# Kombo

Kombo (kombo.dev): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/kombo-dev
- Documents last verified: 2026-10-02
- Transparency rating: 82/100 (how much it publishes, not how secure it is): Subprocessor list 30/30; Processing locations 8/8; Purposes 0/7 (partial); Data processing addendum 12/12; Trust center 8/8; Privacy policy 6/6; security.txt 0/6 (not found); Security page 5/5; Status page 5/5; Vulnerability disclosure 0/5 (not found); Pages still reachable 8/8
- Supply chain: relies on 1 tracked vendors directly, 15 within two hops, 36 within three; 7 tracked vendors rely on it directly, 9 within two hops, 16 within three
- Cite as: Kombo, Third Party Index, https://thirdpartyindex.com/vendors/kombo-dev (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Trust center | https://security.kombo.dev/ | 2026-10-02 | 2026-10-02 |
| Subprocessor list | https://security.kombo.dev/?itemUid=e3fae2ca-94a9-416b-b577-5c90e382df57 | 2026-10-02 | 2026-10-02 |
| Data processing addendum | https://www.kombo.dev/legal/data-processing-agreement-2026-09-17.pdf | 2026-10-02 | 2026-10-02 |
| Privacy policy | https://www.kombo.dev/legal/privacy-policy-2025-10-02.pdf | 2026-10-02 | 2026-10-02 |
| Terms | https://www.kombo.dev/legal/terms-of-use-2025-01-16.pdf | 2026-10-02 | 2026-10-02 |
| Security page | https://www.kombo.dev/security | 2026-10-02 | 2026-10-02 |
| Status page | https://status.kombo.dev/ | 2026-10-02 | 2026-10-02 |

## Subprocessors (1)

As its own list states them.

| Subprocessor | Purpose | Location | Listed since |
|---|---|---|---|
| [Google Cloud](https://thirdpartyindex.com/vendors/google-cloud.md) | — | EU; US | 2026-10-02 |

Read from ([evidence](https://thirdpartyindex.com/evidence/34833)). CSV: https://thirdpartyindex.com/vendors/kombo-dev/subprocessors.csv

## Compliance

As its trust center lists them.

- Audited: SOC 2 Type II, ISO/IEC 27001 ([evidence](https://thirdpartyindex.com/evidence/34839))
- Claimed: HIPAA, GDPR ([evidence](https://thirdpartyindex.com/evidence/34839))

## Subprocessor of (7)

Tracked vendors whose own subprocessor lists name it, and what they say they use it for.

- [HirePort](https://thirdpartyindex.com/vendors/hireport.md): Provides unified API integrations for HR and applicant tracking systems, enabling data synchronization with various HR platforms.
- [HireVue](https://thirdpartyindex.com/vendors/hirevue.md): API Integration management tool.
- [ModernLoop](https://thirdpartyindex.com/vendors/modernloop.md): Unified ATS integration API. Applicable to only some ATS integrations.
- [Pin](https://thirdpartyindex.com/vendors/pin.md): Provides universal ATS integrations
- [Reelist](https://thirdpartyindex.com/vendors/reelist.md)
- [Spark Hire](https://thirdpartyindex.com/vendors/spark-hire.md)
- [Tellent Recruitee](https://thirdpartyindex.com/vendors/tellent-recruitee.md): Unified API Platform

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api