Sub-processors
Last updated 2026-10-03
These are the companies that process data on our behalf so the service can run. Each one gets only what its job needs.
Current sub-processors
Google Cloud
- What they do
- Hosting and infrastructure (Kubernetes Engine, Cloud SQL, Memorystore, Secret Manager, Artifact Registry, and Cloud Storage, which holds email attachments, CVs among them). Vertex AI, in Doha, Qatar (me-central1), converts the subject and body of inbound email, and your knowledge-base documents and corrections, into numerical representations for knowledge-base answers. No CV attachments are sent to it.
- Where
- Doha, Qatar (me-central1)
- What they receive
- Everything the service stores, at rest and in processing.
Cloudflare
- What they do
- Content delivery, DNS, and network security
- Where
- Global edge network
- What they receive
- Request metadata in transit. No stored customer data.
Vercel
- What they do
- Serves the marketing site and the customer dashboard
- Where
- Global edge network
- What they receive
- Requests to the dashboard and the marketing site. Customer data is fetched server-side from our own services and is not stored here.
Clerk
- What they do
- Authentication and organization membership
- Where
- United States
- What they receive
- The names, email addresses and sign-in activity of your team members. No candidate or customer data.
Stripe
- What they do
- Payments and subscription billing
- Where
- United States
- What they receive
- Your billing contact and payment details. Stripe holds the card; we never do.
OpenAI
- What they do
- AI model provider
- Where
- United States
- What they receive
- The content of the turn being handled, including the full text of CVs for screening. Never your connected mailbox credentials. Not used to train their models.
Anthropic
- What they do
- AI model provider
- Where
- United States
- What they receive
- The content of the turn being handled, including the full text of a CV when it is the fallback model for screening. Never your connected mailbox credentials. Not used to train their models.
Twilio
- What they do
- Telephony, SMS, and call recording
- Where
- United States
- What they receive
- Phone numbers, call audio and SMS content for the phone automation.
ElevenLabs
- What they do
- Speech synthesis
- Where
- United States
- What they receive
- The text spoken back on a call.
Deepgram
- What they do
- Speech transcription
- Where
- United States
- What they receive
- Call audio, to turn it into text.
Namecheap Private Email
- What they do
- Outbound email from the platform
- Where
- United States
- What they receive
- The content of notification email the platform sends to your team.
Named, but not sub-processors
You may have seen these mentioned. They are here so their absence from the list above reads as a decision rather than an omission.
SendGrid
Not in use. The platform's outbound email goes through Namecheap Private Email over SMTP.
The domain-verified system connection for digest delivery is provisioned. On that day this entry moves into the list above and the published page changes with it.
Temporal
Self-hosted inside our own cluster, backed by our own database. No data leaves our infrastructure for it.
Changes
2026-09-06
First published as a table. The same providers the privacy policy already listed, with what each one receives stated per provider.
2026-10-03
Google Cloud's entry now names two of its products it did not name before: Cloud Storage, which holds email attachments, and Vertex AI, which converts inbound email and your knowledge-base content into numerical representations for knowledge-base answers, in Doha, Qatar, with no CV attachments. The OpenAI and Anthropic entries now say that they receive the full text of CVs for screening. No new provider was added.
We notify the account contact by email when this list changes. If you would like a second address on that notice, tell us.
Ask for change notices