Sub-processors
Last updated: October 30, 2026
Sub-processors
These are the providers TrueCandidate uses to run the Service. Each processes data only for the purpose listed, under a contract with data-protection terms. We give customers 30 days' notice by email before adding or replacing one (see the DPA, section 5).
| Provider | Purpose | Data | Location |
|---|---|---|---|
| Railway | Application hosting | All data in transit through the application | United States (US East) |
| Neon | Database | Account data, interview metadata, browser signals, boards, decisions, audit log, encrypted candidate email | United States |
| LiveKit Cloud | Real-time video and audio, recording (egress) | Live audio/video streams; recording written directly to storage | United States |
| Cloudflare R2 | Recording storage | Interview recordings (video and audio files) | United States |
| Resend | Transactional email | Candidate email address and invite details; customer emails | United States |
| Inngest | Background jobs (invites, reminders, retention deletion) | Interview ids and schedule times; no recordings | United States |
| Dodo Payments | Billing, invoicing and tax, as merchant of record | Customer billing details and payment information (never candidate data) | United States / per Dodo's policy |
| Sentry | Error monitoring | Error reports with session and organization ids; no recordings or candidate content | United States |
| PostHog | Product analytics for customer accounts, only after cookie consent | Customer user events (page views, feature use); no candidate data | United States |
Not used: no third-party face-recognition, transcription or AI inference service receives candidate data. Face tracking runs on the candidate's device from models served by TrueCandidate.
Last reviewed: 30 October 2026.