Snapshot 13171
Normalized text
Scripts and page chrome removed; this is what change detection compares.
Skip to navigationSkip to main content Subprocessors Abnormal Security • Security European Union Processing Activity: Threat detection by scanning inbound emails for suspicious activity, phishing, or malware through content and metadata analysis via APIs. GDPR Transfer Mechanism: Adequacy Decision Abstract API • Document management USA Processing Activity: Identification of geolocation data to enhance location-based services and user experiences. GDPR Transfer Mechanism: Standard Contractual Clauses Affinda • Data analytics USA Processing Activity: User onboarding, engagement, and product experience optimisation through in-app messaging and tutorials. GDPR Transfer Mechanism: Standard Contractual Clauses Airtable • Collaboration Canada Processing Activity: Collaborative management of structured business data in a cloud database that we sync. GDPR Transfer Mechanism: Adequacy Decision Amazon Web Services • Cloud provider Australia, Ireland, Canada Processing Activity: Cloud service provider used for secure data storage, processing, and hosting infrastructure. GDPR Transfer Mechanism: Standard Contractual Clauses Anthropic • AI Services USA Processing Activity: AI-assisted drafting, analysis, summarisation, workflow support, and coding via the Claude models. Provides AI models in support of our AI/ML-powered features. Data is not used to train Anthropic's AI models under EH's enterprise agreement. GDPR Transfer Mechanism: Standard Contractual Clauses Appcues • Product and design USA Processing Activity: User onboarding, engagement, and product experience optimisation through in-app messaging and tutorials. GDPR Transfer Mechanism: Standard Contractual Clauses Atlassian • Collaboration Australia Processing Activity: Comprehensive issue tracking, agile project management, and team collaboration across development and operations teams. GDPR Transfer Mechanism: Standard Contractual Clauses Braze • Marketing USA Processing Activity: Multi-channel customer engagement services, including personalised messaging and campaign delivery. GDPR Transfer Mechanism: Standard Contractual Clauses Content Snare • Onboarding and Implementation Australia, USA Processing Activity: Secure collection and storage of customer documents and information during Employment Hero's managed implementation and onboarding, via a client portal where users upload files and complete structured requests. GDPR Transfer Mechanism: Standard Contractual Clauses 1-10 of 57 results Showresults per page All subprocessors Abnormal Security Processing Activity: Threat detection by scanning inbound emails for suspicious activity, phishing, or malware through content and metadata analysis via APIs. GDPR Transfer Mechanism: Adequacy Decision Security European Union https://abnormalsecurity.com/ Abstract API Processing Activity: Identification of geolocation data to enhance location-based services and user experiences. GDPR Transfer Mechanism: Standard Contractual Clauses Document management USA https://www.abstractapi.com Affinda Processing Activity: User onboarding, engagement, and product experience optimisation through in-app messaging and tutorials. GDPR Transfer Mechanism: Standard Contractual Clauses Data analytics USA https://www.affinda.com Airtable Processing Activity: Collaborative management of structured business data in a cloud database that we sync. GDPR Transfer Mechanism: Adequacy Decision Collaboration Canada https://airtable.com Amazon Web Services Processing Activity: Cloud service provider used for secure data storage, processing, and hosting infrastructure. GDPR Transfer Mechanism: Standard Contractual Clauses Cloud provider Australia, Ireland, Canada https://aws.amazon.com Anthropic Processing Activity: AI-assisted drafting, analysis, summarisation, workflow support, and coding via the Claude models. Provides AI models in support of our AI/ML-powered features. Data is not used to train Anthropic's AI models under EH's enterprise agreement. GDPR Transfer Mechanism: Standard Contractual Clauses AI Services USA https://www.anthropic.com Appcues Processing Activity: User onboarding, engagement, and product experience optimisation through in-app messaging and tutorials. GDPR Transfer Mechanism: Standard Contractual Clauses Product and design USA https://www.appcues.com Atlassian Processing Activity: Comprehensive issue tracking, agile project management, and team collaboration across development and operations teams. GDPR Transfer Mechanism: Standard Contractual Clauses Collaboration Australia https://www.atlassian.com Braze Processing Activity: Multi-channel customer engagement services, including personalised messaging and campaign delivery. GDPR Transfer Mechanism: Standard Contractual Clauses Marketing USA https://www.braze.com Content Snare Processing Activity: Secure collection and storage of customer documents and information during Employment Hero's managed implementation and onboarding, via a client portal where users upload files and complete structured requests. GDPR Transfer Mechanism: Standard Contractual Clauses Onboarding and Implementation Australia, USA https://contentsnare.com/ Cloudflare Processing Activity: Content delivery network and web security services providing DDoS protection, DNS resolution, traffic optimisation, and edge caching for EH's web-facing infrastructure. GDPR Transfer Mechanism: Standard Contractual Clauses Cloud Infrastructure USA https://www.cloudflare.com Datadog Processing Activity: Real-time cloud monitoring and application performance management for infrastructure and application diagnostics. GDPR Transfer Mechanism: Standard Contractual Clauses Cloud monitoring USA https://www.datadoghq.com dbt Cloud Processing Activity: Transformation and modelling of warehouse data for analytics GDPR Transfer Mechanism: Standard Contractual Clauses Data analytics Australia https://www.getdbt.com Delighted Processing Activity: Collection and analysis of customer feedback to measure Net Promoter Score (NPS) GDPR Transfer Mechanism: Standard Contractual Clauses Product and design USA https://delighted.com DocuSign Processing Activity: Secure e-signature collection and automated document lifecycle management for contracts. GDPR Transfer Mechanism: Standard Contractual Clauses Document management USA https://www.docusign.com ElevenLabs Processing Activity: AI-powered text-to-speech voice synthesis used to generate and deliver interviewer voices in AI Video Interview experiences. Processes text input and produces synthetic audio output; may also process any personal data contained in interview script content. GDPR Transfer Mechanism: Standard Contractual Clauses AI Voice / Text-to-Speech USA https://elevenlabs.io FiveTran Processing Activity: Data Extraction Services from internal source and third party systems GDPR Transfer Mechanism: Standard Contractual Clauses Data storage and processing Australia, Canada, USA https://www.fivetran.com FrankieOne Processing Activity: ID verification services for compliance with Know Your Customer (KYC) / Know Your Business (KYB) requirements. GDPR Transfer Mechanism: Standard Contractual Clauses Security Australia https://frankieone.com G2.com Processing Activity: Online review platform used to collect and manage customer reviews. We may use these platforms to send email invitations to customers to provide a review of our services. GDPR Transfer Mechanism: Standard Contractual Clauses Data analytics USA https://www.g2.com Google Processing Activity: Suite of services supporting EH's core business operations, including identity and authentication (Google SSO), email communications (Gmail), file storage and document collaboration (Google Drive, Google Docs/Sheets/Slides), web traffic analysis (Google Analytics), video conferencing (Google Meet), general workspace and productivity tooling, AI-assisted research and knowledge management (NotebookLM), and AI-assisted drafting, analysis and workflow support (Gemini). Data is not used to train Google's AI models under EH's enterprise agreement. GDPR Transfer Mechanism: Standard Contractual Clauses Productivity, infrastructure & AI services USA https://workspace.google.com Google Gemini Processing Activity: AI-assisted drafting, analysis, summarisation, and workflow support. Provides AI models in support of our AI/ML-powered features. Data is not used to train Google's AI models under EH's enterprise agreement. GDPR Transfer Mechanism: Standard Contractual Clauses AI Services USA https://gemini.google.com/ Gong Processing Activity: Revenue intelligence platform used to record, transcribe, and analyse sales calls, emails, and customer interactions to support pipeline management, forecasting, and sales coaching. GDPR Transfer Mechanism: Standard Contractual Clauses Sales Intelligence USA https://www.gong.io Hightouch Processing Activity: Automated syncing of business data from source systems into the data warehouse via Fivetran for analytics and reporting. Syncing data from the warehouse into business applications for activation and operational use. GDPR Transfer Mechanism: Standard Contractual Clauses Data analytics Australia https://hightouch.com Intercom Processing Activity: Take information/queries from customers, run it through Fin's AI Agent service, potentially also run a RAG against Zendesk's knowledge base, and then deflect or escalate the customer concerns. GDPR Transfer Mechanism: Standard Contractual Clauses Customer support USA https://www.intercom.com Intercede Solutions Processing Activity: Business process automation and integration platform, leveraging the Workato platform to streamline workflows. GDPR Transfer Mechanism: Standard Contractual Clauses Business process automation and integration platform (e.g., Workato) USA https://www.intercedesolutions.io/ Langchain Processing Activity: Logging and monitoring input/output data in Hero AI, SmartMatch and large language models (LLM) for optimising performance analytics. GDPR Transfer Mechanism: Standard Contractual Clauses Engineering USA https://www.langchain.com/langsmith Loggly Processing Activity: Real-time log aggregation and analysis for debugging and operational monitoring. GDPR Transfer Mechanism: Standard Contractual Clauses Cloud monitoring USA https://www.loggly.com/ Marketo Processing Activity: Lead nurturing, email marketing, and comprehensive automation of marketing activities. GDPR Transfer Mechanism: Standard Contractual Clauses Marketing USA Metabase Processing Activity: Querying and visualisation of company data for insights and reporting GDPR Transfer Mechanism: Standard Contractual Clauses Data analytics Australia, Canada https://www.metabase.com Microsoft Processing Activity: Cloud infrastructure and productivity services including data storage, compute, and collaboration tooling via Microsoft Azure and Microsoft 365. This also includes AI features like Copilot. Personal Data is not used to train Microsoft's AI models under our agreement. GDPR Transfer Mechanism: Standard Contractual Clauses Cloud Infrastructure USA https://www.microsoft.com Mixmax Processing Activity: Automation of email campaigns, scheduling, and tracking for customer engagement. GDPR Transfer Mechanism: Standard Contractual Clauses Sales USA https://www.mixmax.com Mixpanel Processing Activity: Advanced analytics for tracking user interactions and product performance in web and mobile applications. GDPR Transfer Mechanism: Standard Contractual Clauses Data analytics USA https://mixpanel.com Mux Processing Activity: Recording, processing, and storing candidate introduction videos for seamless job application evaluations. GDPR Transfer Mechanism: Standard Contractual Clauses Product and design USA https://www.mux.com Nooks Processing Activity: AI-powered sales dialling platform used to manage outbound calling workflows, automate call queues, and capture call activity data in support of sales development operations. Personal Data is not used to train Microsoft's AI models under our agreement. GDPR Transfer Mechanism: Standard Contractual Clauses Sales Communications USA https://nooks.works OpenAI Processing Activity: Integration of AI capabilities into product features, including natural language processing and automated content generation. GDPR Transfer Mechanism: Standard Contractual Clauses IT USA https://openai.com OptinMonster Processing Activity: Integration of AI capabilities into product features, including natural language processing and automated content generation. GDPR Transfer Mechanism: Standard Contractual Clauses Marketing USA https://optinmonster.com Outreach Processing Activity: Customer relationship management for email marketing, lead generation, and sales engagement. GDPR Transfer Mechanism: Standard Contractual Clauses Sales USA https://www.outreach.io Own Backup Processing Activity: Comprehensive backup and recovery solution for relationship management data within Salesforce and other platforms. GDPR Transfer Mechanism: Standard Contractual Clauses Data storage and processing Australia https://www.owndata.com/ Ozedi Processing Activity: SuperStream-compliant messaging and data transmission for superannuation contributions, including secure routing of employer contribution data and payment instructions to superannuation funds. GDPR Transfer Mechanism: Standard Contractual Clauses Superannuation / Payroll messaging Australia https://ozedi.com.au/ Reachdesk Processing Activity: Management and delivery of personalised corporate promotional campaigns. GDPR Transfer Mechanism: Standard Contractual Clauses Collaboration USA https://www.reachdesk.com/ Recall.ai Processing activity: Meeting bot and recording APl used to capture audio, video, transcripts. and metadata from video conferencing platforms, supporting Al-powered meeting notetaking and summarisation features. GDPR Transfer Mechanism: Standard Contractual Clauses USA recall.ai Relevance AI Processing Activity: Deployment of AI agents for business functions, data analysis and customer interactions GDPR Transfer Mechanism: Contractual Clauses Australia https://relevanceai.com/ Salesforce Processing Activity: Comprehensive customer relationship management (CRM) platform for managing sales, marketing, and customer service. GDPR Transfer Mechanism: Standard Contractual Clauses Sales Australia https://www.salesforce.com SendGrid Processing Activity: Email delivery service for transactional and marketing communications. GDPR Transfer Mechanism: Standard Contractual Clauses Engineering USA https://sendgrid.com Shaype Processing Activity: Provision of banking infrastructure, including account opening, payments processing, KYC/PEP/sanction checks, and debit card issuance. GDPR Transfer Mechanism: Standard Contractual Clauses Document management Australia https://www.shaype.com Sisense Processing Activity: Advanced business intelligence platform for data visualisation and analytics GDPR Transfer Mechanism: Standard Contractual Clauses Data analytics Australia, USA https://www.sisense.com Slack Processing Activity: Real-time messaging and file sharing for team communication and collaboration. GDPR Transfer Mechanism: Standard Contractual Clauses Collaboration USA https://slack.com Snowflake Processing Activity: Cloud-based SaaS data warehouse used for business intelligence, analytics, reporting, and AI/ML workloads. GDPR Transfer Mechanism: SCCs (Snowflake is a US-headquartered SaaS vendor) Analytics and reporting Australia, Canada https://www.snowflake.com/en/ Tableau Processing Activity: Visualisation and analysis of business data for reporting and decision-making. GDPR Transfer Mechanism: Standard Contractual Clauses Data analytics Australia https://www.tableau.com Trustpilot Processing Activity: Online review platform used to collect and manage customer reviews. We may use these platforms to send email invitations to customers to provide a review of our services. GDPR Transfer Mechanism: Standard Contractual Clauses Marketing USA https://www.trustpilot.com Twilio Processing Activity: Programmable SMS and communication services for customer interactions and notifications. GDPR Transfer Mechanism: Standard Contractual Clauses IT USA https://www.twilio.com Vitally Processing Activity: Customer success platform providing real-time insights and analytics for business intelligence. GDPR Transfer Mechanism: Standard Contractual Clauses Customer support USA https://www.vitally.io Weavr Processing Activity: Embedded finance platform offering payment solutions, virtual accounts, and banking-as-a-service functionality. GDPR Transfer Mechanism: N/A Document management United Kingdom https://www.weavr.io Zapier Processing Activity: Workflow automation for connecting and syncing web applications to streamline processes. GDPR Transfer Mechanism: Standard Contractual Clauses Collaboration USA https://zapier.com Zendesk Processing Activity: Helpdesk and support ticketing system for managing customer service inquiries. GDPR Transfer Mechanism: Standard Contractual Clauses Customer support USA https://www.zendesk.com/ Zepto Processing Activity: Real-time account-to-account payment processing, including direct debit, PayTo collections, NPP-based fund disbursements, and payment verification services for superannuation contributions and payroll payments. GDPR Transfer Mechanism: Standard Contractual Clauses Payment processing Australia https://zepto.com.au/ ZoomInfo Processing Activity: Business intelligence and B2B contact database for lead generation and marketing. GDPR Transfer Mechanism: Standard Contractual Clauses Other USA https://www.zoominfo.com