Subprocessors
Aptimal, Inc.
Last updated: 07/23/2026
About This Page
Aptimal engages third-party service providers ("subprocessors") to help deliver the platform. This page lists them, what they do, and what data they handle.
This page is incorporated by reference into our Data Processing Addendum as Annex III.
Notification of changes. We give customers at least 30 days' advance notice before adding or replacing a subprocessor. Notice is sent by email to the address on your account and posted here. Customers may object on reasonable data protection grounds within 30 days — see Section 4.3 of the DPA.
To subscribe to change notifications: email support@aptimal.ai.
Infrastructure and Platform
| Subprocessor | Purpose | Data processed | Location |
|---|---|---|---|
| Supabase, Inc. | Primary database, authentication, and file storage — hosts candidate profiles, applications, resumes and attachments, assessment responses, scores, notes, pipeline state, and user accounts | All Customer Data and candidate personal data; user authentication data | United States |
| Vercel, Inc. | Application hosting, edge network, and performance monitoring — serves the web application and application/assessment links | Data in transit; technical and log data including IP address and device information; aggregate usage analytics | United States |
AI Processing
| Subprocessor | Purpose | Data processed | Location |
|---|---|---|---|
| OpenAI, L.L.C. | Large language model inference for resume parsing and comparison against job descriptions, analysis of free-text assessment responses, generation of summaries and scores, and generation of interview question suggestions | Resume and application content, job description content, free-text assessment responses, custom question content | United States |
Model training: We use OpenAI's API under terms that do not permit use of submitted data to train or improve their models. We do not use customer or candidate data to train models ourselves. See DPA Section 3.3(d).
Communications
| Subprocessor | Purpose | Data processed | Location |
|---|---|---|---|
| Resend, Inc. | Transactional email delivery — assessment invitations, status notifications, hiring manager alerts, rejection notices | Recipient name and email address, message content, delivery and open status | United States |
Payments
| Subprocessor | Purpose | Data processed | Location |
|---|---|---|---|
| Stripe, Inc. | Subscription billing and payment processing | Customer billing contact and address, payment method details, transaction history. Candidate data is never shared with Stripe. | United States |
Stripe acts as an independent controller for payment data in accordance with its own privacy policy and card network requirements. We do not store full payment card numbers.
Background Checks
| Subprocessor | Purpose | Data processed | Location |
|---|---|---|---|
| Checkr, Inc. | Background screening, ordered at the customer's initiation | Candidate identity data required to run a check, and the resulting report returned to the customer's candidate profile | United States |
Important: Checkr is a consumer reporting agency under the U.S. Fair Credit Reporting Act and operates under its own regulatory obligations and direct terms with the customer. Aptimal is not a consumer reporting agency and does not furnish consumer reports. Customers are solely responsible for FCRA compliance, including disclosure, authorization, pre-adverse action, and adverse action procedures. See Terms of Service, Section 4.4.
Scheduling and Video Interviews
These are optional integrations enabled by the customer. Where a customer connects one of these services, data is shared with that provider under the customer's own relationship with them, and the provider generally acts as an independent controller rather than as our subprocessor.
| Provider | Purpose | Data processed | Location |
|---|---|---|---|
| Google LLC | Calendar availability and Google Meet interview scheduling; scheduling links shared with candidates | Candidate name and email, appointment times, meeting links | United States and global infrastructure |
| Microsoft Corporation | Microsoft Teams interview scheduling and meeting links | Candidate name and email, appointment times, meeting links | United States and global infrastructure |
| Zoom Communications, Inc. | Zoom interview scheduling and meeting links | Candidate name and email, appointment times, meeting links | United States and global infrastructure |
Aptimal does not record, store, or analyze interview audio or video. Any recording is controlled by the customer within the video platform and is subject to that platform's terms — and, where applicable, to laws requiring notice or consent for recorded interviews, including the Illinois Artificial Intelligence Video Interview Act and state two-party consent laws.
Affiliates
Aptimal, Inc. currently has no subsidiaries or affiliates that process customer or candidate personal data.
Location and Scope
All subprocessors above are established in the United States, and the Services are offered in the United States only. Some providers operate global infrastructure; where data may be processed outside the United States, we note it in the location column above.
We do not currently provide EU Standard Contractual Clauses or GDPR transfer mechanisms. Customers requiring them should contact us before using the Services for candidates located in the EEA, UK, or Switzerland.
Questions
Aptimal Inc.
Email us: support@aptimal.ai
Registered Agent: Legalinc Corporate Services Inc.
131 Continental Dr Suite 305 Newark, DE, 19713 US