Last updated: July 15, 2026
To deliver the Everyjob service, LVDP (trading as "Everyjob") relies on a limited number of third-party providers ("sub-processors") that process personal data on our behalf. The current list is shown below.
When we add or replace a sub-processor, we notify all organization owners by e-mail at least 30 days in advance, so they can object on reasonable data-protection grounds.
Transfers outside the EEA are covered by Standard Contractual Clauses (SCC), the EU-US Data Privacy Framework (DPF), or an EU adequacy decision, with a data processing agreement in place with each provider.
| Sub-processor | Function | Data processed | Location |
|---|---|---|---|
| Supabase | Database hosting, authentication and file storage | All product and user data | EU (Ireland, eu-west-1) |
| Railway | Application hosting | All data processed by the application | EU + US (SCC) |
| OpenAI | AI processing: message generation, CV parsing and candidate-vacancy matching | Candidate profile/CV data and vacancy info (names and contact details redacted for matching) | US (SCC) |
| Unipile | LinkedIn and e-mail account integration (sourcing, messaging) | Candidate LinkedIn profile data, messages, connected account data | EU (France, hosted on Scaleway) |
| Lusha | Candidate e-mail enrichment (on explicit request) | Candidate name, company and LinkedIn URL for contact lookup | US + Israel (SCC / EU adequacy decision) |
| Stripe | Payment processing | Customer billing info, payment method, transaction data | EU (Ireland) + US (SCC) |
| Resend | Transactional and billing e-mail delivery | E-mail addresses, e-mail content | EU (Ireland) |
| Loops | Lifecycle and product e-mail to users | User name, e-mail address and product usage state (no candidate data) | US (EU-US DPF / SCC) |
| PostHog | Product analytics | Pseudonymous usage events (no candidate data, no message content) | EU (Frankfurt) |
| Crisp | Customer support chat | User name, e-mail address and support conversation content | EU (Netherlands) |
If you connect an external ATS system, the data required to synchronize candidate profiles is shared with that ATS provider only at your explicit request. For ATS providers located outside the EU, transfers are covered by Standard Contractual Clauses (SCC).
Questions about this list or our data processing? Contact privacy@everyjob.io. Our Data Processing Agreement (art. 28 GDPR), including this sub-processor list as an annex, is available for signature on request.