HIROBIA

Subprocessors

These companies process data on our behalf to provide the service. Each is bound by a written agreement with data protection terms at least as strict as ours. We tell customers at least 30 days before adding or replacing a subprocessor, so they can object. Last updated 15 October 2026.

Used for every customer

CompanyWhat forDataWhere
Amazon Web ServicesHosting, file storage (resumes, interview recordings), queues, media conversionAll customer and candidate dataRegion chosen for your account
SupabaseDatabase and sign-inAccount, candidate, job and interview recordsRegion of your project
OpenAIResume matching, AI interviewer questions and follow-ups, speech-to-text and text-to-speech, scoring, the candidate assistantResume and job text, interview audio and transcriptsUnited States (API data is not used for training)
Email delivery providerInvitations, confirmations and notificationsNames, email addresses, message contentAs configured for your account

Only when a customer turns the feature on

CompanyWhat forData
Google / MicrosoftSending email and calendar invitations from a recruiter's own mailbox, when they connect itMessages and invitations the recruiter sends
LinkedIn, Greenhouse, Zoho RecruitImporting applicants and sending scores back, when an admin connects themApplicant records exchanged with that system
Merge (merge.dev)Connecting other applicant tracking systems (for example Workday, iCIMS, SAP SuccessFactors, Lever), when an admin connects one through MergeApplicant records, resumes and notes exchanged with that system; Merge keeps a synced copy
Your SIEM / log collectorAudit log streaming, when an admin turns it onAudit events (no candidate documents)
RazorpaySubscription billingBilling contact and payment details (card data stays with Razorpay)

Questions, or to receive notice of changes: contact your account team. Our data processing agreement is available on request.