ApplyBriefSub-processors
Sub-processors
Last updated: June 15, 2026
When ApplyBrief processes personal information on behalf of an employer or recruiting customer, we use the third-party sub-processors below to host, secure, deliver, and support the service.
1. Overview
For candidate and application data that an employer customer controls, ApplyBrief acts as a processor and engages the sub-processors listed here to provide the service. Each sub-processor is bound by data-protection terms requiring it to protect personal information consistent with our Data Processing Addendum and our Privacy Policy.
2. Current Sub-processors
| Sub-processor | Purpose | Data categories | Primary region |
|---|---|---|---|
| Google Cloud Platform (Google LLC) | Application hosting, primary database (AlloyDB), object storage, analytics warehouse (BigQuery), async processing (Pub/Sub, Cloud Tasks, Cloud Run), and encrypted secret storage. | All service data: accounts, jobs, candidate and application records (PII encrypted at rest), logs, and sanitized analytics events. | United States (us-central1) |
| Paddle (Paddle.com Market Ltd) | Merchant of Record for paid plans: checkout, billing, subscription and credit top-up management, tax/VAT, invoicing, and payment fraud prevention. | Buyer name, email, billing address, payment-method metadata, and transaction records. | United Kingdom / EU / global |
| SMTP2GO | Transactional email delivery (magic-link sign-in, invitations, notifications). | Recipient email address, name, and message content. | United States / international |
| Anthropic | Generative AI used to draft and improve job pages and related content. | Prompt content such as job descriptions and account-provided material. | United States |
| OpenAI | Generative AI and image generation for job pages and related content. | Prompt content and image-generation inputs. | United States |
| Google Generative AI (Gemini) | Generative AI used for content generation and as a fallback provider. | Prompt content. | United States |
| Google OAuth (Google LLC) | Optional federated sign-in for account users. | Email address, name, and verified-status from the Google ID token. | United States / global |
| Google Fonts (Google LLC) | Typography on published job pages. (We are moving to self-hosted fonts to remove this transfer.) | Page visitor IP address and font requests. | Global |
| Botson CDN (img.botson.com) | Image proxy and availability verification for generated media. | Generated image URLs. | Global (CDN) |
We may also use optional fallback AI providers (such as xAI or DeepSeek) only when configured; these are not enabled by default. We do not use a third-party SMS or analytics-tracking provider at this time.
3. Where Data Is Hosted
ApplyBrief is hosted in the United States (Google Cloud, us-central1). AdWorks LTD, our operating entity, is established in Israel, which holds a European Commission adequacy decision. Where personal information is transferred from the EU, UK, or other regions to the United States or to our AI providers, we rely on appropriate safeguards such as Standard Contractual Clauses. See our Privacy Policy and DPA for details.
4. Changes And Notice
We may add or replace sub-processors as the service evolves. Where we act as a processor for a customer, we will provide at least 30 days' notice before adding a new sub-processor that processes that customer's candidate data, so the customer has an opportunity to object on reasonable data-protection grounds. To receive change notices, contact privacy@applybrief.com.