Trust
Sub-processors
Last updated: November 8, 2026
Hirlen uses the following third-party services to deliver its platform. Each processor operates under a written data processing agreement and is bound by confidentiality and security obligations no less protective than those Hirlen commits to its customers.
We will notify customers of any new sub-processor via email and the in-app changelog at least 30 days before activation, giving you the opportunity to object before the change takes effect.
| Processor | Location | Purpose | Data |
|---|---|---|---|
| Supabase | United States (AWS us-east-1) | Database, authentication, file storage, real-time subscriptions | All customer data: companies, users, candidates, vacancies, interviews, documents, settings, and audit logs |
| Vercel | Global edge network (primary: United States) | Web hosting, CDN, serverless functions and cookieless web analytics | IP address (request-time only), URL paths visited, device type. No cookies, no fingerprinting, no cross-site tracking |
| Stripe | United States, EU and UK | Payment processing for paid subscriptions and seat-based billing | Billing email, billing address, payment method tokens, subscription history. Card numbers are tokenized by Stripe and never reach our servers |
| Anthropic | United States | AI processing for CV analysis, candidate scoring and interview question generation | Vacancy descriptions and candidate CV content sent to the Claude API at request time. Anthropic does not train models on Hirlen data |
| Resend | United States (AWS SES underlying delivery) | Transactional email delivery (invitations, password reset, interview confirmations, notifications) | Recipient email address, sender, subject and email body content |
| Cloudflare | Global edge network | Bot protection on signup and login (Cloudflare Turnstile), DDoS mitigation and DNS | IP address, browser fingerprint at challenge time, User-Agent. No persistent identifiers, no profile building |
| United States and global | Sign-in with Google (OAuth), Google Calendar integration, Google Workspace for company email | When you connect your Google account: name, email, profile picture, Google Calendar free/busy and interview events created by Hirlen. See our Privacy Policy section 5 for full scope details |
Questions about sub-processors or data residency? Email privacy@nexuhr.com.