Leapsome
Not listed by any tracked vendor.
Subprocessors
16 third parties. CSVof Leapsome's subprocessors · Atom
| Name | Purpose | Location | Listed since |
|---|---|---|---|
| Amazon Web Services EMEA Sàrl | Generative AI services & infrastructure provider for smart features; Primary infrastructure and data storage provider | EEA (Germany); Global (Processing is performed at the vendor data center that is closest to or best performing for the end user) (EU-U.S. Data Privacy Framework; Standard Contractual Clauses, EU Data Residency; EU-U.S. Data Privacy Framework; Standard Contractual Clauses, Transfer risk assessment) | |
| Appcues, Inc. | Product onboarding, guidance and feedback | US (EU-U.S. Data Privacy Framework; Standard Contractual Clauses, Transfer risk assessment) | |
| Cloudflare, Ltd. | Generative AI services & infrastructure provider for smart features, remote model context protocol (MCP) server, content delivery network, security and abuse prevention | Global (Processing is performed at the vendor data center that is closest to or best performing for the end user) (EU-U.S. Data Privacy Framework; Standard Contractual Clauses) | |
| Cronofy B.V. | Calendar and scheduling connector for the ATS module; synchronisation of connected user calendars, availability lookup, and creation, amendment and cancellation of interview events and invites | EEA (Germany) (EU Data Residency; UK adequacy decision (Commission Implementing Decision of 19 December 2025) for support access by Cronofy Ltd.) | |
| DataDog Inc. | Application, security and infrastructure monitoring / observability and logging | EEA (Germany) (EU-U.S. Data Privacy Framework; Standard Contractual Clauses) | |
| Dropbox Inc. | Digital signature provider | US (EU-U.S. Data Privacy Framework) | |
| Google Cloud EMEA Ltd. | Generative AI services & infrastructure provider for smart features | Global (Processing is performed at the vendor data center that is closest to or best performing for the end user) (EU-U.S. Data Privacy Framework; Standard Contractual Clauses) | |
| Kombo Technologies GmbH | API integrations connector | EEA (Netherlands) (Standard Contractual Clauses, EU Data Residency) | |
| LangChain Inc. | Application monitoring / observability and prompt evaluation | EEA (Netherlands) (Standard Contractual Clauses; EU Data Residency) | |
| Merge API, Inc. | API integrations connector | EEA (Sweden) (EU-U.S. Data Privacy Framework; Standard Contractual Clauses, EU Data Residency) | |
| MongoDB, Inc. | Primary data storage provider (DBaaS within AWS) | EEA (Germany) (EU-U.S. Data Privacy Framework; Standard Contractual Clauses, EU Data Residency, Transfer risk assessment) | |
| Nylas, Inc. | Email integration connector for the Recruiting module; connection of customer user mailboxes via OAuth, retrieval and sending of candidate-related email, delivery of change notifications and, where enabled by the Controller, open and click tracking | EEA (Ireland) (EU-U.S. Data Privacy Framework; Standard Contractual Clauses, EU Data Residency, Transfer risk assessment) | |
| OpenAI LP AI | Generative AI services provider for smart features | US (Standard Contractual Clauses; Transfer risk assessment) | |
| turbopuffer Inc. | Vector database for storing embeddings and metadata used in data search and retrieval | EEA (Germany) (Standard Contractual Clauses, EU Data Residency) | |
| Twilio, Inc. | Notification of users through selected channels (e.x. E-Mail, SMS), Multi-factor Authentication | EEA and US (EU-U.S. Data Privacy Framework; Standard Contractual Clauses, Transfer risk assessment) | |
| VONQ B.V. | Distribution of customer job postings to third-party job boards; receipt and relay of applications submitted via job boards and hosted apply flows (e.g. Direct Apply) into the Leapsome ATS | EEA (Netherlands) (EU Data Residency) |
Compliance
- Certified
- Says it complies with
Certifications as Leapsome's trust center lists them; reports are usually shared on request (evidence)
Changes
None since tracking began.