Subprocessors
The providers that process candidate data on our behalf. Recruiter-only services (Google sign-in, Stripe billing, product analytics on recruiter pages) do not receive candidate data and are not listed here.
Last updated 7 September 2026. Employers with a signed DPA are notified by email at least 30 days before a new subprocessor is added and may object under the DPA.
| Provider | Purpose | Candidate data | Location |
|---|---|---|---|
| Vercel | Application hosting and delivery | All application traffic, including candidate pages | United States |
| Prisma Data Platform | Database | Candidate names and emails, transcripts, assessments, session events | United States |
| Cloudflare | Object storage (R2) | Screen, audio and camera recordings | North America (Western North America region) |
| OpenAI | AI interviewer, speech recognition, speech synthesis, written assessment | Spoken and typed answers, transcript, interview plan | United States |
| Resend | Transactional email | Candidate name and email for the invitation email | United States |
| jsDelivr | Delivery of the code editor software files (Monaco) to the browser | IP address and browser type only; no interview content | Global CDN |
Not used for candidate data
Product analytics is switched off on candidate and review-link pages. No candidate data is used to train AI models by us or by the providers above.