Updated June 27, 2026
Every vendor that
touches your data.
Required by GDPR Article 28 and SOC 2. Enterprise customers receive 30 days' advance notice of any addition or replacement. Email coffee@screeq.com to subscribe.
14-day free trial · No credit card · Cancel anytime
| Vendor | Purpose | Data category | Region | |
|---|---|---|---|---|
| Amazon Web Services (AWS) | Primary cloud hosting and compute | All Customer Data at rest | EU (Ireland), US (N. Virginia), UAE (Dubai) | Trust page |
| Cloudflare | CDN, DDoS mitigation, edge runtime | Request metadata, cached static assets | Global edge network | Trust page |
| Google Cloud (Gemini API) | AI scoring, transcription, summarisation | Candidate answer text and audio (no training) | EU / US | Trust page |
| OpenAI | AI scoring and assessment grading (zero-retention) | Candidate answer text (no training) | US | Trust page |
| Resend | Transactional email delivery | Recipient email, message metadata | US / EU | Trust page |
| Stripe | Subscription billing and payment processing | Billing contact, payment method (tokenised) | US / EU | Trust page |
| Supabase | Managed Postgres, authentication, object storage | All Customer Data at rest | EU (Frankfurt), US, AP regions | Trust page |
| Twilio | SMS notifications and OTP delivery | Recipient phone number, message body | Global | Trust page |
This list is the canonical Annex III to our Data Processing Addendum. See /trust/readiness for the underlying framework controls.
Questions
Sub-processors — common questions
Can't find what you're looking for? Email us at .
Under GDPR Article 28(4) and the UAE PDPL, a sub-processor is a third party Screeq engages to process Customer Personal Data on its behalf — typically cloud hosting, transactional email, AI grading, or SMS delivery. Every sub-processor is bound by a written agreement that mirrors the obligations in our DPA.
Yes. Enterprise customers receive 30 days' advance notice via the email-subscribe list on this page and to their notice contact. Customers may object on reasonable data-protection grounds within that period.
Yes. Tenants can pin data residency to EU, US, UAE/GCC or APAC at the company level. Sub-processors that operate outside the selected region are listed transparently below; cross-border flows are covered by the EU SCCs and UK IDTA in the DPA.
Email coffee@screeq.com with 'Subscribe sub-processor changes' and the notice contact's name and email. We confirm receipt within 2 business days and add the address to the registry.
Screeq is built for startups, scale-ups, staffing teams, and growing companies that need modern recruiting, HR, and talent operations without legacy implementation cycles.
Yes. Screeq is designed for multi-team hiring and people operations, with tenant-scoped data, role-based access, and shared reporting across jobs, candidates, employees, and HR workflows.
Yes. Screeq uses AI for CV parsing, screening, interview transcription, scoring support, job-description drafting, and workflow assistance, while keeping final hiring decisions with humans.
Yes. Teams can begin with recruiting, ATS, and AI interviews, then add onboarding, performance, time off, compensation, documents, assets, org planning, and reports when they are ready.
Screeq replaces manual shortlisting, spreadsheet tracking, scheduling back-and-forth, fragmented notes, and disconnected handoffs with one workflow from application to hire and employee lifecycle.
Yes. Screeq supports browser-based candidate flows, multilingual experiences, async interviews, distributed review queues, and workflows that work across time zones.
Screeq provides public API and webhook foundations so teams can connect hiring and HR events to existing tools. Pre-built integrations continue to expand over time.
Screeq is AI-first, self-serve, mobile-friendly, and built around one candidate-to-employee record instead of separate legacy modules stitched together by implementation projects.