A "subprocessor" is a third party that may process your data on SmartPRO's behalf. We engage them to deliver specific features; the data shared is limited to what the feature requires.
Core (engaged for standard operation)
| Subprocessor | Purpose | Data shared |
|---|---|---|
| Hosting / database (confirm provider & region) | Application hosting and data storage | All application data at rest |
| Resend | Transactional email (letters, reminders, notifications) | Recipient name & email, message content |
| Sentry | Error monitoring | Server error diagnostics (may include request context) |
| Cal.com | Demo & meeting booking | Booker name, email, meeting metadata |
Payments (engaged if billing is enabled)
| Subprocessor | Purpose | Data shared |
|---|---|---|
| Thawani (Oman) | Payment processing | Billing/transaction data |
| Stripe | Payment processing | Billing/transaction data |
Storage & documents
| Subprocessor | Purpose | Data shared |
|---|---|---|
| Forge / managed storage (confirm) | File storage (contracts, letters, CVs, images) | Uploaded documents |
| Google Docs API | HR letter generation (if enabled) | Letter content/merge fields |
Optional feature integrations (engaged only if you turn the feature on)
| Subprocessor | Feature | Data shared |
|---|---|---|
| GA4 / optional Umami | Web analytics | Usage/telemetry (no HR records) |
| LinkedIn, Meta/WhatsApp, TikTok, X (Twitter) | Social publishing & talent sourcing | Account tokens, content you publish |
| Google Search Console | SEO | Search-console data |
| Anthropic Claude | AI assistant / content generation (if enabled) | Prompt content you submit |
| Proxycurl | Talent sourcing (if enabled) | Public-profile lookups |
| Postiz | Social content management (if enabled) | Social content |
| Contract Scribe | Contract management (if enabled) | Contract/party data |
Before publishing as a contractual list: (1) confirm the hosting/storage providers and their processing regions, (2) remove any integration not offered to customers, (3) verify a DPA is in place with each active subprocessor, and (4) decide whether the optional/marketing integrations belong in a customer subprocessor list at all.