Jurídico
Sub-Processors
Last updated: October 19, 2026
Nesta página
A sub-processor is a third party engaged by Hireaan to process personal data on behalf of our customers. This page lists every active sub-processor, the purpose of the engagement, the location where data is processed, and the legal mechanism used for international transfers.
This list is incorporated by reference into our Privacy Policy and our Data Processing Addendum (DPA).
| Sub-Processor | Purpose | Location | Transfer Mechanism |
|---|---|---|---|
Cloudflare R2 Cloudflare, Inc. Privacy policy ↗ | Object storage for resumes, candidate files, video interview responses, and SAR export ZIPs | United States (global edge) | EU SCCs (2021/914) Module 2 + EU-US Data Privacy Framework |
OpenAI OpenAI, L.L.C. Privacy policy ↗ | AI candidate summaries, ranking, assessment scoring, resume parsing, Whisper audio transcription, and drafting WhatsApp message templates | United States | EU SCCs (2021/914) Module 2 + EU-US Data Privacy Framework |
Meta WhatsApp Business Platform Meta Platforms, Inc. Privacy policy ↗ | Sending and receiving WhatsApp messages, and managing message templates, for customers who connect their own WhatsApp Business number | United States (global infrastructure) | EU SCCs (2021/914) Module 2 + EU-US Data Privacy Framework |
Stripe Stripe Payments Europe Ltd. / Stripe, Inc. Privacy policy ↗ | Subscription billing, payment processing, invoice generation | Ireland / United States | EU SCCs (2021/914) Module 2 + EU-US Data Privacy Framework |
Zoom Zoom Video Communications, Inc. Privacy policy ↗ | Video interview meetings auto-created on candidate booking | United States | EU SCCs (2021/914) Module 2 + EU-US Data Privacy Framework |
PostHog PostHog, Inc. Privacy policy ↗ | Product analytics, feature usage tracking (consent-gated for EU visitors) | United States / European Union | EU SCCs (2021/914) Module 2 (US deployment); EU residents may be routed to EU instance |
Google Workspace Google LLC Privacy policy ↗ | Calendar sync, Google Meet link generation, OAuth identity for sign-in and Gmail send-as | United States (global infrastructure) | EU SCCs (2021/914) Module 2 + EU-US Data Privacy Framework |
Jina AI Reader Jina AI GmbH Privacy policy ↗ | Fallback web page fetching for the career/onboarding website scraper, when the target site blocks a direct fetch | European Union (Germany) | EU SCCs (2021/914) Module 2 |
Notification of changes
We will update this page whenever a sub-processor is added, removed, or replaced. Customers under an executed Data Processing Agreement may subscribe to changes by emailing lgpd@hireaan.com.br with the subject line "Subscribe to sub-processor changes." We commit to providing at least 30 days' advance notice of any new sub-processor that will process customer personal data, giving you time to object on reasonable grounds.
International data transfers
Most of our sub-processors are based in the United States. For transfers of personal data of EEA, UK, or Swiss data subjects, Hireaan relies on the European Commission's Standard Contractual Clauses (SCCs), Module 2 (controller-to-processor), as published in Commission Implementing Decision (EU) 2021/914. Where a sub-processor is also self-certified under the EU-US Data Privacy Framework, transfers to that sub-processor additionally rely on that adequacy mechanism.
Customer responsibilities
You — the customer using Hireaan to manage your hiring — act as the data controller in respect of candidate personal data uploaded to or generated within your Hireaan workspace. Hireaan acts as the data processor on your behalf. The sub-processors listed above are engaged by Hireaan as authorised onward processors under our DPA.
Object to a sub-processor
If you have a reasonable and good-faith objection to Hireaan engaging any sub-processor listed above, please email lgpd@hireaan.com.br detailing the basis of your objection. We will work in good faith to resolve the objection or, where unable, will permit you to terminate the affected service in line with the DPA.
Questions about this list? Contact us at lgpd@hireaan.com.br.