Sub-processors

Last updated: June 16, 2026

CalHire, Inc. ("CalHire") engages a small set of trusted third parties ("sub-processors") to help deliver the service. We require each to meet appropriate security and data-protection obligations, consistent with the GDPR, India's DPDP Act, and the UAE PDPL.

1. Categories of sub-processors

| Category | Purpose | Region handling | | --- | --- | --- | | Cloud infrastructure | Hosting, compute, storage, and databases | In-region residency available (EU / India / UAE) | | Payments | Subscription billing and invoicing | Razorpay (India), Paddle (international / UAE) | | Email delivery | Transactional and consented marketing email | Vendor-agnostic, swappable by configuration | | Analytics | Privacy-respecting, aggregate usage metrics | Consent-gated | | AI model providers | Skills tests, text interviews, scoring narratives | PII stripped before any model; configurable per region |

2. No personal data to AI models

By design, no AI sub-processor ever receives candidate personal identifying information. Anonymity is enforced at a hard architectural boundary before any model is called.

3. In-region processing

Where you require in-region data residency, we configure infrastructure and providers so that personal data is processed within the EU, India, or the UAE as applicable.

4. Changes and notice

We may update our sub-processors as the service evolves. Material changes are reflected by the "last updated" date above. Customers under an enterprise agreement may request advance notice of new sub-processors as provided in their data-processing terms.

5. Contact

Questions about our sub-processors or data processing? Email privacy@calhire.com.