.webp?dpl=dpl_3buzCDRY4NxEoJqZ4Bf1CgLU93pn)
Sub-processors
Last Updated: June 23, 2026
Yardstick, Inc. (“Yardstick”) uses a limited set of third-party sub-processors to host, operate, secure, and support our Sites and Services. A sub-processor is a third party that processes Personal Information or Customer Data on Yardstick’s behalf. This page lists the sub-processors we currently use and supplements our Privacy Policy.
| Vendor | Purpose | Categories of data processed | Processing region | Terms |
|---|---|---|---|---|
| Vercel, Inc. | Application hosting, content delivery network (CDN), and edge infrastructure. | Personal Information and Customer Data in transit through the Sites and Services, plus request metadata and logs. | United States — iad1 (Washington, D.C.); global edge CDN | |
| Supabase, Inc. | Primary database (Postgres), authentication, and file storage. | Account, candidate, role, interview, and scorecard records; uploaded content such as resumes; authentication identifiers. | United States — AWS us-east-2 | |
| Google LLC (Gemini API) | Generative AI assistance for drafting hiring content (interview questions, scorecards, and interview plans) and for AI-assisted evaluation of applications against job-related criteria to help the hiring team review and prioritize candidates. Used as decision support only — not to automatically reject or screen out candidates without human review. | The content you submit for generation or evaluation, which may include candidate, role, and customer data such as resumes. | United States | |
| Anthropic, PBC (Claude / Claude Code) | Optional generative AI assistance for drafting interview questions, scorecards, and interview plans; and AI-assisted software development, debugging, and support tooling used by Yardstick. | Prompt content submitted for generation, which may include candidate, role, and customer data; and Customer Data that may be incidentally accessed during development, debugging, or support. | United States | |
| OpenAI (OpenAI OpCo, LLC) (API / Codex) | Optional generative AI assistance for drafting interview questions, scorecards, and interview plans; and AI-assisted software development, debugging, and support tooling used by Yardstick. | Prompt content submitted for generation, which may include candidate, role, and customer data; and Customer Data that may be incidentally accessed during development, debugging, or support. | United States | |
| Resend (Plus Five Five, Inc.) | Transactional email delivery for candidate and interviewer notifications. | Recipient name and email address, and the content of transactional notification messages. | United States | |
| Stripe, Inc. | Billing and payment processing. | Billing contact details and payment card information. Full card data is submitted directly to Stripe; Yardstick stores only the last four digits. | United States / Global |
Yardstick hosts its Sites and Services in the United States. Processing regions above reflect our current configuration; some sub-processors may transfer or process data in other regions as described in the International Data Transfer section of our Privacy Policy.
Changes to This List
Yardstick maintains this list of sub-processors. When we add or replace a sub-processor, we will update this page and publish the change to the sub-processor RSS feed in accordance with our Data Processing Agreement. You can Subscribe to changes (RSS), or contact us to also receive these notices by email to your account contact.
Contact Us
If you have questions about our sub-processors, contact us at privacy@yardstick.team.