top of page
Hire Match AI - Subprocessor & Vendor Inventory List
Effective Date: 10-22-25
Last Updated: 05-13-26
Hire Match, LLC ("Hire Match AI") uses a limited number of third-party service providers ("Subprocessors") to assist us in providing the Hire Match AI Services. These Subprocessors may process personal data on our behalf as described in our Data Processing Agreement.
Core Infrastructure & Service Subprocessors
These Subprocessors are directly involved in providing the core features and functionality of the Hire Match AI Services.
Business Operations Subprocessors
These Subprocessors are used to support our business operations. They do not process Candidate Data from the core Hire Match AI Services.
Subprocessor Name | Purpose of Processing | Location | Data Access Type | Risk Classification | Internal Business Owner | Compliance Tracking & AI Terms |
|---|---|---|---|---|---|---|
Stripe, Inc. | Payments, subscription, and billing processing | United States | Client payment details, billing addresses, transaction history | Important | CEO [Justin Press] | PCI-DSS Level 1 Certified; SOC 2 Type 2 Report verified annually. Verified: May 11, 2026. Contract renews: Monthly |
GoDaddy | Domain name registrar and corporate email hosting | United States | Corporate email communications (which may contain candidate/client PII) and DNS configurations; no direct access to the core platform database | Important | CEO [Justin Press] | SOC 2 Type 2 / WebTrust certifications verified. Verified: May 11, 2026. Contract renews: Monthly |
Wix.com Ltd. | Marketing, website hosting, and site traffic analytics | United States / Israel | Website visitor analytics, marketing metrics, contact forms | Low / Standard | CEO [Justin Press] | SOC 2 Type 2 Report and PCI DSS Level 1 verified; DPA signed. Verified: May 11, 2026. Contract renews: Monthly |
Appsmith, Inc. | Platform for building internal administration tools | United States | Internal administrative metrics and system logs | Standard | CTO [Hannah Quintal] | SOC 2 Type 2 Report verified; DPA signed. Verified: May 11, 2026. Contract renews: Monthly |
Page 1 of 1
Subprocessor Name | Purpose of Processing | Location | Data Access Type | Risk Classification | Internal Business Owner | Compliance Tracking & AI Terms |
|---|---|---|---|---|---|---|
Stripe, Inc. | Payments, subscription, and billing processing | United States | Client payment details, billing addresses, transaction history | Important | CEO [Justin Press] | PCI-DSS Level 1 Certified; SOC 2 Type 2 Report verified annually. Verified: May 11, 2026. Contract renews: Monthly |
GoDaddy | Domain name registrar and corporate email hosting | United States | Corporate email communications (which may contain candidate/client PII) and DNS configurations; no direct access to the core platform database | Important | CEO [Justin Press] | SOC 2 Type 2 / WebTrust certifications verified. Verified: May 11, 2026. Contract renews: Monthly |
Wix.com Ltd. | Marketing, website hosting, and site traffic analytics | United States / Israel | Website visitor analytics, marketing metrics, contact forms | Low / Standard | CEO [Justin Press] | SOC 2 Type 2 Report and PCI DSS Level 1 verified; DPA signed. Verified: May 11, 2026. Contract renews: Monthly |
Appsmith, Inc. | Platform for building internal administration tools | United States | Internal administrative metrics and system logs | Standard | CTO [Hannah Quintal] | SOC 2 Type 2 Report verified; DPA signed. Verified: May 11, 2026. Contract renews: Monthly |
Page 1 of 1
bottom of page