Subprocessors

Last updated 7 November 2026

These providers process personal data for us to run Talunly. Each is bound by a data processing agreement with obligations at least as protective as our Data Processing Addendum. We give customers at least 30 days’ notice before adding a new one, so they can object.

ProviderWhat they doDataLocation
Fly.io, Inc.Hosting: the application servers and both websitesAll customer and candidate data passes through; application logsUnited States (Chicago)
Neon, Inc.The product’s databaseAll customer and candidate dataUnited States (AWS us-east-2, Ohio)
Cloudflare, Inc.File storage for resumes and attachments (R2); checking that the demo and application forms are filled in by a person (Turnstile)Resumes and other uploaded files; IP address for the form checksUnited States
Firebase Authentication (Google LLC)Sign-in for customers’ team membersName, email, sign-in identifiersUnited States
Google Cloud KMS (Google LLC)Wrapping customers’ webhook signing secretsNo personal data: encryption keys onlyUnited States
Mailjet (Sinch)Sending emails: invites, confirmations, interview invitationsRecipient name and email; email contentUnited States
Anthropic, PBCAI resume screening, and reading a resume with AI when the hiring team asks, when a customer uses themResume text with name, email, phone and links removed; job title and requirementsUnited States
OpenAI, L.L.C.AI resume screening, when Anthropic is unavailableResume text with name, email, phone and links removed; job title and requirementsUnited States
hiAIreOptional AI work simulations, only for jobs where the customer turns them onCandidate name and email; simulation resultsUnited States
Grafana LabsPerformance traces from our own servers, sampled at one request in tenRecord identifiers inside a trace; never names, emails or resume textUnited States
Stripe, Inc.Billing and paymentsBilling contact and company details (never candidate data)United States

To be told about changes, email privacy@talunly.com.