Crosschq Sub-Processors

Last Updated: September 23, 2024

 

Entity Name Purpose Country DPA/Terms of Service URL
Amazon Web Services Amazon Web Services (“AWS”) is a subsidiary of Amazon, providing an on-demand cloud computing platform. Crosschq leverages AWS to host and manage the majority of our production services and data. United States https://aws.amazon.com/service-terms/

Cloudflare, Inc.

Crosschq uses Cloudflare’s WAF and DDoS services to help protect some of the applications we provide. 

United States https://www.cloudflare.com/terms/
Fingerprint, Inc. FingerprtJS is a service that collects device information on a job candidate’s and reference’s browser to provide a unique device identifier number. Crosschq uses the information obtained from FingerprintJS to detect if the same device has been used to complete multiple surveys, an indicator that the candidate may be “faking” their references. United States https://dev.fingerprint.com/docs/dpa-gdpr
Google, Inc. Crosschq’s team uses Google’s Workspace services for email, document storage, and other business services. United States

https://workspace.google.com/terms/05272021/ dpa_terms.html

Heap, Inc. Heap is a system used by our product team to better understand how users are using and interacting with our applications. We use this data to improve our product. United States https://assets.ctfassets.net/jicu8fwm4fvs/ 6AWQISW2unz8gv0mqnhGXj/2f230d661cb669f14c71 e747c049d566/DPA-contracts_heapanalytics.com.pdf 
HubSpot, Inc. Hubspot is a marketing automation software platform. Crosschq uses Hubspot to send emails to users about new features, product notifications and company updates. United States

https://legal.hubspot.com/dpa

 

Intercom, Inc. Intercom is a service that lets us easily communicate with our users. Crosschq uses it to provide in-app messaging and product update emails. United States https://www.intercom.com/legal/data-processing-agreement 
Lakera, Inc.

Lakera is a service that protects from AI prompt attacks and data loss. We use Lakera to secure Quin, our AI chatbot.

 

United States https://platform.lakera.ai/legal/dpa 
Mailgun Technologies, Inc. Mailgun Technologies, Inc. (“Mailgun”) is an email campaign service provider used within Crosschq to send notification emails to job candidates, team members, and references. The primary information Mailgun has access to is the email addresses of recipients of the emails and the content of the emails themselves.  United States https://www.mailgun.com/gdpr/
Merge, Inc. Crosschq's development team uses Merge's APIs to integrate with selected ATS and HRIS systems. United States

https://www.merge.dev/legal/data-processing-agreement#:~:text=Merge%20
will%20Process%20the%20Personal,by%20applicable%
20Data%20Protection%20Laws

MongoDB, Inc. MongoDB is the developer of mongoDB, an open-source database created to store documents. MongoDB provides a hosted service called Atlas, which helps Crosschq more easily and securely manage our mongoDB database instances directly within our AWS environment. United States https://www.mongodb.com/legal/dpa
Namsor SAS Crosschq uses Namsor to enrich a customer's candidate data. Namsor processing/enrichment is optional for each customer. United States

https://namsor.app/files_to_download_p/ NamSor_Data_Processing_Agreement_v007.pdf 

OpenAI LP

Crosschq uses OpenAI's ChatGPT services to help customers more easily query data stored in our databases.

 

United States

 https://openai.com/security 

Rollbar, Inc. Rollbar is a tool used by Crosschq’s DevOps team to monitor and debug portions of our services as they run within AWS. United States https://docs.rollbar.com/docs/data-processing-agreement 
Slack (a Salesforce subsidiary) Slack is a communications tool that is integrated into the Crosschq platform and can be used by customers to send notifications and other messages from Crosschq. United States https://slack.com/terms-of-service/data-processing
Solarwinds Worldwide, LLC Crosschq uses Solarwinds’ Papertrail application to aggregate and manage logs within our AWS environment. United States https://www.solarwinds.com/trust-center 
Twilio, Inc. Twilio’s platform provides the APIs that Crosschq uses to send emails and SMS messages to users. In addition, we use Twilio’s Segment.io product to assist in communicating with users within our applications. United States https://www.twilio.com/legal/data-protection-addendum
Zendesk, Inc. Zendesk is a provider of customer support software. We use Zendesk to log and prioritize customer issues, questions, and other support requests. United States https://www.zendesk.com/company/privacy-and-data-protection/#data-processing-agreement