Wiggli Sub-processors
Last updated:
October 1st 2026
Sub-Processors
A subprocessor is a third party engaged by Wiggli to process Customer Personal Data on Wiggli’s behalf to deliver the Product.
| Sub-Processor | Purpose | Location | Transfer Mechanism |
|---|---|---|---|
| Amazon Web Services, Inc. / AWS | Hosting and infrastructure, including storage and databases. | Wiggli’s configured regions. Paris and Ireland. | EU SCCs for transfers to third countries where required. |
| MongoDB, Inc. / MongoDB Atlas | Used by Wiggli applications | EU–US DPF where applicable; otherwise EU SCCs for transfers to non-adequate third countries | |
| Vercel Inc. | Website and frontend hosting and delivery. | Global infrastructure, including AWS, Azure and Google Cloud regions; location depends on Vercel configuration | EU SCCs |
| OpenAI / OpenAI Ireland Limited / OpenAI OpCo, LLC | Processing content submitted to product AI features | EEA and United States / other locations depending on the OpenAI service and configuration | EU SCCs or an adequacy decision for applicable transfers outside the EEA |
| Imgix, Inc. | Transforms and delivers images used on Wiggli Careers and EB website, including job and mission media. | United States / global infrastructure, depending on the service and configuration | EU SCCs and other applicable safeguards for international transfers |
| Nylas, Inc. | Email/calendar connectivity, communications data processing, API services and related application functionality | United States and other locations depending on service/sub-processors | EU–US DPF where applicable; otherwise EU SCCs and other applicable safeguards |
| Elastic Cloud | Stores and searches candidate and customer data for the product. | Customer Selected (AWS, GCP, Azure regions worldwide, including EU) | EU SCCs and EU-U.S. DPF (No transfer needed if restricted to EU region). |
| Resend | Delivers product emails and processes recipients’ names, addresses and message content. | United States | EU-U.S. DPF and EU SCCs (Modules 2 & 3 incorporated in DPA). |
| Pusher | Delivers real-time and push notifications containing user identifiers and notification data. | United States and United Kingdom | UK Adequacy Decision (for UK) + EU SCCs & EU-U.S. DPF (for US). |
| Upstash | Carries real-time candidate and enrichment updates. | Customer Selected (AWS / GCP multi-region, including EU regions) | EU SCCs incorporated in the Upstash DPA + EU-U.S. DPF for US sub-processors. |
| Sentry | Receives product error logs and traces that can include user and request data. | United States (Default) or European Union (Frankfurt instance) | EU-U.S. DPF and EU SCCs (No cross-border transfer if EU instance is used). |
Opt-in Sub-Processors
Marketing sub-processors help provide ads and analytics and are opt-in in certain regions. These can also be blocked utilising an ad blocker.
| Sub-Processor | Purpose | Location | Transfer Mechanism |
|---|---|---|---|
| Google Ireland Limited / Google LLC | Google Analytics: website analytics, measurement and reporting. Google Ads: advertising, conversion measurement, audience/remarketing and campaign optimisation. | EEA and other countries, including the United States | EU–US Data Privacy Framework (DPF) where applicable; otherwise EU SCCs |
| Meta Platforms Ireland Limited / Meta Platforms, Inc. | Meta Business Tools and Ads: advertising, campaign measurement, conversion tracking, audience creation and remarketing. | EEA and other countries, including the United States | EU–US DPF where applicable; otherwise EU SCCs |
| LinkedIn Ireland Unlimited Company / LinkedIn Corporation | LinkedIn Ads: advertising, campaign management, conversion tracking, audience targeting and campaign measurement. | EEA and other countries, including the United States | EU SCCs |
| lempire SAS (lemlist) | Sales outreach and campaigns | France / EEA | EEA hosting / no EEA-to-third-country transfer for stored personal data. |
| Foo Monk LLC (Instantly) | Sales outreach and campaigns. | United States; | EU SCCs |
| PipeDrive | Marketing communications and Sales CRM | Europe | EU SCCs |
Product Specific Sub-Processors
We consider optional sub-processors as companies that provide services when utilising certain features in our Product do not apply if those features are not used.
| Sub-Processor | Feature | Purpose / Processing Activity | Location | Transfer Mechanism |
|---|---|---|---|---|
| Nylas, Inc. | Email and Calendar | Email/calendar connectivity, communications data processing, API services and related application functionality | United States and other locations depending on service/sub-processors | EU–US DPF where applicable; otherwise EU SCCs |
| Kombo | ATS | Supports optional ATS connections and exchanges recruitment data between a customer’s ATS and Wiggli. | European Union (primarily AWS Frankfurt / Germany) | None required for core storage (EU-hosted); EU SCCs for sub-processors outside the EEA. |
| Unipile | Outreach | Supports optional connected messaging accounts, including LinkedIn and WhatsApp, and processes account, contact and message data. | European Union | None required (no transfers outside the EU; native EU storage). |
| Whereby | Interviews | Provides interview rooms and processes participant and meeting data. | European Union (P2P mesh routing; infrastructure hosted in the EEA) | EU SCCs (Standard Contractual Clauses) and EU-U.S. Data Privacy Framework (DPF) for global sub-processors. |
| ElevenLabs | Notetaker | Processes text or voice data for voice features | United States, Netherlands (EU), and Singapore | EU-U.S. DPF and EU SCCs (Module 2/3) incorporated in their DPA. |
| Anthropic | AI features | Process user content | United States (by default for Direct API/Claude); EU-configurable via AWS Bedrock / GCP Vertex AI. | EU SCCs (via Anthropic DPA) & EU-U.S. DPF; EU hosting relies on Hyperscaler DPAs. |
| Gemini | AI features | Process user content | Global (Google Infrastructure; EU data residency option for stored Workspace/Vertex data) | EU-U.S. DPF and EU SCCs incorporated in the Google Cloud / Workspace DPA. |
| OpenRouter | AI features | Process user content. OpenRouter may also route it to other model providers. | United States (plus underlying providers like OpenAI, Anthropic) | EU SCCs and EU-U.S. DPF (available via OpenRouter Trust Portal). |