Sub-processor List
Transparency about the third-party service providers who process your data
Last updated: November 30, 2024 | Version 1.0
CandidateHub uses trusted third-party service providers to deliver our services. All sub-processors are contractually required to maintain data protection standards equivalent to GDPR and Singapore PDPA. This page lists all sub-processors currently in use.
Current Sub-processors
| Service Provider | Service Type | Location | Status |
|---|---|---|---|
| Google (Gemini AI) | AI Processing | USA | Active |
| Supabase | Database & Authentication | USA (AWS) | Active |
| Vercel | Frontend Hosting | USA / Global Edge Network | Active |
| Render | Backend Hosting | USA | Active |
| Polar | Payment Processing | USA | Active |
Sub-processor Details
Google (Gemini AI)
Company Information
Legal Entity: Google LLC
Service Type
AI Processing
Data Processed
- •Profile content
- •Job descriptions
- •Generated content
Processing Locations
USA
Security Certifications
Supabase
Company Information
Legal Entity: Supabase, Inc.
Service Type
Database & Authentication
Data Processed
- •All user data
- •Authentication data
- •Profile information
Processing Locations
USA (AWS)
Security Certifications
Vercel
Company Information
Legal Entity: Vercel Inc.
Service Type
Frontend Hosting
Data Processed
- •HTTP access logs
- •Edge function data
- •Session identifiers
Processing Locations
USA / Global Edge Network
Security Certifications
Render
Company Information
Legal Entity: Render Services, Inc.
Service Type
Backend Hosting
Data Processed
- •API request data
- •Server logs
- •User data in transit
Processing Locations
USA
Security Certifications
Polar
Company Information
Legal Entity: Polar Software Inc.
Service Type
Payment Processing
Data Processed
- •Billing information
- •Subscription status
- •Payment metadata
Processing Locations
USA
Security Certifications
Sub-processor Changes
Notification Process
We notify users of material changes to sub-processors with at least 14 days advance notice. If you have concerns about a new sub-processor or wish to object, please contact our Data Protection Officer.
Objection Process
If you object to the addition of a new sub-processor, you may:
- •Submit a written objection to our DPO within 14 days
- •Request termination of your account without penalty
- •Expect a response within 7 business days
Change History
| Date | Change Type | Provider | Description |
|---|---|---|---|
| Nov 30, 2024 | Initial List | All | Initial sub-processor list publication |
Questions or Objections?
Data Protection Officer
Email: dpo@aicandidatehub.com
Alternative: sales@aicandidatehub.com (with "DPO Request" in subject line)
© 2026 New Indigo Solutions. All rights reserved. This Sub-processor List is incorporated by reference into our Data Processing Agreement.