Legal
Sub-processors
A sub-processor is a supplier that handles personal data on our behalf. This is every one of them, what they do, and where they process data. We will tell existing customers before we add one.
- Postmark
- What they do for us Sends the consent, invite, reminder and report-ready emails, and receives referee and candidate replies for classification.
- Where they process it United States
- Stripe
- What they do for us Processes credit-bundle payments through Stripe Checkout. We never see or store a card number.
- Where they process it United Kingdom / European Economic Area
- Companies House
- What they do for us The UK company register we query to check whether a referee’s claimed employer is an active or dissolved company.
- Where they process it United Kingdom (public register)
- Sentry
- What they do for us Receives error reports if something breaks, so we can fix it. Configured to exclude personal data from the report body.
- Where they process it United States
- Domain and mail-record lookups (RDAP, DNS)
- What they do for us Public domain registries we query to check a referee email domain against mail and registration records. We send only the domain, never the full address.
- Where they process it Public internet registries
- Hosting
- What they do for us OVH Ltd — runs the application and the database.
- Where they process it United Kingdom
Postmark and Sentry process data in the United States. Email privacy@prehire.ai and we will send you the current transfer safeguard documents.