Pro HR uses the following service providers (“subprocessors”) that may process personal data on behalf of [Legal entity name]. Each is bound by a data processing agreement under GDPR Article 28. Last updated: 5 October 2026.
| Provider | What for | Data | Location and transfer safeguard |
|---|---|---|---|
| Google Ireland Ltd / Google LLC (Firebase) | Realtime messaging and notifications; optional analytics (only with consent) | Messages, user IDs, usage data | EU / US. EU–US Data Privacy Framework and/or Standard Contractual Clauses |
| Twilio Inc. | Video interviews | Audio, video, session metadata | US. EU–US Data Privacy Framework and/or Standard Contractual Clauses |
| OpenAI | CV parsing into profile fields, CV-to-job match scoring and screening answer scoring (used when the platform is configured to use OpenAI) | CV text (names, contact details, work history), screening answer text | [Region and transfer mechanism] |
| Google (Gemini API) | CV parsing into profile fields, CV-to-job match scoring and screening answer scoring (used when the platform is configured to use Google Gemini) | CV text (names, contact details, work history), screening answer text | [Region and transfer mechanism] |
| Amazon Web Services (AWS) | File storage for uploaded files such as CVs (S3); sending email (SES, when enabled) | Uploaded files (CVs, documents); name, email address and message content in emails | Email (SES): ap-southeast-1 (Singapore). File storage (S3): [S3 region]. [Transfer mechanism] |
| Sentry | Backend error monitoring and performance tracing | Error and trace details, request context, IP addresses and user identifiers | [Region and transfer mechanism] |
| [Cloud hosting & file storage provider] | Hosting the application, database and uploaded files (CVs, documents) | All data you submit | [Region and transfer mechanism] |
| [Email delivery provider] | Sending account, application and interview emails | Name, email address, message content | [Region and transfer mechanism] |
| [Payment provider, if used] | Taking payment for paid plans | Billing details | [Region and transfer mechanism] |
International transfers
Where personal data is transferred outside the EU/EEA, we rely on an adequacy decision (including the EU–US Data Privacy Framework for certified US companies) or on the European Commission’s Standard Contractual Clauses, together with additional safeguards where needed. Ask us for a copy of the safeguards at [privacy contact email].
Changes
We will update this list when we add or replace a subprocessor. Customers who need advance notice can contact [privacy contact email].