Subprocessors
Last updated: June 21, 2026
To run RelayJob, we use a small number of trusted service providers ("subprocessors") that process personal data on our behalf, under contract. This page lists each one, what it does, the categories of data involved, and its primary region. It complements the Privacy Policy.
Draft, pending legal review. This list is maintained by our team; the signed data-processing agreements and the international-transfer mechanism for each provider are being finalised. Regions/mechanisms shown are indicative and subject to confirmation.
| Subprocessor | Purpose | Data categories | Primary region / transfer |
|---|---|---|---|
| Supabase | Database, authentication and file (CV) storage | Account, career profile & CV, applications, encrypted access tokens | EU-hosted project; US parent (confirm DPF/SCCs) |
| Vercel | Application hosting and content delivery | Request metadata, IP address | US / global edge (SCCs) |
| OpenAI | AI generation and CV parsing (via API) | Relevant profile excerpts + job-posting text sent to generate matches, CVs, cover letters and research | US (SCCs; no training on your data) |
| Browserbase | Secure browser sessions to assist submitting applications you approve | Application form content during an approved submission | US (SCCs) |
| Trigger.dev | Background job orchestration (job discovery, application assembly) | Job metadata and application-processing state | US / EU (confirm SCCs) |
| Paddle | Payments and subscription management (Merchant of Record) | Billing and payment data (card details handled by Paddle, not stored by us) | UK/EU + US (SCCs) |
| Resend | Transactional and digest email | Email address and email content | US (SCCs) |
| Cloudflare | Inbound email routing for optional outcome-forwarding (you forward recruiter mail to detect interviews) | Content of emails you choose to forward | US / global (confirm DPF/SCCs) |
| PostHog | Product analytics (consent-gated; off until you accept cookies) | Pseudonymous usage/event data | EU Cloud |
| Sentry | Error and performance monitoring | Error diagnostics with personal data scrubbed; no session replay | US (SCCs) |
We also share application content with the employers and applicant-tracking systemsyou explicitly apply to — but only the application you approve. When we add or change a subprocessor, we'll update this page and, for material changes, give notice in line with our Privacy Policy.