Sub-processors

| name | purpose | data_categories | location | transfer_mechanism | venue_data | seed_status |

|---|---|---|---|---|---|---|

| Supabase | Database, sign-in and file storage for the whole platform, including CVs and right-to-work documents | All platform data | [SUPABASE_REGION_LABEL not set] (Amazon Web Services); support access may be from outside the UK | UK IDTA/Addendum under Supabase DPA for any access from outside the UK | Yes | active |

| [HOSTING_PROVIDER not set] | Hosts and serves the RecruitCommis web app | Request data including IP address, and all data passing through the app | [HOSTING_LOCATION not set] | [HOSTING_TRANSFER_MECHANISM not set] | Yes | active |

| Twilio | Sends and receives SMS and WhatsApp messages; delivers transactional email (SendGrid) | Names, phone numbers, email addresses, message content, delivery status | United States | [TWILIO_TRANSFER_MECHANISM not set] | Yes | active |

| Meta (WhatsApp Business Platform) | Carries WhatsApp messages between venues, candidates and RecruitCommis | Phone numbers, WhatsApp profile names, message content | [META_LOCATION not set] | [META_TRANSFER_MECHANISM not set] | Yes | active |

| Make | Runs automated workflows: screening conversations, reminders, trial check-ins, notifications | Names, contact details, screening answers, CV text, application status | [MAKE_ZONE_LABEL not set] | [MAKE_TRANSFER_MECHANISM not set] | Yes | active |

| OpenAI | Reads CV text to extract work history and write summaries for venues; suggests bio wording when a candidate asks | CV text, screening answers, bio text | United States | [OPENAI_TRANSFER_MECHANISM not set] | Yes | active |

| Stripe | Subscription payments, invoices and the billing portal | Venue billing contacts, company details, payment card details (held by Stripe), invoices. Venue account data only; no candidate data | United States and EU | [STRIPE_TRANSFER_MECHANISM not set] | No | active |

| Zoho | Business email for support, sales and privacy enquiries | Anything you email us, and email addresses. Only what you send us | [ZOHO_DC_LABEL not set] | [ZOHO_TRANSFER_MECHANISM not set] | No | active |

| [CHATBOT_PROVIDER not set] | Powers the automated help assistant on our website and help pages | Questions typed into the assistant | [CHATBOT_LOCATION not set] | [CHATBOT_TRANSFER_MECHANISM not set] | No | confirm |

| [ANALYTICS_PROVIDER not set] | Cookieless website analytics (page views, referrers, device type) | Aggregated usage; IP address processed transiently and not stored | [ANALYTICS_LOCATION not set] | [ANALYTICS_TRANSFER_MECHANISM not set] | No | confirm |

| [MAPS_PROVIDER not set] | Works out travel time between a candidate's area and a venue | Postcode or area, venue address | [MAPS_LOCATION not set] | [MAPS_TRANSFER_MECHANISM not set] | Yes | confirm |

| [OCR_PROVIDER not set] | Reads text from uploaded right-to-work documents | Images of right-to-work documents | [OCR_LOCATION not set] | [OCR_TRANSFER_MECHANISM not set] | Yes | confirm |

Enter your email to be told about changes to this list at least 30 days before they take effect.