Sub-processors | HeadHonta

HeadHonta engages the third-party sub-processors below to provide the Service. We require — and are putting in place — data-processing agreements (DPAs) with each, and where personal data leaves the EEA/UK we use Standard Contractual Clauses as the transfer mechanism.

Note: Customers can request advance notice of new sub-processors by emailing privacy@headhonta.com.

Sub-processor	Purpose	Personal data processed	Location
OpenRouter	AI/LLM gateway for candidate matching, CV analysis, scoring, and embeddings	CV text and candidate profile data	United States
Resend	Transactional and recruitment email delivery	Recipient email address and message content	United States
Cloudflare R2	Object storage for uploaded CVs and documents	CV/document files	EU/US (region-configurable)
Railway	Cloud hosting, PostgreSQL database, and background workers	All platform data (at rest and in transit)	United States
Paystack	Subscription billing and payment processing	Billing contact and payment metadata (recruiter accounts; no candidate data)	Nigeria / South Africa
Slack	Internal notifications of new recruiter signups	Recruiter name and email only (no candidate data)	United States

Infrastructure note

Interview audio transcription runs on a HeadHonta-operated, self-hosted Whisper service (not a third-party AI vendor). Audio is transcribed in-infrastructure and the raw audio is not retained.

Lawful basis and international transfers

Where personal data is transferred outside the EEA or the UK, we use Standard Contractual Clauses (SCCs) approved by the European Commission as the transfer mechanism, together with the data-processing agreements we put in place with each sub-processor. Further detail on how we process personal data is available in our Privacy Policy and Data Processing Agreement.

Change notification

We will update this page when we add, remove, or replace a sub-processor. Customers who have asked to be notified will receive advance notice of new sub-processors so they have the opportunity to object before the new sub-processor begins processing personal data. To subscribe to these notifications, email privacy@headhonta.com.

Contact

Questions about our sub-processors or data-processing arrangements can be sent to privacy@headhonta.com.