Varies | 2026-10-08 |
| [Salesforce](https://thirdpartyindex.com/vendors/salesforce.md) | - \*\*Applicable Services\*\*: InRule Decision and InRule Process Automation - \*\*Data Processing\*\*: Support tickets (including attachments) and emails sent to InRule Personnel by customers.; Customer support ticketing and email integrations. | United States | 2026-10-08 |
| [SendSafely](https://thirdpartyindex.com/vendors/sendsafely.md) | - \*\*Applicable Services\*\*: InRule Decision Platform. - \*\*Data Processing\*\*: SaaS offering to send encrypted emails.; Encrypted Email | United States | 2026-10-08 |
| [Slack](https://thirdpartyindex.com/vendors/slack.md) | - \*\*Applicable Services\*\*: InRule Decision Platform - \*\*Data Processing\*\*: Chat-based communications and integrations with support-related tools such as email, Zendesk, Salesforce, etc.; Communications and integrations | United States | 2026-10-08 |
| [Zendesk](https://thirdpartyindex.com/vendors/zendesk.md) | - \*\*Applicable Services\*\*: InRule Decision Platform. - \*\*Data Processing\*\*: Manage incoming support requests from customers.; Customer Support Ticket Management | United States | 2026-10-08 |

Read from ([evidence](https://thirdpartyindex.com/evidence/63417)). CSV: https://thirdpartyindex.com/vendors/inrule/subprocessors.csv

AI model providers (or a cloud provider's AI model service) among these entries: 3. All vendors that list one: https://thirdpartyindex.com/ai

## Compliance

As its trust center lists them.

- Audited: SOC 2 Type II, ISO/IEC 27001 ([evidence](https://thirdpartyindex.com/evidence/63418))
- Claimed: HIPAA, GDPR, CCPA/CPRA ([evidence](https://thirdpartyindex.com/evidence/63418))

## Subprocessor of (0)

No tracked vendor lists it.

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api