Sub-processors
Who processes candidate data
| Sub-processor | What it does | Data it touches | Where | Transfer basis |
|---|---|---|---|---|
| Supabase (Supabase Inc., US) | Database, file storage, authentication | Everything: CVs, answers, contact details, decisions | EU | Standard Contractual Clauses, under Supabase's data processing addendum |
| Cloudflare (Cloudflare Inc., US) | Serves the application, edge compute, DDoS protection. Sends the emails candidates receive from rolefit.eu and forwards mail sent to rolefit.eu addresses | Data in transit; application logic runs at the edge. For email, candidate name, email address, message content | Global edge; data at rest stays with Supabase | Standard Contractual Clauses, under Cloudflare's data processing addendum |
| Anthropic (Anthropic PBC, US) | The model that reads the CV, writes the questions and scores the fit | CV text and answers, sent for processing | US | Standard Contractual Clauses, under Anthropic's commercial terms. Anthropic does not train its models on data submitted through the API |
| Resend (Resend Inc., US) | Sends the emails employers receive from Staffholm (sign-up, password, invitations), and is the backup route for candidate emails | Name, email address, message content | EU sending region | Standard Contractual Clauses, under Resend's data processing addendum |
Who processes customer data only
| Sub-processor | What it does | Data it touches | Where |
|---|---|---|---|
| Stripe (Stripe Payments Europe Ltd, Ireland) | Subscriptions and payment | Billing contact, company name, VAT number, payment method | EU/US, SCCs |
Stripe never touches candidate data. Card details never reach Staffholm at all —
payment happens on Stripe's own pages.
The one to watch
Anthropic is the sub-processor a buyer's legal team will ask about, because
"you send CVs to an AI company" is the sentence that worries them. Three things
need to be true and provable:
- Submitted content is not used to train models.
- Content is not retained beyond what is needed to return a response.
- The commercial terms say both, in writing, and we can show them.
Not sub-processors
- Zone — DNS and business email for Staffholm's own staff. No candidate data.
- GitHub — source code. No customer or candidate data.
Review
Reviewed whenever a provider is added or changed, and at least annually.
Last reviewed: 2026-09-08.