Quick answers
Is Global Relay SOC 2 Type II and ISO 27001 certified?
Global Relay says it holds both. Its Trust Centre lists SOC 2 Type II and ISO 27001, and announces SOC 2 Type II reports for the period 1 May 2025 to 30 April 2026 (posted 24 September 2026). The pages we read do not say which SOC 2 criteria are covered or give ISO certificate dates.
Where does Global Relay store data?
Global Relay says data is stored and processed entirely in a Canadian or U.S. data center, depending on where the customer’s organisation is located (Information Security page, last modified 30 June 2026). The pages we read do not mention UK or EU data residency.
Can Global Relay archive ChatGPT Enterprise conversations?
Yes, according to Global Relay. Its connector captures ChatGPT Enterprise conversations for specified workspace IDs, plus uploaded and generated media files and metadata, through a direct API (page last modified 29 September 2026). The page does not name a required ChatGPT plan tier or Global Relay licence tier.
Does Global Relay use customer data to train AI?
The pages we read do not say. Global Relay’s Trust Centre states that it has an AI policy, but we could not read it. Ask for the policy and a written answer.
What Global Relay states
| Area | What the vendor states | Source and date |
|---|---|---|
| Security attestation | SOC 2 Type II and ISO 27001 are listed as certifications. Trust Centre announcements list SOC 2 Type II reports for 1 May 2025 to 30 April 2026 and for 1 May 2024 to 30 April 2025. The pages do not state which SOC 2 criteria are covered, or the scope and dates of the ISO certificate. | S1, S2 · 24 Sep 2026; 20 Aug 2025; 30 Jun 2026 |
| Other assurance | The Trust Centre summary lists annual third-party penetration testing, an AI policy, a disaster recovery plan and a willingness to enter into a data processing addendum. It says customer data is deleted on request, with no timeframe given. No sub-processor list appears on the page. | S1 · summary undated |
| Where data is hosted | Stored and processed entirely in a Canadian or U.S. data center, depending on where the customer’s organisation is located. No specific sites or regions are named, and UK or EU residency is not mentioned. | S2 · 30 Jun 2026 |
| Encryption and integrity | Data is encrypted in transit and at rest with cryptographic protections using hardware security modules. Global Relay describes constant integrity checks to confirm data has not been altered. Key ownership and key management are not described, and the pages do not use the term WORM. | S2, S3 · 30 Jun 2026; 26 Nov 2025 (modified 11 Aug 2026) |
| Channels and retention | Global Relay says it captures email, chat, mobile, voice and collaboration tools in one platform, with product pages for WhatsApp, instant messaging, voice and text, and website archive. It lists retention controls, role-based access and chain of custody under audit-ready governance, without giving retention periods or policy detail. | S4 · 30 Jun 2026 |
| AI features | AI-driven surveillance that adds sentiment, behaviour and context to keyword detection, an AI assistant to search across conversations, and real-time transcription and translation in 50+ languages. | S4 · 30 Jun 2026 |
| Archiving AI conversations | A connector for ChatGPT Enterprise captures conversations for specified workspace IDs, media files uploaded by users and provided by ChatGPT, metadata, and historical data subject to the workspace retention policy. A Global Relay administrator first authorises the connection with the firm’s ChatGPT Enterprise account, then sets archiving policies. No plan tier is named. | S5 · 29 Sep 2026 |
| Analyst recognition | Global Relay says it was named a Leader in the October 2025 Gartner Magic Quadrant for Digital Communications Governance and Archiving Solutions. This is the vendor’s statement about an analyst report, not a security attestation. | S2 · 30 Jun 2026 |
The Trust Centre lists badges and announcements without scope detail, so the reports themselves are what to request. Dates are the page’s own where it shows one; otherwise we say “undated”.
Archiving AI tools and meeting notes
Global Relay documents direct connectors for AI tools, including ChatGPT Enterprise and, according to both vendors, Fellow. If your firm is adopting AI assistants, the point to check is whether their outputs are captured as records and in which form. For the rules, see Archiving AI meeting notes: what regulated firms need to check. For one vendor’s connector in detail, see the Fellow compliance review.
Questions to ask before signing
- Ask for the SOC 2 Type II report and ISO 27001 certificate, and check the criteria covered, the audit period and the ISO scope statement. The Trust Centre page lists the badges but not the detail.
- Data location is Canada or the U.S. on the pages we read. If your firm needs UK or EU hosting, ask in writing whether it is available and on what terms.
- Ask for Global Relay’s AI policy and written confirmation of whether customer data is used to train or improve AI models, including for the AI assistant and the surveillance features.
- Ask how records are kept unaltered and how your firm can retrieve them. The pages describe integrity checks and retention controls but give no retention periods and do not use the term WORM. If you are an SEC-registered broker-dealer, ask what Global Relay provides toward your Rule 17a-4 obligations.
- For the ChatGPT Enterprise connector, ask which plan tiers it works with, which workspaces it covers, and how historical data interacts with your workspace retention settings.
- Ask for the sub-processor list, which the Trust Centre page does not show, and how customers are told about changes.
Who it fits
Global Relay suits firms that want one archive for email, chat, voice and AI-conversation records, and that are comfortable with Canadian or U.S. hosting. Firms that need UK or EU-only hosting should confirm residency before shortlisting it. Pricing was not in the pages we reviewed.
Sources
- S1: Global Relay Trust Centre, with dated announcements, latest 24 September 2026.
- S2: Global Relay: Information security, page last modified 30 June 2026.
- S3: Global Relay: How does Global Relay ensure data security?, published 26 November 2025, last modified 11 August 2026.
- S4: Global Relay: An intelligent, unified foundation for compliance and governance, page last modified 30 June 2026.
- S5: Global Relay connector for ChatGPT Enterprise, page last modified 29 September 2026.
All sources read on 15 October 2026. Where a page shows no date, we say so. The SOC 2 report itself and the Trust Centre FAQs were not available to us.
Visit Global Relay
Check the vendor’s current pages, then compare it with the other communications archiving tools in the directory.
Go to Global RelayCompare all communications archiving tools · Behavox review · Webex and SEC archiving guide