Last updated: August 31, 2026. Questions about this list: [email protected] with subject “Subprocessor notice.”
Only providers verified from product configuration or a live marketing-site session are named below. Processing location is omitted where it has not been independently verified.
| Provider | Purpose | Data |
|---|---|---|
| Stripe, Inc. | Paid-plan checkout, customer and subscription billing (including test-mode checkout until live billing is enabled) | Account and billing identifiers; payment-card data is collected by Stripe, not stored as full card numbers in HireLatch |
| Cloudflare, Inc. | CDN/TLS for redsnaketechnology.com; Cloudflare Web Analytics beacon observed on the marketing homepage | IP address and request metadata for site visitors |
| OpenAI, LLC | AI reply generation and embeddings, as configured in HireLatch (OPENAI_* product config) |
Prompts, conversation content, and related Customer instructions |
Not listed as subprocessors
- Transactional email is sent by HireLatch using the From address [email protected] (application mailer). A separate email SaaS vendor is not named here because it is not verified.
- Application hosting and backups are operated for HireLatch on infrastructure we control. The data-center vendor and country are not published here until confirmed.
HireLatch does not use Customer conversations to train public or shared foundation models. See the AI Services Addendum.
DPA customers who object to a new named subprocessor should write to [email protected] within 14 days of notice. If we cannot reasonably accommodate the objection, either party may terminate the affected Services as described in the Terms.
This list is limited to verified providers. It may be updated when configuration or the marketing stack changes. It is not a substitute for advice from a licensed attorney.