Sub-processors
Last updated: November 5, 2026
When Kendor processes candidate data on behalf of a hiring organization (see our Data Processing Agreement), we use a small set of infrastructure providers as sub-processors. Each one is bound by a data-processing agreement with obligations equivalent to those we owe our customers. Our own infrastructure runs in the European Union.
Current sub-processors
| Sub-processor | Purpose | Data categories | Location / transfer mechanism |
|---|---|---|---|
| netcup GmbH | Hosting — application servers, database and the isolated code-execution environment (EU) | All platform data | Frankfurt, Germany (EU). German provider — no international transfer. |
| Amazon Web Services (S3) | Artifact storage — assessment workspaces, submissions, recordings, exports, uploaded images | Candidate artifacts and uploaded files | EU (Frankfurt, eu-central-1). Data resides in the EU; AWS is additionally certified under the EU–US Data Privacy Framework. |
| Amazon Web Services (CloudFront) | Delivering uploaded images — profile photos, organization logos, hackathon covers | Uploaded images | Stored in the EU (Frankfurt); copies are cached on AWS edge servers worldwide so pages load quickly. AWS is certified under the EU–US Data Privacy Framework; Standard Contractual Clauses apply. |
| Amazon Web Services (EC2) | Code-execution servers in the United States and Singapore, for performance: candidates and reviewers in the Americas and Asia-Pacific get a sandbox close to them, so the editor, terminal and preview respond quickly. Also, for the length of an event, the server that runs a hackathon’s virtual venue (Kendor’s own install of the open-source WorkAdventure software) in Frankfurt. | Workspace files, terminal sessions and preview traffic while a sandbox is running. Submissions, recordings and everything else that is kept are stored in the EU. For the venue: the participant’s name from Kendor, avatar position and proximity chat, held in memory and deleted with the server after the event. | Venue: Germany (Frankfurt, eu-central-1). Sandboxes: United States (Ohio, us-east-2) and Singapore (ap-southeast-1). Used for candidates located in the Americas (Ohio) or Asia-Pacific (Singapore), for organizations that choose one of those regions, and briefly when the EU servers are at capacity. Organizations can pin all of their sandboxes to the EU. AWS is certified under the EU–US Data Privacy Framework; Standard Contractual Clauses apply. |
| Mailgun (Sinch) | Transactional email — invitations, notifications, password resets | Names, email addresses, email content | EU region endpoint (processing and storage in the EU). Provider is US-headquartered; DPF certification and SCCs apply as a safeguard. |
| Cloudflare | DNS, CDN and security in front of the application; Turnstile bot checks on the signup and contact forms | Traffic metadata (IP addresses, request logs); browser signals evaluated by the Turnstile check | Global edge network. Certified under the EU–US Data Privacy Framework. |
| LiveKit | Real-time audio/video for live review sessions and for the proximity calls in a hackathon’s virtual venue — media transits their servers and is not stored | Call audio/video streams (ephemeral), pseudonymous participant identifiers, display names, connection metadata | Global edge network (media routes to the nearest server). US-headquartered; certified under the EU–US Data Privacy Framework (incl. UK and Swiss extensions). |
| Stripe | Card payments, subscriptions and invoices for organizations that pay for their plan online | Billing contact name and email address, company name, billing address and tax ID, card details (entered directly with Stripe, never seen by Kendor), payment and invoice history | United States (Stripe, Inc.). Certified under the EU–US Data Privacy Framework (incl. UK and Swiss extensions). |
| "Continue with Google" sign-in for hiring-team members who choose it (never for candidates) | Name, email address and Google account ID of the person signing in | Global. US-headquartered; certified under the EU–US Data Privacy Framework; Standard Contractual Clauses apply. | |
| Microsoft (Clarity) | Website analytics on the public marketing pages only — never in the app, assessments or interview rooms. Visitors in the EEA, UK and Switzerland are asked for consent first. | Clicks, scrolling and pages viewed, device and browser details, IP-derived region, analytics cookie identifiers. Form input is masked and never recorded. | United States. Microsoft is certified under the EU–US Data Privacy Framework; SCCs apply. |
| Anthropic | AI coding assistant (Claude Code) in the candidate terminal, and drafting a challenge project from a job description in the author's sandbox — only where the hiring organization enables it, and only under the organization's own Anthropic account | Assistant: workspace files and prompts the candidate sends to it, and its replies. Challenge drafting: the job-description text and project files in the author's sandbox — never candidate data. Kendor relays the traffic through its gateway and stores only token counts. | United States. Engaged by the hiring organization under its own agreement with Anthropic; Kendor acts as a conduit. Anthropic is certified under the EU–US Data Privacy Framework. |
| OpenAI | AI coding assistant (Codex) in the candidate terminal — only for assessments where the hiring organization enables it, and only under the organization's own OpenAI account | Workspace files and prompts the candidate sends to the assistant; the assistant's replies. Kendor relays the traffic through its gateway and stores only token counts. | United States. Engaged by the hiring organization under its own agreement with OpenAI; Kendor acts as a conduit. OpenAI is certified under the EU–US Data Privacy Framework. |
Changes to this list
We give hiring organizations at least 30 days’ advance notice before adding or replacing a sub-processor that processes candidate data, by email to organization owners. If you object on reasonable data-protection grounds and we cannot offer an alternative, you may terminate the affected service. The date above reflects the most recent change.
Questions
Questions about our sub-processors or to request notification for your organization: email hello@kendor.io.