# Leapsome

Leapsome (leapsome.com): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/leapsome
- Documents last verified: 2026-09-30
- Transparency rating: 79/100 (how much it publishes, not how secure it is)
- Cite as: Leapsome, Third Party Index, https://thirdpartyindex.com/vendors/leapsome (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Trust center | https://trust.leapsome.com/ | 2026-09-30 | 2026-09-30 |
| Subprocessor list | https://www.leapsome.com/legal/subprocessors | 2026-09-30 | 2026-09-30 |
| Data processing addendum | https://www.leapsome.com/legal/dpa | 2026-09-30 | 2026-09-30 |
| Privacy policy | https://www.leapsome.com/legal/privacy | 2026-09-30 | 2026-09-30 |
| Terms | https://www.leapsome.com/legal/terms | 2026-09-30 | 2026-09-30 |

## Subprocessors (16)

As its own list states them.

| Subprocessor | Purpose | Location | Listed since |
|---|---|---|---|
| [Amazon Web Services EMEA Sàrl](https://thirdpartyindex.com/vendors/amazon-web-services.md) | Generative AI services & infrastructure provider for smart features; Primary infrastructure and data storage provider | EEA (Germany); Global (Processing is performed at the vendor data center ⁠that is closest to or best performing for the end user) | 2026-09-30 |
| [Appcues, Inc.](https://thirdpartyindex.com/vendors/appcues.md) | Product onboarding, guidance and feedback | US | 2026-09-30 |
| [Cloudflare, Ltd.](https://thirdpartyindex.com/vendors/cloudflare.md) | Generative AI services & infrastructure provider for smart features, remote model context protocol (MCP) server, content delivery network, security and abuse prevention | Global (Processing is performed at the vendor data center ⁠that is closest to or best performing for the end user) | 2026-09-30 |
| Cronofy B.V. | Calendar and scheduling connector for the ATS module; synchronisation of connected user calendars, availability lookup, and creation, amendment and cancellation of interview events and invites | EEA (Germany) | 2026-09-30 |
| [DataDog Inc.](https://thirdpartyindex.com/vendors/datadog.md) | Application, security and infrastructure monitoring / observability and logging | EEA (Germany) | 2026-09-30 |
| [Dropbox Inc.](https://thirdpartyindex.com/vendors/dropbox.md) | Digital signature provider | US | 2026-09-30 |
| [Google Cloud EMEA Ltd.](https://thirdpartyindex.com/vendors/google-cloud.md) | Generative AI services & infrastructure provider for smart features | Global (Processing is performed at the vendor data center ⁠that is closest to or best performing for the end user) | 2026-09-30 |
| Kombo Technologies GmbH | API integrations connector | EEA (Netherlands) | 2026-09-30 |
| [LangChain Inc.](https://thirdpartyindex.com/vendors/langchain.md) | Application monitoring / observability and prompt evaluation | EEA (Netherlands) | 2026-09-30 |
| [Merge API, Inc.](https://thirdpartyindex.com/vendors/merge-api.md) | API integrations connector | EEA (Sweden) | 2026-09-30 |
| [MongoDB, Inc.](https://thirdpartyindex.com/vendors/mongodb.md) | Primary data storage provider (DBaaS within AWS) | EEA (Germany) | 2026-09-30 |
| [Nylas, Inc.](https://thirdpartyindex.com/vendors/nylas.md) | Email integration connector for the Recruiting module; connection of customer user mailboxes via OAuth, retrieval and sending of candidate-related email, delivery of change notifications and, where enabled by the Controller, open and click tracking | EEA (Ireland) | 2026-09-30 |
| [OpenAI LP](https://thirdpartyindex.com/vendors/openai.md) | Generative AI services provider for smart features | US | 2026-09-30 |
| [turbopuffer Inc.](https://thirdpartyindex.com/vendors/turbopuffer.md) | Vector database for storing embeddings and metadata used in data search and retrieval | EEA (Germany) | 2026-09-30 |
| [Twilio, Inc.](https://thirdpartyindex.com/vendors/twilio.md) | Notification of users through selected channels (e.x. E-Mail, SMS), Multi-factor Authentication | EEA and US | 2026-09-30 |
| VONQ B.V. | Distribution of customer job postings to third-party job boards; receipt and relay of applications submitted via job boards and hosted apply flows (e.g. Direct Apply) into the Leapsome ATS | EEA (Netherlands) | 2026-09-30 |

Read from ([evidence](https://thirdpartyindex.com/evidence/23391)). CSV: https://thirdpartyindex.com/vendors/leapsome/subprocessors.csv

## Compliance

As its trust center lists them.

- Audited: SOC 2 Type II, ISO/IEC 27001 ([evidence](https://thirdpartyindex.com/evidence/23402))
- Claimed: GDPR, CCPA/CPRA ([evidence](https://thirdpartyindex.com/evidence/23402))

## Listed as a subprocessor by (0)

No tracked vendor lists it.

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api