What is a sub-processor?
A sub-processor is a third-party company that processes personal data on Trueyy's behalf to help us provide the service. When you use Trueyy, some data is shared with these providers strictly for the functions described below.
How we vet them
Before engaging any sub-processor, we assess its security and data-protection practices and put a written contract in place requiring it to process personal data only to provide services to Trueyy, in line with applicable data-protection law. Each provider receives only the data it needs for its function.
List of sub-processors
| Sub-processor | Data handled | Purpose of processing | Region |
|---|---|---|---|
| Deepgram | Interview audio | Speech-to-text transcription | United States |
| OpenAI | Transcripts, app & window metadata, screenshots | AI analysis of interview activity and screen context | United States |
| Cloudflare R2 | Screenshots, audio, avatars | Encrypted object storage | Asia |
| Razorpay | Billing contact, payment metadata | Payment processing | India |
| Resend | Name, email | Transactional email | United States |
| Zoom | Meeting & participant metadata | Video meeting hosting | United States |
| Account identity | Sign-in (OAuth) | United States | |
| Cloud database & cache | All service data at rest | Primary data storage & queue | Asia |
International transfers
Primary storage (database and files) is hosted in Asia; some analysis providers operate in the United States. For candidates in the EEA or UK, transfers outside their region are covered by Standard Contractual Clauses, supported by encryption in transit and at rest and least-privilege access.
Updates to this page
We keep this list current. Before adding or replacing a sub-processor, we give customers advance notice. Under our Data Processing Agreement, a customer may reasonably object in writing within 30 days of an update on legitimate data-protection grounds.
A full Data Processing Agreement is available to customers on request.
Questions about how we handle data?
We're happy to walk your security and legal stakeholders through our sub-processors, transfers, and our DPA.