Subprocessors
Last updated September 17, 2026
Everyone below can touch candidate data in some form. The second column is the part that usually matters: “we use a speech vendor” tells you nothing, and what each one actually receives tells you everything. A vendor is on this list even where its exposure is narrow, because a list that leaves out the narrow ones is a list you cannot trust about the wide ones.
| Who | What for | What they receive | Where |
|---|---|---|---|
| Anthropic | Conducts the interview and produces the evaluation | The transcript of the conversation as it happens, the role and its criteria, and the code a candidate wrote on a coding screen. Not the recording, and not a resume unless the candidate uploaded one. | United States |
| Deepgram | Speech recognition | The candidate’s audio, in real time, to turn it into text. | United States |
| Cartesia | The interviewer’s voice | The interviewer’s own words. Nothing the candidate says. | United States |
| Anam | The interviewer’s face on video interviews | The interviewer’s synthesised speech. Nothing the candidate says, and no video of them. | United States |
| LiveKit | Carries the live audio and video | The call itself, in transit. Media is relayed, not stored: the recording is written to our own object storage. | United States |
| Supabase | Database and sign-in | Candidate email addresses and names, interview transcripts and evaluations, and the employer’s own account. | United States |
| Fly.io | Runs the interview engine and the scoring | Everything in flight during an interview, and the score store. | Canada (Toronto) |
| Vercel | Hosts the web application | Requests to the product, and anything a browser sends with them. | United States |
| Tigris | Object storage for interview recordings | The recording of an interview, encrypted at rest and reachable only through links that expire in minutes. | United States |
| Hetzner | Runs the sandbox that executes candidate code | The code submitted on a coding screen, and nothing else. It is reachable only from our own private network. | Germany |
| Resend | Sends invitation and reminder email | A candidate’s email address, the role title, and the employer’s name. | United States |
| Sentry | Error reporting | Technical error detail. Configured to scrub interview content; an error can carry a room identifier, never a transcript. | United States |
| PostHog | Product analytics on the employer side | Which screens an employer opened, and when. No candidate interview content. | United States |
| Stripe | Payments | The employer’s billing details. Never any candidate data of any kind. | United States |
Changes to this list
We will tell employers using the product before a new subprocessor starts handling candidate data, and update the date above. If you need that notice at a specific address or with a specific lead time, say so in your agreement and we will hold to it.
Each one is bound to use the data only to provide their service to us. Processing happens in Canada, the United States and Germany, so information may be handled outside the province or country you are in.