Trust
Sub-processors
Last updated: April 9, 2026
Nexu HR uses the following third-party services to deliver its platform. Each processor operates under a written data processing agreement and is bound by confidentiality and security obligations no less protective than those Nexu HR commits to its customers.
We will notify customers of any new sub-processor via email and the in-app changelog at least 30 days before activation, giving you the opportunity to object before the change takes effect.
| Processor | Location | Purpose | Data |
|---|---|---|---|
| Supabase | United States (AWS us-east-1) | Database, authentication, file storage, real-time subscriptions | All customer data: companies, users, candidates, vacancies, interviews, documents, settings, and audit logs |
| Vercel | Global edge network (primary: United States) | Web hosting, CDN, serverless functions and cookieless web analytics | IP address (request-time only), URL paths visited, device type. No cookies, no fingerprinting, no cross-site tracking |
| Stripe | United States, EU and UK | Payment processing for paid subscriptions and seat-based billing | Billing email, billing address, payment method tokens, subscription history. Card numbers are tokenized by Stripe and never reach our servers |
| Anthropic | United States | AI processing for CV analysis, candidate scoring and interview question generation | Vacancy descriptions and candidate CV content sent to the Claude API at request time. Anthropic does not train models on Nexu HR data |
| Resend | United States (AWS SES underlying delivery) | Transactional email delivery (invitations, password reset, interview confirmations, notifications) | Recipient email address, sender, subject and email body content |
| Cloudflare | Global edge network | Bot protection on signup and login (Cloudflare Turnstile), DDoS mitigation and DNS | IP address, browser fingerprint at challenge time, User-Agent. No persistent identifiers, no profile building |
| United States and global | Sign-in with Google (OAuth), Google Calendar integration, Google Workspace for company email | When you connect your Google account: name, email, profile picture, Google Calendar free/busy and interview events created by Nexu HR. See our Privacy Policy section 5 for full scope details |
Questions about sub-processors or data residency? Email privacy@nexuhr.com.