How many subprocessors does HireVue use?

HireVue lists 28 subprocessors on its published list, including Atlassian Pty Ltd, Atlassian US, Inc., Certified Languages International Inc., Zendesk, Amazon Web Services, Inc., and Google Cloud LLC and 23 more.

Where does HireVue process customer data?

The subprocessors named by HireVue are located in USA., San Francisco, Seattle, USA, 410 Terry Avenue North, and CA 94103 and 72 other locations, as stated on its list.

How quickly does HireVue report a personal data breach to customers?

According to its DPA, HireVue reports a personal data breach to customers without undue delay, with no set deadline: “Upon becoming aware of a Security Incident, Processor shall notify Controller without undue delay and shall provide reasonable information and cooperation to Controller so that Controller can fulfill any data breach reporting obligations it may have under the Data Protection Laws.”

How much notice does HireVue give before adding a subprocessor?

HireVue's DPA gives 30 days' notice of a new subprocessor, the time customers have to object: “The data importer shall specifically inform the data exporter in writing of any intended changes to that list through the addition or replacement of sub-processors at least 30 days in advance, thereby giving the data exporter sufficient time to be able to object to such changes prior to the engagement of the sub-processor(s).”

How does HireVue transfer personal data outside the EU?

HireVue's DPA relies on standard contractual clauses, the EU–US Data Privacy Framework, binding corporate rules, and adequacy decisions: “Processor or Sub-processor are in a Third Country, then Model Clauses, Module Two ("Controller to Processor") shall apply as to such transfer.”

When was HireVue's subprocessor list last checked?

ClauseTrail last checked HireVue's subprocessor list on September 28, 2026. Lists are re-checked daily.

How do I find out when HireVue adds or removes a subprocessor?

ClauseTrail monitors HireVue's subprocessor list, DPA, privacy policy and terms and emails you the exact change — who was added or removed and what the page said before and after. The first vendors are free.

HireVue Subprocessors List (September 2026): Changes and History

HireVue subprocessors (September 2026)

#	Subprocessor	Purpose	Location
1	Atlassian Pty Ltd, Atlassian US, Inc.	Project management services.	1098 Harrison Street, San Francisco, CA 94103, USA.
2	Certified Languages International Inc.	Telephone translation services for Support.	4724 SW Macadam Ave, Portland, OR 97239, USA.
3	Zendesk	Customer Support tool.	1019 Market Street, San Francisco, CA 94103, USA.
4	Amazon Web Services, Inc.	Cloud hosting and storage and Infrastructure services.	410 Terry Avenue North, Seattle, WA 98109, USA.
5	Google Cloud LLC	Speech-to-Text transcription and multilingual translation for supported Hirevue solutions.	1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
6	SurveyMonkey Inc.	Survey tools.	One Curiosity Way, San Mateo, CA 94403, USA.
7	Tableau, from Salesforce	Business analytics and customer reporting.	1621 N 34th Street, Seattle, WA 98103, USA.
8	Twilio Inc.	SMS and WhatsApp services Email delivery services (via SendGrid).	375 Beale Street, Suite 300, San Francisco, CA 94105, USA.
9	New Relic Inc.	Application performance monitoring, metrics, logs.	188 Spear St., Suite 1000, San Francisco, CA 94105, USA.
10	Idem Translation, Inc.	Translation services.	550 California Ave # 310 Palo Alto, CA 94306, USA.
11	Qualtrics Inc.	Survey tools.	333 Riverpark Drive, Provo, UT 84604, USA.
12	Splunk, A Cisco Company	Application performance monitoring and logs.	170 West Tasman Dr. San Jose, CA 95134 USA
13	Snowflake Inc.	Data warehouse and analytics tool.	450 Concar Drive, San Mateo, CA 94402, USA.
14	Kombo GmbH	API Integration management tool.	Lohmühlenstr 64, 12435 Berlin, Germany.
15	Pipplet SAS	Language proficiency test provider.	5 Rue du Helder, 75009 Paris, France.
16	Vonage Holdings Corp.	Communication services provider	23 Main St., Holmdel, NJ 07733, USA.
17	Mailgun Technologies, Inc.	Email services.	112 E Pecan St #1135, San Antonio, TX 78205, USA.
18	Amazon Bedrock, Amazon Web Services, Inc.	AWS-managed service, providing access to foundation models from Amazon and selected third-party providers. Model inference runs in AWS-controlled deployment environments. Model providers do not have access to customer data, prompts, completions, or logs. All data remains within the customer’s selected AWS region.	410 Terry Avenue North, Seattle, WA 98109, USA.
19	Anthropic PBC	Anthropic provides a foundation model (Claude) via AWS Bedrock. The model is hosted and run within AWS-managed infrastructure. Anthropic does not have access to customer data, prompts, completions, logs, or the AWS deployment environment.	548 Market St, PMB 90375, San Francisco, CA 94104, USA.
20	Wiz Security	Security solutions for Cloud and Code security.	1 Manhattan West, Fl 52, NY 10001, USA.
21	Pendo.io, Inc	Supports in-product analytics, including feature usage insights and platform performance monitoring within the T2O platform. Processes customer data on Hirevue’s behalf as part of delivering and improving the T2O service.	301 Hillsborough Street, Suite 1900, Raleigh, NC 27603, USA
22	Brainfish AI	Supports contextual real time in-app help and embedded support functionality within T2O. Processes customer data on Hirevue’s behalf as part of delivering and improving the T2O service.	13, 99 Walker St, North Sydney, NSW 2060, Australia (US hosting)
23	Matillion DPC	Cloud-based platform for securely moving, preparing, and loading data into analytics systems as part of our existing survey processing workflow.	2 New Bailey, Manchester, M3 5GS, UK (US hosting)
24	Datadog Inc.	Observability and monitoring used to support service performance, reliability, and troubleshooting.	620 8th Avenue, 45th Floor New York, NY 10018 USA
25	Mixpanel Inc.	Product usage analytics used to understand feature usage and improve the user experience.	Pier 1, Bay 2 The Embarcadero San Francisco, CA 94111 USA
26	OpenAI	Embedding and large language model services used to support AI Interviewer functionality.	1455 3rd Street, San Francisco, CA 94158, USA
27	ElevenLabs Inc.	Voice interface functionality, including speech-to-text, distinguishing between speakers within an interaction, and text-to-speech capabilities.	169 Madison Ave #2484, New York, NY 10016, USA
28	LaunchDarkly (Catamorphic Co)	Feature management used to enable, configure, and manage product functionality.	1999 Harrison St. Ste. 1100 Oakland, California 94612 USA

Key DPA terms at HireVue

What HireVue's data processing agreement commits to, with the sentence each answer comes from. SCCs or the Data Privacy Framework: what's the difference?

Breach notification: Without undue delay, with no set deadline

“Upon becoming aware of a Security Incident, Processor shall notify Controller without undue delay and shall provide reasonable information and cooperation to Controller so that Controller can fulfill any data breach reporting obligations it may have under the Data Protection Laws.”
DPA, legal.hirevue.com ↗
Notice of a new subprocessor: 30 days ahead

“The data importer shall specifically inform the data exporter in writing of any intended changes to that list through the addition or replacement of sub-processors at least 30 days in advance, thereby giving the data exporter sufficient time to be able to object to such changes prior to the engagement of the sub-processor(s).”
DPA, legal.hirevue.com ↗
Transfers outside the EU: Standard contractual clauses, the EU–US Data Privacy Framework, binding corporate rules, and adequacy decisions

“Processor or Sub-processor are in a Third Country, then Model Clauses, Module Two ("Controller to Processor") shall apply as to such transfer.”

“In the event that Processor (and/or Sub-processors) are self-certified under the Data Privacy Framework (DPF), such certification has been deemed adequate under European Area Data Protection Law for processors in the United States and the Model Clauses shall not apply.”

“Processing in compliance with Binding Corporate Rules ("BCR's") in accordance with Data Protection Laws; or”

“Processing in a country, a territory, or one or more specified sectors that are considered under Data Protection Laws as providing an adequate level of data protection;”
DPA, legal.hirevue.com ↗
Customer data after the contract ends: Deleted or returned when the contract ends

“Upon termination or expiry of the Agreement, Processor shall delete or return to Controller the Personal Data (including copies) in Processor's possession in accordance with the terms of the Agreement and this DPA.”
DPA, legal.hirevue.com ↗
Audit rights: Through certifications and audit reports only

“Upon written request, Processor shall provide as available a summary copy of its most recent audit report(s) to Controller in the form Processor provides to other customers.”
DPA, legal.hirevue.com ↗

Documents we track for HireVue

DPA: checked September 28, 2026 legal.hirevue.com ↗
Privacy policy: checked September 28, 2026 legal.hirevue.com ↗
Subprocessor list: checked September 28, 2026 legal.hirevue.com ↗
Terms of service: checked September 28, 2026 legal.hirevue.com ↗
Trust page: trust.hirevue.com ↗

Change history

Tracking since September 28, 2026. No change has been published since; additions, removals and document changes will appear here as they're published.

HireVue subprocessors FAQ

How many subprocessors does HireVue use?: HireVue lists 28 subprocessors on its published list, including Atlassian Pty Ltd, Atlassian US, Inc., Certified Languages International Inc., Zendesk, Amazon Web Services, Inc., and Google Cloud LLC and 23 more.
Where does HireVue process customer data?: The subprocessors named by HireVue are located in USA., San Francisco, Seattle, USA, 410 Terry Avenue North, and CA 94103 and 72 other locations, as stated on its list.
How quickly does HireVue report a personal data breach to customers?: According to its DPA, HireVue reports a personal data breach to customers without undue delay, with no set deadline: “Upon becoming aware of a Security Incident, Processor shall notify Controller without undue delay and shall provide reasonable information and cooperation to Controller so that Controller can fulfill any data breach reporting obligations it may have under the Data Protection Laws.”
How much notice does HireVue give before adding a subprocessor?: HireVue's DPA gives 30 days' notice of a new subprocessor, the time customers have to object: “The data importer shall specifically inform the data exporter in writing of any intended changes to that list through the addition or replacement of sub-processors at least 30 days in advance, thereby giving the data exporter sufficient time to be able to object to such changes prior to the engagement of the sub-processor(s).”
How does HireVue transfer personal data outside the EU?: HireVue's DPA relies on standard contractual clauses, the EU–US Data Privacy Framework, binding corporate rules, and adequacy decisions: “Processor or Sub-processor are in a Third Country, then Model Clauses, Module Two ("Controller to Processor") shall apply as to such transfer.”
When was HireVue's subprocessor list last checked?: ClauseTrail last checked HireVue's subprocessor list on September 28, 2026. Lists are re-checked daily.
How do I find out when HireVue adds or removes a subprocessor?: ClauseTrail monitors HireVue's subprocessor list, DPA, privacy policy and terms and emails you the exact change — who was added or removed and what the page said before and after. The first vendors are free.