HiPeople Subprocessors
Subprocessor Amazon Web Services
Address
Amazon Web Services Europe S.à r.l. (Société à responsabilité limitée), 38 avenue John F. Kennedy, L-1855, Luxemburg
Description of processing
Storage and processing of candidate, reference, and user data
Duration of processing
Processing shall begin when the service has started and will continue indefinitely throughout the duration of the service
Type of personal data processed
Personal master data (e.g. first name, last name), Contact data (e.g. telephone, email), Candidate data/data collected during the application procedure (e.g. answers to questionnaires, professional experience, CV, etc.)
Categories of data subject
Candidate and Reference Data
Data centre location(s)
European Union (Frankfurt, Germany)
Subprocessor Mailgun
Address
Mailgun Technologies, Inc., 548 Market St. #43099 San Francisco CA 94104 United States of America
Description of processing
Sending emails to candidates/references. Validation of email addresses
Duration of processing
Processing shall begin when the service has started and will continue indefinitely throughout the duration of the service
Type of personal data processed
Personal master data (e.g. first name, last name), Contact data (e.g. telephone, email)
Categories of data subject
Candidate and Reference Data
Data centre location(s)
European Union
Subprocessor Intercom
Address
Intercom R&D Unlimited Company, 18-21 St. Stephen’s Green, Dublin 2, Ireland
Description of processing
Collecting, sorting and transferring for the purposes of allowing HiPeople to communicate with Customer via Chat or Email
Duration of processing
Processing shall begin when the service has started and will continue indefinitely throughout the duration of the service
Type of personal data processed
Names, Email Addresses, and personal data contained in communication to and with HiPeople
Categories of data subject
Candidate and Reference Data, Client Data
Data centre location(s)
European Union (Dublin, Ireland)
Subprocessor Google
Address
Google Cloud EMEA Limited, 70 Sir John Rogerson’s Quay, Dublin 2, Ireland
Description of processing
Identity/authentication provider (OAuth / Google login) and related infrastructure services
Duration of processing
Processing shall begin when the service has started and will continue indefinitely throughout the duration of the service
Type of personal data processed
User email, unique identifiers, token metadata, basic profile info
Categories of data subject
Candidate and Reference Data, Client Data
Data centre location(s)
European Union (Belgium, Netherlands, Ireland, Finland and Germany)
Subprocessor Kombo
Address
Kombo Technologies GmbH, Kottbusser Damm 25–26, 10967 Berlin, Germany
Description of processing
API integration platform for ATS systems. Allows the transfer of candidate and employee related data between systems
Duration of processing
Processing shall begin when the service has started and will continue indefinitely throughout the duration of the service
Type of personal data processed
Candidate personal data (e.g., names, emails, application details), customer data (e.g., contact details)
Categories of data subject
Candidate and Reference Data, Client Data
Data centre location(s)
European Union
Subprocessor Slack (HiPeople bot)
Address
Slack Technologies, LLC, 500 Howard Street, San Francisco, CA 94105, USA
Description of processing
Alternative to email for user notifications.
This integration is customer-controlled and only active if the customer enables it
Duration of processing
Processing shall begin when the service has started and will continue indefinitely throughout the duration of the service
Type of personal data processed
User email, name, role names
Categories of data subject
Client Data
Data centre location(s)
European Union (Frankfurt, Germany)
Subprocessor LinkedIn (verification)
Address
LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland
Description of processing
Candidate profile verification and verifying the connection to references (confirming professional relationships).
This integration is customer-controlled and only used when activated as part of the verification process
Duration of processing
Processing shall begin when the service has started and will continue indefinitely throughout the duration of the service
Type of personal data processed
Candidate's public profile data (e.g., name, headline/job title, connection network)
Categories of data subject
Candidate and Reference Data
Data centre location(s)
European Union (Ireland)
Subprocessor OpenAI
Address
OpenAI Ireland Ltd, 1st Floor, The Liffey Trust Centre, 117–126 Sheriff Street Upper, Dublin 1, D01 YC43, Ireland
Description of processing
Processing of AI interviews and resume screens. AI assistant for hiring teams
Duration of processing
Processing shall begin when the service has started and will continue indefinitely throughout the duration of the service
Type of personal data processed
Resume files, audio files of ai interviews, anonymized candidate data, anonymized assessment scores, job information from ATS, hiring team questions and chats
Categories of data subject
Candidate Data, Client Data
Data centre location(s)
United States (primary) or European Union (optional)
Subprocessor Azure
Address
One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland
Description of processing
Processing of AI interviews and resume screens. AI assistant for hiring teams
Duration of processing
Processing shall begin when the service has started and will continue indefinitely throughout the duration of the service
Type of personal data processed
Resume files, audio files of ai interviews, anonymized candidate data, anonymized assessment scores, job information from ATS, hiring team questions and chats
Categories of data subject
Candidate Data, Client Data
Data centre location(s)
European Union (multiple regions)
Subprocessor VertexAI
Address
Google Cloud EMEA Limited, 70 Sir John Rogerson’s Quay, Dublin 2, Ireland
Description of processing
Processing of AI interviews and resume screens. AI assistant for hiring teams
Duration of processing
Processing shall begin when the service has started and will continue indefinitely throughout the duration of the service
Type of personal data processed
Resume files, audio files of ai interviews, anonymized candidate data, anonymized assessment scores, job information from ATS, hiring team questions and chats
Categories of data subject
Candidate Data, Client Data
Data centre location(s)
European Union (multiple regions)
Subprocessor Launchdarkly
Address
LaunchDarkly, Inc., 1999 Harrison Street, Suite 1100, Oakland, CA 94612, USA
Description of processing
Feature flagging on the HiPeople frontend
Duration of processing
Processing shall begin when the service has started and will continue indefinitely throughout the duration of the service
Type of personal data processed
User identifiers, device/browser information, IP addresses, event logs, timestamps, and usage metadata
Categories of data subject
Client Data
Data centre location(s)
United States (AWS infrastructure) or European Union (Frankfurt, Germany)
Subprocessor Mixpanel
Address
Mixpanel, Inc., 405 Howard Street, Floor 2, San Francisco, CA 94105, USA
Description of processing
Product analytics platform. HiPeople uses Mixpanel to track user interactions within the platform to understand adoption and engagement
Duration of processing
Processing shall begin when the service has started and will continue indefinitely throughout the duration of the service
Type of personal data processed
User identifiers, device/browser information, IP addresses, event logs, timestamps, and usage metadata
Categories of data subject
Client Data
Data centre location(s)
European Union
Subprocessor dash0
Address
Dash0 Inc, 575 Lexington Ave, 17th Floor #123, New York, NY 10022, United States
Description of processing
Telemetry and observability for the HiPeople platform
Duration of processing
Processing shall begin when the service has started and will continue indefinitely throughout the duration of the service
Type of personal data processed
Candidate and user emails, IP address
Categories of data subject
Candidate and Reference Data, Client Data
Data centre location(s)
European Union (AWS infrastructure)
Subprocessor Sentry
Address
45 Fremont Street, 8th Floor, San Francisco, CA 94105, USA
Description of processing
Error tracking and application monitoring service. Used to collect, store, and analyze application errors and performance data
Duration of processing
Processing shall begin when the service has started and will continue indefinitely throughout the duration of the service
Type of personal data processed
User identifiers, device/browser information, IP addresses, event logs, timestamps, and usage metadata
Categories of data subject
Candidate and Reference Data, Client Data
Data centre location(s)
United States (Iowa) or European Union (Frankfurt, Germany)
Subprocessor Checkr
Address
Checkr, Inc., One Montgomery Street, Suite 2400, San Francisco, CA 94104, USA
Description of processing
Checkr provides background check and identity verification services. HiPeople offers an optional background check feature that uses Checkr’s web SDK, allowing candidates to submit required information directly to Checkr for verification.
This integration is only available to and used by certain US-based customers who have explicitly enabled background checks.
HiPeople does not store or retain any of the data submitted through this process
Duration of processing
Only for the duration of the background check initiated by the customer; data is processed directly between the candidate and Checkr
Type of personal data processed
Candidate identification and contact details (e.g., name, date of birth, email, phone, address) and other information required for identity verification and background checks, submitted directly by the candidate to Checkr.
HiPeople does not store this data
Categories of data subject
Candidates invited by US-based HiPeople customers who have opted to use the background check feature
Data centre location(s)
United States