← HutchHR

Last updated: [EFFECTIVE DATE]

Subprocessors

Verified third-party providers used to support the Service, pending legal confirmation.

This draft is provided for legal review and is not legal advice. Replace bracketed text and confirm the document for the jurisdictions and service configuration that apply before publication.

Current verified providers

The following providers are evidenced by the current codebase. Legal and security teams must confirm this list, contractual terms, processing locations, and whether each provider processes personal data before publication.

  • Supabase — database and private object storage; potentially processes workforce records, documents, and attachments; processing location: [CONFIRM]; privacy terms: [LINK PLACEHOLDER].
  • Resend — transactional email delivery; potentially processes recipient names, email addresses, and message content; processing location: [CONFIRM]; privacy terms: [LINK PLACEHOLDER].
  • Microsoft Clarity — production website/product analytics when enabled; potentially processes device, usage, and interaction data; processing location: [CONFIRM]; privacy terms: [LINK PLACEHOLDER].

Changes

We may update this list as services change. The final notice and objection process is [SUBPROCESSOR CHANGE PROCESS PLACEHOLDER]. No other vendor, hosting provider, payment provider, or integration is listed here unless verified.

Questions about these draft documents? Contact [CONTACT EMAIL].