# HrFlow

HrFlow (hrflow.ai): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/hrflow
- Documents last verified: 2026-10-04
- Transparency rating: 59/100 (how much it publishes, not how secure it is): Subprocessor list 30/30; Processing locations 8/8; Purposes 0/7 (partial); Data processing addendum 0/12 (not found); Trust center 8/8; Privacy policy 0/6 (not found); security.txt 0/6 (not found); Security page 0/5 (not found); Status page 5/5; Vulnerability disclosure 0/5 (not found); Pages still reachable 8/8
- Supply chain: relies on 19 tracked vendors directly, 155 within two hops, 423 within three; 1 tracked vendors rely on it directly, 1 within two hops, 1 within three
- Cite as: HrFlow, Third Party Index, https://thirdpartyindex.com/vendors/hrflow (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Trust center | https://trust.hrflow.ai/ | 2026-10-04 | 2026-10-04 |
| Subprocessor list | https://trust.hrflow.ai/?itemUid=e3fae2ca-94a9-416b-b577-5c90e382df57 | 2026-10-04 | 2026-10-04 |
| Status page | https://status.hrflow.ai/ | 2026-10-04 | 2026-10-04 |

## Subprocessors (20)

As its own list states them.

| Subprocessor | Purpose | Location | Listed since |
|---|---|---|---|
| [Amazon Web Services](https://thirdpartyindex.com/vendors/amazon-web-services.md) | — | Ireland | 2026-10-04 |
| [Calendly](https://thirdpartyindex.com/vendors/calendly-com.md) | — | USA | 2026-10-04 |
| [Datadog](https://thirdpartyindex.com/vendors/datadog.md) | — | Europe | 2026-10-04 |
| [GitHub](https://thirdpartyindex.com/vendors/github.md) | — | USA | 2026-10-04 |
| [Google](https://thirdpartyindex.com/vendors/google-cloud.md) | — | Europe | 2026-10-04 |
| [HubSpot](https://thirdpartyindex.com/vendors/hubspot.md) | — | USA | 2026-10-04 |
| [Intercom](https://thirdpartyindex.com/vendors/intercom.md) | — | USA | 2026-10-04 |
| [Mixpanel](https://thirdpartyindex.com/vendors/mixpanel.md) | — | USA | 2026-10-04 |
| [monday.com](https://thirdpartyindex.com/vendors/monday-com.md) | — | USA | 2026-10-04 |
| Notion | — | USA | 2026-10-04 |
| [PandaDoc](https://thirdpartyindex.com/vendors/pandadoc.md) | — | Europe | 2026-10-04 |
| [ReadMe](https://thirdpartyindex.com/vendors/readme.md) | — | USA | 2026-10-04 |
| [Segment](https://thirdpartyindex.com/vendors/segment.md) | — | USA | 2026-10-04 |
| [SendGrid](https://thirdpartyindex.com/vendors/sendgrid.md) | — | USA | 2026-10-04 |
| [Sentry](https://thirdpartyindex.com/vendors/sentry.md) | — | Europe | 2026-10-04 |
| [Slack](https://thirdpartyindex.com/vendors/slack.md) | — | USA | 2026-10-04 |
| [Stripe](https://thirdpartyindex.com/vendors/stripe.md) | — | USA | 2026-10-04 |
| [Twilio](https://thirdpartyindex.com/vendors/twilio.md) | — | USA | 2026-10-04 |
| [Zapier](https://thirdpartyindex.com/vendors/zapier.md) | — | USA | 2026-10-04 |
| [ZoomInfo](https://thirdpartyindex.com/vendors/zoominfo.md) | — | USA | 2026-10-04 |

Read from ([evidence](https://thirdpartyindex.com/evidence/41242)). CSV: https://thirdpartyindex.com/vendors/hrflow/subprocessors.csv

## Compliance

As its trust center lists them.

- Audited: SOC 2, SOC 3, ISO/IEC 27001 ([evidence](https://thirdpartyindex.com/evidence/41234))
- Claimed: GDPR ([evidence](https://thirdpartyindex.com/evidence/41234))

## Web Technologies

HrFlow's homepage made 143 requests to 5 domains, and 3 services controlled by another company. Loaded on 2026-10-04 by a browser that accepted nothing; other visits may load more or less. What a page loads is not a list of who receives customer data.

### Third parties (3)

- Wistia: 71 requests to wistia.com, wistia.net; Wistia
- Google Cloud: 1 request to googletagmanager.com; Google Analytics, Google Tag Manager (its subprocessor list names it too)
- Sentry: 1 request to sentry-cdn.com; Sentry 9.6.1 (its subprocessor list names it too)

### First party (1)

- HrFlow: 70 requests to hrflow.ai; Amazon CloudFront, Amazon Web Services, Canny, Framer Motion, HTTP/3, Lucide, Next.js 16.2.6, Next.js App Router, Open Graph, Priority Hints, Radix UI, React, Turbopack, Webpack

## Subprocessor of (1)

Tracked vendors whose own subprocessor lists name it, and what they say they use it for.

- [BoondManager](https://thirdpartyindex.com/vendors/boondmanager.md): Automatic CV analysis and transcription

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api