Talentir Subprocessor List
Last updated: 16 October 2026
This list names the subprocessors that Talentir LLC uses to supply the Talentir platform, as referred to in the Data Processing Agreement (DPA). Talentir engages each provider below to process personal data on its behalf.
"Entity location" is the country of the contracting legal entity, not only the country where the data is stored. "Transfer safeguard" is the mechanism that covers a transfer out of the EEA. Where the entity is inside the EEA, no transfer mechanism is needed.
Talentir can change this list when it adds or replaces a provider. The date at the top of this page shows the last change.
1. Infrastructure and hosting
| Subprocessor | Purpose | Categories of personal data | Entity location | Transfer safeguard |
|---|
| Vercel Inc. | Application hosting, serverless functions, file storage, build and deploy. Functions run in the Frankfurt region. | All data sent to the platform: account data, request metadata, IP addresses, uploaded files such as avatars, payout receipts, invoices, and verification documents | United States (Delaware) | EU-U.S. Data Privacy Framework, with standard contractual clauses as fallback |
| Neon, LLC (Databricks, Inc.) | Managed PostgreSQL database. The primary data store. Hosted in Frankfurt, Germany. | All application data: users, teams, payouts, wallet addresses, verification applications, connected social accounts, audit logs | United States (Delaware) | EU-U.S. Data Privacy Framework, with standard contractual clauses as fallback |
| Amazon Web Services EMEA SARL | Object storage for business verification documents. Hosted in Zurich, Switzerland. | Company registry extracts, identity documents, and other verification evidence | Luxembourg | Not applicable, EEA entity |
| Amazon Web Services EMEA SARL | Object storage for YouTube revenue reports. Hosted in Frankfurt, Germany. | Channel and video revenue records tied to a partner account | Luxembourg | Not applicable, EEA entity |
| ClickHouse, Inc. | Analytics database for ingested YouTube revenue reports | Channel and video revenue records tied to a partner account | United States (Delaware) | EU-U.S. Data Privacy Framework for processor transfers, with standard contractual clauses as fallback |
2. Observability and logging
| Subprocessor | Purpose | Categories of personal data | Entity location | Transfer safeguard |
|---|
| Better Stack, Inc. | Log and trace collection, alerting. Data is stored in EU regions. | Request traces and application logs, which can contain user identifiers, team identifiers, email addresses, and wallet addresses | United States (Delaware) | Standard contractual clauses |
3. Identity verification, business verification, and sanctions screening
| Subprocessor | Purpose | Categories of personal data | Entity location | Transfer safeguard |
|---|
| Didit Identity Spain, S.L. | Identity verification, and screening of blockchain addresses and transactions. The European data plane is inside the EEA. | Name, date of birth, nationality, identity document data, biometric data, wallet addresses | Spain | Not applicable, EEA entity |
| Stripe Payments Europe, Limited | Identity document verification for business representatives | Identity document images, facial image, name, date of birth | Ireland | Not applicable, EEA entity. Onward transfer to Stripe, Inc. is covered by the EU-U.S. Data Privacy Framework. |
| OpenSanctions Datenbanken GmbH | Sanctions, politically exposed person, and adverse media screening | Name, date of birth, nationality, company name, jurisdiction | Germany | Not applicable, EEA entity |
| CompanyData.com B.V. | Company registry lookups for business verification | Company name, registered address, company identifiers | Netherlands | Not applicable, EEA entity |
4. Payments and banking
| Subprocessor | Purpose | Categories of personal data | Entity location | Transfer safeguard |
|---|
| OpenPayd Financial Services Malta Limited | EUR and GBP accounts, SEPA and SWIFT payouts, verification of payee | Beneficiary name, address, IBAN or account number, payout amount and reference | Malta | Not applicable, EEA entity |
| Revolut Bank UAB | Bank accounts and payouts | Beneficiary name, IBAN or account number, payout amount and reference | Lithuania | Not applicable, EEA entity |
| Bivial AG | EUR and CHF accounts, CHF payouts | Beneficiary and depositor name, address, account number, amount and reference | Switzerland | Adequacy decision for Switzerland |
| FV Bank International Inc. | USD account for customer deposits | Depositor name, account details, deposit amount and reference | United States (Puerto Rico) | Standard contractual clauses |
| PayPal (Europe) S.à r.l. et Cie, S.C.A. | PayPal payouts | Payee email address, payout amount and reference | Luxembourg | Not applicable, EEA entity |
| Mt Pelerin Group Ltd | Swiss franc offramp. Data is stored on Amazon Web Services in the United States. | Beneficiary account details, transfer amount | Switzerland | Adequacy decision for Switzerland, with standard contractual clauses for the onward transfer |
| Fixie Technologies LLC | Static IP egress proxy for the Bivial and OpenPayd connections. HTTPS traffic passes through an encrypted tunnel that Fixie cannot read, so Fixie sees connection metadata only. | Source and destination IP addresses, connection timestamps | United States | Standard contractual clauses |
5. Blockchain infrastructure
| Subprocessor | Purpose | Categories of personal data | Entity location | Transfer safeguard |
|---|
| Alchemy Insights, Inc. | Blockchain nodes, gas sponsorship, address activity notifications | Wallet addresses, transaction data | United States (Delaware) | Standard contractual clauses |
| Coinbase Europe Limited | Wallet interface for spend permissions | Wallet addresses, spend permission data | Ireland | Not applicable, EEA entity |
| Socket Technologies Limited (Bungee) | Cross-chain swap and bridge routing | Wallet addresses, token amounts | British Virgin Islands | Standard contractual clauses |
| Safe Labs GmbH | Transaction service for multi-signature wallets | Wallet addresses, transaction data | Germany | Not applicable, EEA entity |
| Magic Labs, Inc. | Wallet key management for the legacy wallet migration application | Email address, sign-in identity, wallet addresses | United States | Standard contractual clauses |
6. Communication and support
| Subprocessor | Purpose | Categories of personal data | Entity location | Transfer safeguard |
|---|
| Plus Five Five, Inc. (Resend) | Transactional email, marketing contacts, inbound email replies | Email address, name, message content and attachments such as payout notices, invoices, and verification requests | United States | EU-U.S. Data Privacy Framework and standard contractual clauses |
| Twilio Ireland Limited | SMS one-time codes for phone number verification, and SMS notifications such as payout notices | Phone number, message content | Ireland | Not applicable, EEA entity. Onward transfer to Twilio Inc. is covered by the EU-U.S. Data Privacy Framework. |
| Crisp IM SAS | Customer support chat. Data is stored in Amsterdam, Netherlands. | Email address, name, chat message content | France | Not applicable, EEA entity |
| MessageBird UK Limited (Pusher) | Realtime notifications in the browser | User and team channel identifiers, notification content | United Kingdom | Adequacy decision for the United Kingdom |
| Slack Technologies Limited | Internal technical and compliance alerts | Alert content, which can contain team names, email addresses, and payout identifiers | Ireland | Not applicable, EEA entity. Onward transfer to Salesforce, Inc. is covered by the EU-U.S. Data Privacy Framework. |
| Telegram FZ-LLC | Internal alert channel | Alert content, as above | United Arab Emirates | Standard contractual clauses |
7. Business tools
| Subprocessor | Purpose | Categories of personal data | Entity location | Transfer safeguard |
|---|
| Attio Limited | Customer relationship management | Name, email address, team and account data | United Kingdom | Adequacy decision for the United Kingdom |
| Odoo S.A. | Accounting and invoicing | Customer and invoice records: company name, address, invoice amounts | Belgium | Not applicable, EEA entity |
| Google Ireland Limited | Document storage for internal receipt processing | Payout receipts and supplier invoices | Ireland | Not applicable, EEA entity. Onward transfer to Google LLC is covered by the EU-U.S. Data Privacy Framework. |
| Cal.com, Inc. | Meeting booking on public pages | Name, email address, and meeting details entered by the visitor | United States (Delaware) | Standard contractual clauses |
8. Analytics and marketing
| Subprocessor | Purpose | Categories of personal data | Entity location | Transfer safeguard |
|---|
| PostHog, Inc. | Product analytics and event tracking. Talentir uses the EU cloud. | User identifier, email address, page views, feature usage, IP address, device data | United States (Delaware) | EU-U.S. Data Privacy Framework and standard contractual clauses |
| Google Ireland Limited | Tag management and website analytics | IP address, device and browser data, page views, cookie identifiers | Ireland | Not applicable, EEA entity. Onward transfer to Google LLC is covered by the EU-U.S. Data Privacy Framework. |
| Meta Platforms Ireland Limited | Advertising measurement | IP address, device and browser data, page views, cookie identifiers | Ireland | Not applicable, EEA entity |
| LinkedIn Ireland Unlimited Company | Advertising measurement and conversion tracking | IP address, page views, cookie identifiers, hashed conversion data | Ireland | Not applicable, EEA entity |
9. Artificial intelligence
Talentir sends all model requests through the Vercel AI Gateway. The gateway passes each request to the model provider below. Talentir does not use this data to train models.
| Subprocessor | Purpose | Categories of personal data | Entity location | Transfer safeguard |
|---|
| Vercel Inc. | Routes model requests to the providers below | All request content listed in this section | United States (Delaware) | EU-U.S. Data Privacy Framework |
| Anthropic, PBC | Transaction screening research, internal document reading | Team and counterparty names, transaction data, receipt and invoice content | United States (Delaware) | Standard contractual clauses |
| Google LLC | Reading company registry documents, mapping imported payout files | Company registry content, payee names, bank account numbers, and payout records from imported files | United States (Delaware) | EU-U.S. Data Privacy Framework |
10. Platform integrations you connect
These providers are the source of data, not a recipient of it. Talentir reads data from them only after you grant access, and you can withdraw that access at any time.
| Provider | Purpose | Data read | Entity location |
|---|
| Google Ireland Limited (YouTube) | Channel ownership check, video metadata, revenue reports | Channel identifier and title, video metadata, revenue records, Google account email address | Ireland |
| Meta Platforms Ireland Limited (Instagram) | Instagram account connection | Account identifier, username, profile data | Ireland |
| TikTok Technology Limited | TikTok account connection | Account identifier, username, profile data | Ireland |
| Google Ireland Limited (Places) | Address autocomplete during onboarding | The address text you type | Ireland |
Entity names, registered jurisdictions, and transfer mechanisms in this list are taken from each provider's published legal documentation as at the date at the top of this page.