Legal
A sub-processor is a supplier that handles personal data on our behalf. This is every one of them, what they do, and where they process data. We will tell existing customers before we add one.
| Supplier | What they do for us | Where they process it |
|---|---|---|
| Postmark | Sends the consent, invite, chase and report-ready emails, and receives referee and candidate replies for classification. | United States |
| Stripe | Processes credit-bundle payments through Stripe Checkout. We never see or store a card number. | United Kingdom / European Economic Area |
| Companies House | The UK company register we query to check whether a referee’s claimed employer is an active or dissolved company. | United Kingdom (public register) |
| Sentry | Receives error reports if something breaks, so we can fix it. Configured to exclude personal data from the report body. | United States |
| Domain and mail-record lookups (RDAP, DNS) | Public domain registries we query to check a referee email domain against mail and registration records. We send only the domain, never the full address. | Public internet registries |
| Hosting | Runs the application and database. Named here once the hosting contract is finalised. | |
If you need this list for a procurement review before the hosting row above is filled in, email privacy@prehire.ai and we will send you what we have.