Sub-Processor Register
Last updated: 6th November 2026
HiveRef engages the sub-processors below to deliver the platform. Each is bound by a data processing agreement and may process personal information only as instructed by HiveRef. This list matches Section 7 of the HiveRef Data Processing Agreement (hiveref.com/dpa).
| Name | Service | Processing location | Data residency | DPA in place | Last reviewed |
|---|---|---|---|---|---|
| Supabase Inc. | Cloud database and authentication infrastructure | AWS ap-northeast-2, Seoul, South Korea | Seoul, South Korea | Yes | 27th September 2026 |
| Anthropic PBC | AI model processing (Claude Haiku) | United States | United States | Yes | 2nd April 2026 |
| Resend Inc. | Transactional email delivery | United States | United States | Yes | 2nd April 2026 |
| Vercel Inc. | Application hosting and infrastructure | United States | United States | Yes | 2nd April 2026 |
| Stripe, Inc. | Web subscription billing and payment processing | United States | United States | Yes | 8th August 2026 |
| Google LLC | Google Play Billing for Android in-app subscriptions, and Google Ads conversion measurement when a visitor consents to optional cookies | United States | United States | Yes | 23rd August 2026 |
| Apple Inc. | App Store billing, Sign in with Apple, and TestFlight distribution for the HiveRef iOS app | United States | United States | Yes | 16th August 2026 |
| RevenueCat, Inc. | Mobile subscription entitlement sync for Google Play and the App Store | United States | United States | Yes | 8th August 2026 |
| PostHog Inc. | Product analytics (page views and product events) when a visitor consents to optional cookies, plus server-side product events | United States | United States | Yes | 23rd August 2026 |
| Functional Software, Inc. (Sentry) | Error and performance monitoring for the web platform (technical error details, with automatic collection of IP addresses and cookies turned off) | United States | United States | Yes | 6th November 2026 |
| Cloudflare, Inc. | Bot protection (Turnstile) on sign-up, sign-in, check creation, candidate, referee and contact forms, using the visitor's IP address and browser signals | Global network, nearest to the visitor; company in the United States | United States | Yes | 6th November 2026 |
Integrations a client chooses to connect. If a client connects HiveRef to Zapier, HiveRef sends limited check details to Zapier at the client's direction, and Zapier handles them under the client's own Zapier account. HiveRef does not engage Zapier, so it is not listed above. See Section 13 of the Privacy Policy for what is sent.
HiveRef will notify active client contacts at least 14 days before adding or replacing a sub-processor. If you wish to object to a proposed new sub-processor, email privacy@hiveref.com within that notice period. If we cannot accommodate your objection, you may have the right to terminate your use of the platform as set out in your agreement with HiveRef.