Subprocessors
Last updated: October 30, 2026
1. Overview
CoreHire uses the third-party subprocessors listed below to deliver the platform. Each subprocessor is bound by written data protection obligations. This list forms part of our Data Processing Addendum at https://corehire.app/dpa. We give customers at least 30 days' notice before adding or replacing a subprocessor that processes candidate personal data.
2. Current Subprocessors
The following third-party services process personal data on behalf of CoreHire:
| Subprocessor | Purpose | Data processed | Location |
|---|---|---|---|
| Supabase | Database, authentication, file storage, and serverless functions | Account data, candidate records, assessment responses and scores, audit logs | United States |
| Stripe | Payment processing and subscription billing | Billing contact details, payment method tokens, transaction records | United States |
| Resend | Transactional and branded email delivery | Recipient names and email addresses, email content, delivery events | United States |
| OpenAI | AI-assisted features such as question generation, compliance scanning, and communication optimization | Template and prompt content submitted to AI features | United States |
| GoHighLevel (LeadConnector) | Website lead forms and live chat widget | Names, email addresses, and form or chat submissions from website visitors | United States |
| Rocket (rocket.new) | Website and application hosting and deployment | Site traffic and application data in transit | United States |
3. Changes to This List
We will update this page and give customers at least 30 days' notice of changes to subprocessors that process candidate personal data. Customers may object on reasonable data protection grounds as described in the Data Processing Addendum.
4. Contact Us
Questions about our subprocessors can be sent to hello@corehire.app.