About this list
This page lists the third-party sub-processors that Hireable engages to help deliver the Service. "Sub-processor" has the meaning given to it in the Data Processing Agreement annexed to our Master Services Agreement (MSA). Hireable remains responsible for the acts and omissions of its sub-processors in the same way as for its own acts and omissions.
Hireable will notify business customers of any intended addition or replacement of a sub-processor at least 30 days in advance of that sub-processor beginning to process customer personal data, by email to the Designated Admin on the relevant Order Form and by updating this page. If a customer reasonably objects to a proposed new sub-processor on data protection grounds, please contact privacy@gethireable.com within the notice period to raise concerns or request further information.
Current sub-processors
| Processor | Purpose | Location | Transfer mechanism |
|---|---|---|---|
| Google Cloud Platform | Hosting and platform services (Cloud Run, Firestore, Cloud Storage, Cloud SQL, Secret Manager, logging; Vertex AI for embeddings) — primary data residency London (europe-west2) | UK/EU (europe-west2 primary) + US support access | UK IDTA |
| Google (Gemini API) | AI assistant, CV analysis and generation, job matching — processed on Google-managed Gemini infrastructure (not pinned to a single region) | Google-managed (global) | UK IDTA |
| Anthropic (via Google Vertex AI) | Auto-apply only: AI navigation of unfamiliar job-application forms (receives applicant profile and CV content during a user-instructed application) | EU (europe-west1) | UK IDTA |
| Stripe Payments UK Ltd | Payment processing and invoicing | UK + EU + US | UK IDTA |
| Sentry | Error monitoring (with automatic field-level PII scrubbing at source) | EU + US | UK IDTA |
| DocuSign | Contract eSigning (B2B agreements; signatory name/email, contract content) | US | UK IDTA + SCCs |
| Google (Gmail API) | Sending and reply-detection for outreach emails from a user-connected Gmail account (thread metadata only for replies; no inbox content stored) | EU + US | UK IDTA |
| Microsoft (Outlook / Microsoft Graph API) | Sending outreach emails from a user-connected Outlook account | EU + US | UK IDTA |
| Tavus | AI interview practice: live video sessions with real-time perception analysis and transcripts; receives the job description and a CV summary for coaching context. Recordings made before July 2026 remain in Tavus-managed storage (region being confirmed with Tavus) pending deletion | US | UK IDTA |
| Daily.co | Live video-call infrastructure for interview practice (engaged via Tavus) | US | UK IDTA |
| Amazon Web Services (S3) | Interview recording storage in a Hireable-controlled bucket (active from July 2026) | EU (eu-north-1, Stockholm) | Not required (EU-hosted) |
| Google Maps Platform | Geocoding of job-advert location text (no member personal data) and location autocomplete when a user types their location (profile and onboarding) | EU + US | UK IDTA |
| Resend | Transactional email (org invites, system mail, brochure delivery) | To be confirmed with vendor | Under confirmation (UK IDTA where required) |
| PostHog (EU Cloud) | Product analytics — cookieless configuration; session replay fully masked | EU (eu.i.posthog.com) | Not required (EU-hosted) |
| Attio | B2B CRM (customer contact, company, and deal records; B2B lead enquiries) | To be confirmed with vendor | Under confirmation (UK IDTA where required) |
| ClickUp | Feedback triage and escalation ticketing (user-submitted feedback content) | US | UK IDTA |
| Slack | Internal operational alerting (may carry user-submitted feedback text) | US | UK IDTA |
| Calendly | Demo and coach-session booking (booking name/email) | US | UK IDTA |
| Trustpilot | Review invitations (recipient email address) | To be confirmed with vendor | Under confirmation (UK IDTA where required) |
Deliberately not on this list
- Adzuna, Reed, and public ATS job feeds (Workable, SmartRecruiters) — job-advert data flows in from these sources; no personal data flows out to them.
- Employers and their applicant tracking systems (Greenhouse, Lever, Workday, and others) — when a member applies to a job, their application goes to that employer at the member's instruction. The employer is an independent controller, not our sub-processor.
Last updated: 2026-07-16