Subprocessors
Last updated 10 October 2026
Skillscanner uses these subprocessors to deliver the service. For candidate data, Skillscanner is the customer's processor, and the providers below are sub-processors.
Microsoft Azure (Blob Storage)
- Purpose
- Storage of voice recordings, CV files and interview page images
- Data
- Recordings, CV (PDF), logo and background images
- Region
- EU – West Europe (Netherlands)
- Transfer basis
- Within the EU/EEA – no transfer
Microsoft Azure OpenAI
- Purpose
- AI assessment, transcript correction, suggested questions and requirements
- Data
- Transcripts, CV text, job description and requirements
- Region
- Sweden (EU)
- Transfer basis
- Within the EU/EEA
OpenAI
- Purpose
- Speech-to-text (Whisper), reading the candidate's name from the CV (only the start of the CV is sent), detecting the interview language
- Data
- Recordings, the start of the CV text
- Region
- USA
- Transfer basis
- EU Standard Contractual Clauses (SCC). The contract is with OpenAI Ireland Ltd.; OpenAI is not certified under the DPF
Clerk
- Purpose
- Sign-in for candidates and recruiters
- Data
- Name, email, sign-in data
- Region
- USA
- Transfer basis
- EU–US DPF (certified), SCC as fallback
Vercel
- Purpose
- Website hosting
- Data
- Technical data (IP address, request logs)
- Region
- USA (server functions) and global network
- Transfer basis
- EU–US DPF (certified) and SCC
ngrok
- Purpose
- Tunnel that forwards traffic to the API
- Data
- All API traffic. Encryption (TLS) ends at ngrok, so ngrok can see the content
- Region
- US company, EU edge in Frankfurt used
- Transfer basis
- EU–US DPF (certified) and SCC
Stripe
- Purpose
- Billing (recruiter customers only)
- Data
- Name, email, payment details
- Region
- EU/USA
- Transfer basis
- EU–US DPF (Stripe, LLC certified) and SCC
Mailtrap
- Purpose
- Sending email: interview invitations, daily summaries to recruiters and demo
- Data
- Name, email, job title
- Region
- USA
- Transfer basis
- EU–US DPF (certified) and SCC
Google (Analytics 4)
- Purpose
- Statistics for the public pages – only after consent, never on interview pages or in the dashboard
- Data
- Usage data, cookie ID
- Region
- EU/USA
- Transfer basis
- EU–US DPF (certified) and SCC
Discord
- Purpose
- Internal operations alerts
- Data
- No personal data (technical IDs and links only)
- Region
- USA
- Transfer basis
- Not applicable
Our own server in Norway
The database (applications, transcripts, assessments, feedback and audit log) and CV parsing run on Skillscanner's own server in Norway with disk encryption.
The customer's own ATS
When a customer connects its Teamtailor account, the score, grade and a link to the report are sent there on the customer's instruction. Teamtailor is then the customer's provider, not our subprocessor. The customer can turn off sending scores in the account menu under "Data & privacy".
Changes
We update this list before new subprocessors are used. Questions can be sent to hello@skillscanner.ai.