Legal
Last updated May 2026. We maintain this list and provide 30 days advance notice of any additions or changes.
Change notifications: We will email your account's registered address at least 30 days before adding or changing any subprocessor. You may object to changes by notifying legal@anyinterview.to within 30 days of notification. For more detail on how we work with subprocessors, see our Data Processing Agreement.
| Subprocessor | Purpose | Location | Data Processed |
|---|---|---|---|
| Amazon Web Services (AWS) | Cloud infrastructure — compute, storage, database, and networking | United States (us-east-1, us-west-2); EU (eu-west-1) for EU-residency customers | All Customer Data, including recordings, transcripts, and account metadata |
| OpenAI | AI transcription processing and competency scoring | United States | Interview audio (for transcription) and transcript text (for scoring). No data retained for model training without opt-in. |
| Stripe | Payment processing and subscription billing | United States | Billing contact information and transaction records. No payment card data is processed by AnyInterview. |
| Cloudflare | Content delivery network, DDoS protection, and DNS | Global (data processed at edge nodes; no Customer Data stored) | Network traffic metadata only. Cloudflare does not receive transcript or recording content. |
| Twilio SendGrid | Transactional email delivery (interview invitations, notifications, receipts) | United States | Participant email addresses, interview invitation content, and event notification data |
| Datadog | Application performance monitoring, error tracking, and operational logging | United States | Anonymized event logs, system metrics, and error traces. Logs are scrubbed of PII before ingestion. |
Where personal data originating in the European Economic Area (EEA), United Kingdom, or Switzerland is transferred to subprocessors located outside those regions, such transfers are governed by the European Commission's Standard Contractual Clauses (SCCs) or equivalent transfer mechanisms. AnyInterview has executed SCCs or equivalent agreements with all subprocessors processing EEA personal data.
All subprocessors are required to maintain security standards at least equivalent to those described in our Data Processing Agreement. AnyInterview conducts annual due diligence reviews of subprocessors, including review of their compliance certifications (SOC 2, ISO 27001, or equivalent) and data processing agreements.
This is the current subprocessor list as of May 2026. No subprocessors have been added or removed since January 1, 2026.
Our DPO responds to all data processing inquiries within 2 business days.
Email dpo@anyinterview.to →