SuprHiro uses the service providers below to run the platform. Each processes personal data only to provide its service to us, under terms that protect it. Many are used only when a customer switches on the related feature — for example, a candidate whose employer never uses AI calls has never had data sent to our calling provider. This list forms part of our Data Processing Agreement.
Current sub-processors
| Provider | Purpose | Data | Region | When used |
|---|---|---|---|---|
| Cloud hosting provider | Runs the SuprHiro application, database and file storage | All data held in SuprHiro | Named on request | Always |
| Brevo (Sendinblue SAS) | Sending email, receiving candidate replies, delivery and open status | Names, email addresses, message content, attachments | European Union | Always |
| Groq, Inc. | AI processing: resume parsing, summaries and the staff assistant | Resume text, interview notes and transcripts, candidate profile data | United States | When AI features run |
| Google LLC — Gemini API | AI processing: summaries, reports and the staff assistant | Resume text, interview notes and transcripts, candidate profile data | United States / global | When AI features run |
| Google LLC — Calendar, Meet and Sign-in | Interview scheduling, meeting links and signing in with Google | Names, email addresses, interview times, free/busy status | Global | When a customer or user connects Google |
| Microsoft Corporation | Outlook calendar scheduling and Microsoft Teams links | Names, email addresses, interview times, free/busy status | Global | When a user connects Microsoft |
| LinkedIn Corporation | Signing in with LinkedIn | Name, email address, profile identifier | Global | When a user signs in with LinkedIn |
| Calendly, LLC | Interview scheduling links | Candidate name, email address, interview times | United States | When a customer connects Calendly |
| Ringg AI | AI phone screening calls and call recordings | Candidate name and phone number, job details, call recording and transcript | India | When a customer uses AI calls |
| Recall.ai | AI interview notetaker | Interview audio and transcript, participant names | United States | When the notetaker is switched on for an interview |
| Meta Platforms (WhatsApp Business) | WhatsApp messages and interview reminders | Candidate phone number, message content | Global | When a customer connects WhatsApp |
| Telegram | Notifications and the staff assistant bot | Message content, which may include candidate details | Global | When a user or candidate links Telegram |
| PayU Payments Private Limited | Processing customer payments | Payer name, email address, amount; card and bank details are entered on PayU, not SuprHiro | India | When a customer pays |
| Intuition Machines, Inc. (hCaptcha) | Spam and bot protection on signup and job application forms | IP address, browser and interaction signals | United States | On those two forms |
| Google LLC — Google Analytics 4 | Website and product usage analytics | Pages viewed, device and browser, approximate location, cookie identifiers | United States / global | Always |
| Contentsquare SAS | Usability analytics — how pages are used | Clicks, scrolling, navigation, device and browser, cookie identifiers | European Union / United States | Always |
| PostHog, Inc. | Product analytics | Pages viewed, clicks, device and browser, cookie identifiers | United States | When enabled |
| Functional Software, Inc. (Sentry) | Error monitoring | Technical error details and record identifiers; request bodies, cookies and personal data fields are stripped | United States | When enabled |
Where a provider operates in several regions, the main one is shown. Region means where the provider processes the data, which may differ from where it is incorporated.
Run by us, not by a third party
- Offer letter PDFs are generated on our own servers.
- Uploaded files can be scanned for malware on our own servers; they are not sent to a third party for scanning.
- Background checks are carried out by the verification vendor the customer chooses and pays for; SuprHiro only records the status and results the customer enters.
Changes to this list
We update this page before we add or replace a sub-processor. For a new sub-processor of customer personal data we also email workspace admins at least 14 days in advance, and customers can object as set out in the DPA.
Questions
Ask us about any provider, or for the name and location of our hosting provider, at hiring@supahiro.co.