Subprocessors
The following third-party services process data on behalf of consuliq. This list is updated whenever a subprocessor is added or removed. Last updated: 13 March 2026.
| Service | Purpose | Data Processed | Location | Safeguards | Transfer Mechanism | DPA |
|---|---|---|---|---|---|---|
| Anthropic | AI processing — career analysis, toolkit outputs, chat responses | Career assessment answers, CV content, chat messages | United States | SOC 2 Type II, data not used for model training, zero data retention API | SCCs (Module 2) + UK IDTA Addendum | Signed |
| OpenAI | AI processing — supplementary analysis (where Anthropic is unavailable) | Career assessment answers, CV content | United States | SOC 2 Type II, API data not used for training, zero data retention | SCCs (Module 2) + UK IDTA Addendum | Signed |
| Supabase | Database hosting, authentication | Account data, career profiles, assessment results | EU (Frankfurt) / United States | SOC 2 Type II, encrypted at rest (AES-256), row-level security | EU hosting preferred; SCCs for US fallback | Signed |
| Vercel | Application hosting, serverless functions, file storage | All request data in transit, CV files (Blob storage) | EU / United States | SOC 2 Type II, TLS 1.2+, edge network with regional routing | SCCs (Module 2) + UK IDTA Addendum | Signed |
| Stripe | Payment processing, subscription management | Name, email, payment method, billing address | United States (with EU entity) | PCI DSS Level 1, SOC 2, encrypted cardholder data | SCCs + EU entity processing | Signed |
| Loops.so | Transactional email (brief delivery, account notifications) | Email address, name | United States | TLS in transit, GDPR DPA, email engagement data only | SCCs (Module 2) + UK IDTA Addendum | Signed |
| Plausible Analytics | Privacy-friendly web analytics | No personal data — aggregated page views only | EU (Germany) | No cookies, no personal data, GDPR compliant by design | N/A — EU only, no personal data | Not required |
| RapidAPI (JSearch, Glassdoor) | Job search aggregation, company insights | Search queries (job title, location) — no personal identifiers | United States | Queries contain no PII, TLS in transit | SCCs; no personal data transferred | Platform DPA |
| Adzuna | Job search — UK, EU, and global job listings | Search queries (job title, location) — no personal identifiers | United Kingdom | UK GDPR compliant, queries contain no PII | N/A — UK based, no personal data | Not required |
See also: Privacy Policy · Data Retention Policy · Terms of Service