Each Subprocessor is bound by a written DPA and may use your Personal Data only on our documented instructions, only for the purpose stated, and only for the data categories listed.
Subprocessors
#
Subprocessor
Role
Function
Data categories
Location
1
Google Cloud
Hosting / IaaS
Compute, storage, networking for the Service
All Personal Data, encrypted at rest
USA
2
Supabase, Inc.
Database & auth
Stores account, profile, application data; handles authentication
Account data, profile, application data, auth events
USA
3
AssemblyAI, Inc.
Voice transcription
Transcribes voice intake to text
Voice audio, voice transcript
USA
4
Anthropic, PBC
AI / LLM provider
Powers the Prospi AI coach and contributes to internal platform algorithms including Career Snapshot generation, Pathway matching, and Action Plan recommendations
LLM prompts (may include résumé and intake content), responses
USA
5
OpenAI, OpCo, LLC
AI / LLM provider
Powers the Prospi AI coach and contributes to internal platform algorithms including Career Snapshot generation, Pathway matching, and Action Plan recommendations
LLM prompts (may include résumé and intake content), responses
USA
6
Zoom Video Communications, Inc. (Enterprise)
Video / coaching sessions
Hosts and transcribes coaching sessions
Audio, video, transcript, metadata
USA (configurable)
7
Revelio Labs, Inc.
Labor-market data
Parses résumé and LinkedIn URL content against a skill/activity/role taxonomy
Résumé content, LinkedIn URL and derived content
USA
8
Functional Software, Inc. (Sentry)
Error / performance monitoring
Captures error events with PII scrubbed
Error events, scrubbed identifiers, IP
USA
9
Plus Five Five, Inc. (Resend)
Transactional email
Sends account, security, and service emails
Name, email, message body
USA
10
PostHog, Inc.
Product analytics
Aggregates usage events using pseudonymized identifiers
Pseudonymized event data, device metadata
USA / self-hosted EU option
11
Career Coaches (contractors)
Human coaching
Deliver coaching sessions
Career Snapshot, chosen Pathways, Action Plan, session recording/transcript
USA (remote)
12
Stripe, Inc.
Payment processing
Processes subscription payments for direct subscribers
Billing details, last 4 of card, transaction identifiers
USA
13
Slack Technologies, LLC
User community communications
Hosts written communications between Users
Name, email, message body
USA
14
Vanta, Inc.
SOC 2 compliance
Evaluates security measures/ automation of compliance
User account identifiers across connected SaaS tools
USA