To operate our platform and deliver our services, we rely on trusted third-party providers who process data on our behalf. These providers are known as subprocessors.
We carefully select these providers and ensure appropriate contractual, technical, and organisational safeguards are in place to protect personal data.
Below is a list of subprocessors currently used to support the Pynea platform.
Cloud Infrastructure & Hosting
Google Cloud Platform (GCP)
Purpose: Cloud infrastructure hosting, application services, and secure data storage.
Data processed: Platform data including candidate profiles, application data, transcripts, and system logs.
Location: European Union / United Kingdom (depending on configuration).
Website: https://cloud.google.com
Artificial Intelligence Processing
Google Gemini (via Google Cloud AI services)
Purpose: AI processing used to generate summaries, insights, and analysis from candidate responses, transcripts, or application data.
Data processed: Candidate responses, transcripts, and related application content submitted within the platform.
Location: United States / European Union depending on Google Cloud processing configuration.
Website: https://ai.google.dev
Payment Processing
Stripe
Purpose: Subscription billing and payment processing for customer accounts.
Data processed: Customer billing information and payment details.
Location: United States / European Union.
Website: https://stripe.com
Consent Management
Cookiebot (Usercentrics)
Purpose: Cookie consent management and storage of consent records for website visitors.
Data processed: Cookie identifiers, consent preferences, and related metadata.
Location: European Union.
Website: https://www.cookiebot.com
Real-time Communications & Video Processing
LiveKit
Purpose: Real-time video, audio streaming, and recording for interviews and platform interactions.
Data processed: Audio, video, and related metadata from user sessions.
Location: US/EU
Website: https://livekit.io
Cloud Storage (Supplementary)
Amazon Web Services (AWS)
Purpose: Storage of video recordings and related media assets.
Data processed: Video recordings, audio data, and associated metadata.
Location: United Kingdom / European Union / United States.
Website: https://aws.amazon.com
Authentication & Identity Management
Firebase Authentication (Google Firebase)
Purpose: User authentication, account management, and login services.
Data processed: User identifiers (e.g. email), authentication credentials, and account metadata.
Location: United States / European Union (depending on configuration).
Website: https://firebase.google.com
Customer Relationship Management / Marketing
HubSpot
Purpose: Customer relationship management (CRM), marketing communications, and contact management.
Data processed: Customer contact details (e.g. name, email), communication history, and engagement data.
Location: United States / European Union.
Website: https://www.hubspot.com
Search & Data Indexing / AI Processing (Supplementary)
Typesense
Purpose: Search indexing, similarity matching, and vector-based data retrieval.
Data processed: Candidate and/or application data indexed for search and matching purposes.
Location: (fill this based on your hosting setup — e.g. EU/UK if self-hosted there)
Website: https://typesense.org
Email Delivery
SendGrid (Twilio SendGrid)
Purpose: Transactional and service-related email delivery.
Data processed: Email addresses, email content, and delivery metadata.
Location: United States / European Union.
Website: https://sendgrid.com
SMS / Communications
Twilio
Purpose: SMS delivery and communication services.
Data processed: Phone numbers, message content, and delivery metadata.
Location: United States / European Union.
Website: https://www.twilio.com
Updates to this List
We may update this list from time to time as we add or change service providers that support the operation of our platform.
Where required by applicable data protection laws or contractual agreements with customers, we will notify customers of any material changes to subprocessors.
Contact
If you have questions about our subprocessors or data protection practices, please contact: