SourceGeek engages the following sub-processors to provide the SourceGeek platform, as described in our Data Processing Agreement. We give workspace administrators at least 30 days' notice before adding or replacing a sub-processor by updating this page and notifying them; the Data Processing Agreement describes your right to object.
Systems you connect yourself — your ATS, e-mail, calendar, or messaging platform — are not sub-processors. They are your own service providers, which SourceGeek accesses solely on your instruction, using credentials you supply.
| Sub-processor | Purpose | Personal data involved | Location | Transfer safeguard |
|---|---|---|---|---|
| Vercel Inc. | Hosting, content delivery and AI Gateway request routing | All platform data in transit | United States | EU–U.S. Data Privacy Framework / SCCs |
| AI model providers (routed via Vercel AI Gateway) | Large language model inference under zero-data-retention agreements: prompts and outputs are not stored and not used for training | Chat content, including data retrieved on demand from connected systems | United States / EU (per routed provider) | Zero-data-retention agreements; SCCs / DPF via Vercel |
| Convex, Inc. | Primary application database (chats, documents, workspace data) | Workspace content and account identifiers | United States | SCCs / DPF |
| Coresignal, UAB | Candidate and company data for search and enrichment | Search queries; public professional profile data | EU (Lithuania) | Not applicable (EU processing) |
| Exa Labs, Inc. | Web search for research tasks | Search queries | United States | SCCs / DPF |
| Parallel Web Systems, Inc. | Web research and content extraction | Queries and URLs | United States | SCCs / DPF |
| RapidAPI (R Software, Inc.), as API marketplace proxy, and the data API vendors accessed through it | Retrieval of public professional profile data | Candidate identifiers in queries (such as profile URLs); returned public profile data | United States | SCCs / DPF |
| Amplitude, Inc. | Product analytics and session replay to improve the application | Usage events and identifiers; session recordings of the application interface, which can include workspace content shown on screen | EU data residency (Amplitude EU) | EU data residency; SCCs / DPF |
| Upstash, Inc. | Rate limiting and caching of search results | Technical identifiers; cached profile lookup results (retained up to 30 days) | United States | SCCs / DPF |
| Functional Software, Inc. (Sentry) | Error and performance monitoring | Technical logs and user identifiers | United States | SCCs / DPF |
| Stripe Payments Europe, Ltd. | Payment processing and billing | Billing contact and payment data | EU (Ireland) / United States | SCCs / DPF (Stripe acts partly as an independent controller) |
Questions about this list can be sent to support@sourcegeek.com.
Easy plug & play, no technical knowledge needed. Have your assistant ready in a matter of minutes.