Controller-facing list for AMISCON GLOBAL S.L. (HRBLADE, EU deployment). Last updated 19 August 2026. Publishable, no NDA required.
Customers are notified before a new sub-processor that handles candidate data is added. To be notified, write to info@hrblade.com.
| Sub-processor | Role | Data | Location | Transfer basis |
|---|---|---|---|---|
| Vultr (The Constant Company, LLC) | Application servers, database, object storage | All customer and candidate data, including CVs, recordings and attachments | Amsterdam, Netherlands | Data stays in the EU |
| Sub-processor | Role | Data | Location | Transfer basis |
|---|---|---|---|---|
| OpenAI | Language models for scoring, summarisation, embeddings and, where enabled, transcription and the voice agent | CV text, interview answer text and transcripts, candidate name, vacancy text | United States, unless an EU-resident endpoint is in force for the tenant | SCCs (Decision 2021/914) plus transfer impact assessment; EU-US Data Privacy Framework where the vendor is certified |
API inputs and outputs are excluded from model training by contract.
Speech to text runs on our own infrastructure in Amsterdam by default, so interview audio does not reach a third party. It only reaches OpenAI where a customer is on a plan configured for that, or for voice calls where the self-hosted engine is unavailable.
The following AI providers are supported by the software but are not permitted on the EU deployment and are blocked in code by the provider allowlist: Yandex, DeepSeek, Anthropic.
| Sub-processor | Role | Data | Location |
|---|---|---|---|
| Voximplant | Call origination and media for voice interviews and live rooms | Call audio, phone number | Confirm the region for the account in use |
| Twilio | Alternative telephony carrier | Call audio, phone number | United States |
Not engaged for customers who do not use voice interviews.
| Sub-processor | Role | Data | Location |
|---|---|---|---|
| Amazon Web Services (SES) | Transactional email to candidates and users | Name, email address, message content | Confirm the region for the account in use |
| Sub-processor | Role | Data | Location |
|---|---|---|---|
| Stripe | Subscription billing | Customer billing details. No candidate data. | United States and Ireland |
Where a customer uses AI sourcing, candidate discovery and contact enrichment may involve GitHub, StackOverflow, Apollo, Hunter and Snov. These process data about people who have not applied, so the customer should confirm its own legal basis and its Article 14 notification duty before enabling the module.
