Sub-processors — Hiring Intelligence
Stand: 27. Juli 2026
Dieses Dokument liegt derzeit ausschließlich in englischer Sprache vor. Die englische Fassung ist die maßgebliche Fassung.
Effective date: 2026-07-27 · Last updated: 2026-07-27
Hiring Intelligence (Growthlynk Management FZCO) uses the following sub-processors to process personal data on behalf of its customers under the Data Processing Agreement (DPA). This list covers only processing on customers' behalf — providers used in our own, independent data sourcing and enrichment are not sub-processors under the DPA (see clause 1.2 DPA) and are described in our Privacy Notice instead.
| Sub-processor | Entity & Location | Service | Products |
|---|---|---|---|
| Supabase Inc. | USA (parent); database hosted in the EU (AWS eu-west-1, Ireland) | Primary database (workspace, reply and match-result data incl. minimal ambiguous-match references until manual resolution, max. 30 days), encrypted at rest | LeadFlow, GrowthEngine, PlacementEngine |
| API Hero Ltd (trading as Trigger.dev) | UK; cloud hosted on AWS us-east-1 (USA) | Execution of processing tasks (matching, delivery, send/reply pipeline) — transient; persistent data remains in the EU-hosted database | LeadFlow, GrowthEngine, PlacementEngine |
| Vercel Inc. | USA (parent); compute pinned to EU region (Dublin, dub1) — client portal and operations dashboard both in EU | Application hosting (dashboards, client portal) | All |
| EmailBison | 3080 Yonge Street, Suite 6060, Toronto, Ontario M4N 3N1, Canada | Email-sending infrastructure, isolated workspace per customer | GrowthEngine |
| OpenAI, L.L.C. | USA | Automated reply classification and reply-content extraction (API — no training on customer data per OpenAI's API terms; limited abuse-monitoring retention) | GrowthEngine |
| Perplexity AI, Inc. | USA | AI-assisted business-contact research (phone numbers) for qualified replies (API — no training on customer data per provider terms) | GrowthEngine |
| Hackeez Consulting SAS (trading as BetterContact) | France (EU) | Licensed contact-data enrichment (phone numbers) for qualified replies; engages its own vetted providers under its DPA | GrowthEngine |
Safeguards. Each sub-processor is bound by a data processing agreement imposing substantially the same obligations as our DPA. Transfers outside the EU/EEA are covered by an adequacy decision or the EU Standard Contractual Clauses under Chapter V GDPR, together with supplementary measures (EU-only data-at-rest hosting, encryption, access controls); the provider-specific transfer basis is documented in our Transfer Impact Assessment (available on request).
Not sub-processors. Your own tools remain your responsibility, even where we push data into them on your instruction — e.g. your CRM instance (such as Close) or the Google Sheets owned by you that we deliver leads or reply data into.
Changes. We notify customers of intended additions or replacements at least 4 weeks in advance in text form (clause 5.2 DPA). Objections on reasonable data protection grounds can be raised within that period via [email protected].