1. Current sub-processors
All candidate data is stored by Supabase in Sydney, Australia. The other providers receive only the data they need for their task.
| Sub-processor | Purpose | Personal data | Location | Transfer safeguard |
|---|---|---|---|---|
| Supabase Inc. | Database, sign-in, file storage and server functions. | All personal data held on the platform: candidate and client account data, assessment data, proctoring images, recordings and uploaded files. | Data stored in Sydney, Australia (AWS ap-southeast-2). Company in the USA. | EU Standard Contractual Clauses in the Supabase data processing agreement. |
| Vercel Inc. | Web hosting and the voice proxy functions used in voice tasks. | Requests to our web apps, including IP address and browser details, and voice task traffic passing through the proxy. | Global edge network. Company in the USA. | EU Standard Contractual Clauses and the EU-US Data Privacy Framework. |
| Anthropic PBC | AI scoring, AI interviewer and role-play. | Answers, transcripts and task results sent for scoring, and the live interview or role-play conversation. Candidate names are not sent for scoring; the live interviewer may use a candidate's first name. | USA | EU Standard Contractual Clauses in the Anthropic data processing agreement. No training on our data. API data kept up to 30 days for abuse monitoring. |
| OpenAI, L.L.C. | AI conversation, AI scoring, speech and transcription. | Answers, transcripts and task results sent for scoring, conversation text, and candidate voice audio for transcription. | USA | EU Standard Contractual Clauses in the OpenAI data processing agreement. No training on our data. API data kept up to 30 days for abuse monitoring. |
| Deepgram, Inc. | Speech to text and text to speech. | Candidate voice audio during voice tasks, and interviewer text turned into speech. | USA | EU Standard Contractual Clauses. Model-improvement opt-out set on every request. Data not kept after processing. |
| Cartesia AI, Inc. | AI interviewer voice (text to speech). | Interviewer text turned into speech, which may include a candidate's first name. | USA | EU Standard Contractual Clauses. |
| ElevenLabs, Inc. | Backup AI interviewer voice (text to speech). | Interviewer text turned into speech, which may include a candidate's first name. | USA | EU Standard Contractual Clauses. |
| Microsoft Corporation (Azure AI Speech) | Backup AI interviewer voice (text to speech). | Interviewer text turned into speech, which may include a candidate's first name. | India (Central India region) | EU Standard Contractual Clauses and the EU-US Data Privacy Framework. |
| Resend (Plus Five Five, Inc.) | Sending emails, such as assessment invitations and sign-in links. | Recipient name and email address, and the content of the email. | USA | EU Standard Contractual Clauses. |
| Google LLC (Google Workspace) | Our support mailbox, support@neurazor.com. | Messages sent to the mailbox and anything included in them. | USA and EU | EU Standard Contractual Clauses and the EU-US Data Privacy Framework. |
2. Other service providers
| Provider | Purpose | Location | Note |
|---|---|---|---|
| Razorpay Software Pvt. Ltd. | Client payments. | India | Client billing only. Receives no candidate data, so it is not a sub-processor for assessment data. |
Our website and platform fonts are hosted on our own servers. We use no analytics, advertising cookies or tracking pixels, so no such provider receives your data.
3. What we require of them
- Each sub-processor works under a written contract that gives personal data the same protection as our Data Processing Agreement with our clients.
- Each receives only the data it needs for its task.
- Our AI and speech providers may not use the data to train their models.
- Where data leaves the EU, the EEA, the UK or Switzerland, the transfer is covered by the safeguard shown in the table.
- We remain responsible to our clients for the work of our sub-processors.
4. Changes and objections
- We update this page at least 30 days before a new or replacement sub-processor starts processing personal data. The date at the top of the page shows the last change.
- Clients who want an email when this page changes can ask for one: write to support@neurazor.com with the subject "Sub-processor updates".
- A client can object to a new sub-processor on reasonable data protection grounds within those 30 days, as set out in section 7 of our Data Processing Agreement.
5. Contact
Questions about our sub-processors: support@neurazor.com, subject "Privacy request".
Sub-processorsVersion 2026-10-03Last updated 3 October 2026