ELAVEW
Subprocessors & International Transfers
Last updated: 31 August 2026
1. Purpose and scope
Back to contents1.1 Elavew Limited uses selected third-party service providers to operate, secure and provide the Elavew Platform. This notice provides transparency about material providers and international-transfer arrangements and should be read with Elavew’s Privacy Policy.
1.2 Where Elavew processes Personal Data on behalf of an Employer, certain providers may act as Elavew subprocessors. In other circumstances, Elavew may be the controller and use providers acting as processors. A provider’s legal role may therefore differ according to the processing activity; not every provider listed here is a subprocessor for every activity.
2. Subprocessors and processing providers
Back to contents| Provider | Role | Purpose | Data / services involved | Location / transfers |
|---|---|---|---|---|
| Supabase | Processor / Subprocessor, depending on the processing activity | Database, authentication, backend and storage services. | Platform accounts, records and files processed through those services. | UK, EEA, United States and/or other jurisdictions used by the provider and its authorised subprocessors, subject to applicable safeguards. |
| OpenAI | Processor / Subprocessor where applicable | Eligible AI Features, including AI-assisted transcription, Candidate Profile Summary and AI-assisted Candidate Review. | Depending on the Feature used: CV or application text, Candidate answers, transcripts, prompts or instructions, generated outputs, related technical metadata and, where transcription is requested, submitted audio or video media. | UK, EEA, United States and/or other jurisdictions used by the provider and its authorised subprocessors, subject to applicable safeguards. |
| Resend | Processor / Subprocessor where applicable | Transactional email delivery for account, application, security, support and billing communications. | Name, email address, email content and communication metadata, where applicable. | UK, EEA, United States and/or other jurisdictions used by the provider and its authorised subprocessors, subject to applicable safeguards. |
| Cloudflare | Processor / Subprocessor where applicable | Website hosting and delivery, security, edge infrastructure and video-streaming services. | Website and technical-request data, and video-streaming services where used. | UK, EEA, United States and/or other jurisdictions used by the provider and its authorised subprocessors, subject to applicable safeguards. |
2.1 OpenAI may use authorised onward subprocessors under its applicable data-processing arrangements. Elavew does not reproduce a provider’s full downstream subprocessor list in this notice.
3. Other material service providers
Back to contents| Provider | Role | Purpose | Data / services involved | Location / transfers |
|---|---|---|---|---|
| Stripe | Processor and/or independent controller, depending on the processing activity | Subscription billing, payment processing, invoicing and payment or fraud-related services. | Billing identity and contact information, transaction, subscription and payment-related information, as applicable. | UK, EEA, United States and/or other jurisdictions used by the provider and its authorised subprocessors, subject to applicable safeguards. |
3.1 Stripe may act in different capacities for different payment-related processing activities, including where it processes information independently for legal compliance, financial regulation, fraud prevention or risk management.
4. International transfers
Back to contents4.1 Relevant providers may process Personal Data in countries other than the United Kingdom. Where Elavew is responsible for a restricted international transfer, Elavew uses an appropriate transfer mechanism where required, including applicable UK adequacy regulations, EU adequacy decisions, the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, the EU Standard Contractual Clauses or another lawful safeguard.
4.2 The location of processing and availability of a transfer mechanism may depend on the relevant provider, service and processing activity. Elavew assesses whether supplementary contractual, technical or organisational measures are appropriate where required.
5. Changes and Employer processing
Back to contents5.1 Elavew may update its providers as the Platform evolves. The current version of this notice is published on this page; Elavew does not state a fixed notice period for provider changes in this notice.
5.2 Where Elavew acts as processor for an Employer, the appointment and use of subprocessors is governed by the applicable Data Processing Addendum and other applicable contractual terms. This notice does not replace those arrangements.
5.3 For further information about a particular Elavew-controlled processing activity or international transfer, contact Elavew using the details in the Privacy Policy. Requests are subject to legitimate confidentiality and security restrictions.