Sub-processors

Last Updated: May 30, 2026

Yardstick, Inc. (“Yardstick”) uses a limited set of third-party sub-processors to host, operate, secure, and support our Sites and Services. A sub-processor is a third party that processes Personal Information or Customer Data on Yardstick’s behalf. This page lists the sub-processors we currently use and supplements our Privacy Policy.

Yardstick sub-processors, including each vendor’s purpose, the categories of data it processes, its processing region, and links to its privacy and data-processing terms.
Vendor	Purpose	Categories of data processed	Processing region	Terms
Vercel, Inc.	Application hosting, content delivery network (CDN), and edge infrastructure.	Personal Information and Customer Data in transit through the Sites and Services, plus request metadata and logs.	United States — iad1 (Washington, D.C.); global edge CDN	Privacy DPA
Supabase, Inc.	Primary database (Postgres), authentication, and file storage.	Account, candidate, role, interview, and scorecard records; uploaded content such as resumes; authentication identifiers.	United States — AWS us-east-2	Privacy DPA
Google LLC (Gemini API)	Generative AI assistance — drafting interview questions, scorecards, and interview plans. Not used for candidate scoring or interview analysis.	The prompt content you submit for generation, which may include candidate, role, and customer data.	United States	Privacy API terms
Resend (Plus Five Five, Inc.)	Transactional email delivery for candidate and interviewer notifications.	Recipient name and email address, and the content of transactional notification messages.	United States	Privacy DPA
Stripe, Inc.	Billing and payment processing.	Billing contact details and payment card information. Full card data is submitted directly to Stripe; Yardstick stores only the last four digits.	United States / Global	Privacy DPA

Yardstick hosts its Sites and Services in the United States. Processing regions above reflect our current configuration; some sub-processors may transfer or process data in other regions as described in the International Data Transfer section of our Privacy Policy.

Changes to This List

Yardstick maintains this list of sub-processors. When we add or replace a sub-processor, we will update this page and notify customers of the change in accordance with our Data Processing Agreement.

Contact Us

If you have questions about our sub-processors, contact us at privacy@yardstick.team.