SourceGeek engages the following sub-processors to provide the SourceGeek platform, as described in our Data Processing Agreement. We give workspace administrators at least 30 days' notice before adding or replacing a sub-processor by updating this page and notifying them; the Data Processing Agreement describes your right to object.
Systems you connect yourself — your ATS, e-mail, calendar, or messaging platform — are not sub-processors. They are your own service providers, which SourceGeek accesses solely on your instruction, using credentials you supply.
The SourceGeek platform at chat.sourcegeek.com runs on Cloudflare. Its primary database (accounts, workspaces, chats and settings) and its file storage (uploads and generated documents) are located in Western Europe. Conversation state and background jobs run in Cloudflare's network, generally in the data centre nearest to the user, and requests are served from the Cloudflare location nearest to you. Data stored by Cloudflare is encrypted at rest and all traffic is encrypted in transit with TLS.
| Sub-processor | Purpose | Personal data involved | Location | Transfer safeguard |
|---|---|---|---|---|
| Cloudflare, Inc. | Platform hosting: application servers, database, file storage, conversation state, background jobs, isolated code-execution containers, application logs and network security | All platform data, including workspace content, uploaded files and account data | Database and file storage in Western Europe (EU); other services in Cloudflare's global network | SCCs / DPF |
| OpenRouter, Inc. | AI gateway: routing of model requests to AI model providers, using EU in-region routing only | Chat content in transit to AI model providers | EU (in-region routing: requests are decrypted and processed only in the EU) | EU in-region processing |
| AI model providers (routed via OpenRouter) | Large language model inference under zero-data-retention agreements: prompts and outputs are not stored and not used for training | Chat content, including data retrieved on demand from connected systems | EU (only providers operating in the EU) | Zero-data-retention agreements; EU in-region processing |
| Coresignal, UAB | Candidate and company data for search and enrichment | Search queries; public professional profile data | EU (Lithuania) | Not applicable (EU processing) |
| Exa Labs, Inc. | Web search for research tasks | Search queries | United States | SCCs / DPF |
| Parallel Web Systems, Inc. | Web research and content extraction | Queries and URLs | United States | SCCs / DPF |
| RapidAPI (R Software, Inc.), as API marketplace proxy, and the data API vendors accessed through it | Retrieval of public professional profile data | Candidate identifiers in queries (such as profile URLs); returned public profile data | United States | SCCs / DPF |
| Resend (Plus Five Five, Inc.) | Transactional e-mail: account, onboarding and notification e-mails and support requests | E-mail addresses, names and e-mail content | United States | SCCs / DPF |
| Amplitude, Inc. | Product analytics to improve the application | Usage events and identifiers | EU data residency (Amplitude EU) | EU data residency; SCCs / DPF |
| Functional Software, Inc. (Sentry) | Error monitoring and application logs | Technical error data and logs; user identifiers | EU data residency (Germany) | EU data residency; SCCs / DPF |
| Stripe Payments Europe, Ltd. | Payment processing and billing | Billing contact and payment data | EU (Ireland) / United States | SCCs / DPF (Stripe acts partly as an independent controller) |
Questions about this list can be sent to support@sourcegeek.com.
Easy plug & play, no technical knowledge needed. Have your assistant ready in a matter of minutes.