TestGorilla Subprocessors
TestGorilla provides data-driven, bias-free pre-employment assessments to help businesses make better hiring decisions. Security, privacy, and compliance are core to its operations, including annual SOC 2 audits.
- Subprocessors
- 22
- Locations
- 5
- Categories
- 14
- Last scanned
| Name | Category | Purpose | Location | Data processed |
|---|---|---|---|---|
| Amazon Web Services ↗ | Cloud Infrastructure | Cloud and Data Infrastructure service provider to store customer and candidate data |
|
customer and candidate data |
| HubSpot ↗ | CRM | Customer communication (email and chat) |
|
Customer Data limited to name, email, address, page visits, title. No test or assessment data is stored. |
| Zendesk ↗ | Customer Support | Customer support infrastructure |
|
Personal data limited to e-mail address, first and last name. No test or assessment data is stored. |
| Brevo ↗ | Email communication |
|
Email address and name data only to send emails from application to customer and candidates | |
| Vimeo ↗ | Video | Video services |
|
Candidate and customer data for video services (limited to video data). No test or assessment data is stored. |
| OpenRouter ↗ | AI | AI model router and API gateway providing unified access to multiple LLM providers supporting various AI features |
|
Candidate data, including PII, may be transmitted via the gateway as part of prompts for inference. Data is not stored on OpenRouter's servers and is strictly not used for model training. |
| Zilliz ↗ | Database | Managed vector database (Milvus) for AI/ML similarity search and Retrieval Augmented Generation |
|
Stores vector embeddings derived from customer and candidate data, used to power AI-driven matching, search, and recommendation features. |
| Polytomic ↗ | Data Platform | Data integration platform used to sync data between operational systems and data warehouse |
|
May process all categories of customer and candidate personal data in transit; data is not persistently stored beyond sync metadata and logs. |
| Tavily ↗ | AI | AI-powered web search API used to retrieve external public information for AI features |
|
No customer or candidate personal data is transmitted; only generic, non-personal search queries are sent. |
| Snowflake ↗ | Data Warehouse | Cloud data warehouse used to store and query customer and candidate data for analytics, reporting, and internal product purposes |
|
Stores all categories of customer and candidate personal data, including test and assessment outcomes. |
| OpenAI Platform (API) ↗ | AI | AI API platform used for LLM-based processing in product features such as assessment scoring, content generation, and summarizing candidate information |
|
Candidate data, including PII contained in inputs, may be transmitted to the API as part of prompts for inference. Data is not stored on OpenAI's servers and is strictly not used for model training. |
| n8n ↗ | Automation | Workflow automation platform used to orchestrate internal data integrations between SaaS systems |
|
May process customer and candidate personal data flowing through automated workflows; data is not persistently stored beyond workflow execution logs. |
| Langfuse ↗ | AI | LLM observability and analytics platform used to monitor, trace, and debug LLM interactions across AI features |
|
Stores prompt and response traces, which may incidentally contain customer and candidate personal data passed through LLM calls. Used for internal observability only. |
| Hugging Face ↗ | AI | ML model hub and hosting platform used to run machine learning models supporting AI features |
|
Candidate data, including PII, may be transmitted to the platform as part of prompts for inference. Data is not stored on HuggingFace's servers and is strictly not used for model training. |
| Holistics ↗ | Analytics | Internal business intelligence platform used to query and visualize data from the data warehouse |
|
May surface customer and candidate personal data, including assessment outcomes, to authorized internal users for analytics and reporting purposes. |
| Groq ↗ | AI | AI inference engine used for LLM-based processing in product features |
|
Candidate data, including PII, may be transmitted to the API as part of prompts for inference. Data is not stored on Groq's servers and is strictly not used for model training. |
| dbt ↗ | Data Platform | Internal data transformation platform used to build analytics models on top of the data warehouse |
|
Processes customer and candidate data already present in the warehouse for internal analytics and reporting; dbt itself does not persistently store the data. |
| Veriff ↗ | Identity | Candidate identity verification service |
|
Personal data limited to name, photo, and government-issued ID document submitted for verification. Biometric data and raw ID documents are processed by Veriff and not retained by TestGorilla; only the final verification status is stored. |
| Affinda ↗ | AI | Resume parsing service that extracts structured information from candidate-uploaded resumes |
|
Data is limited to fields present in the resume (name, email, phone number, photo if included, work experience). No test or assessment data is stored. |
| Tavus ↗ | AI | Conversational AI service powering video-based AI interviews |
|
Candidate data is limited to the audio/video stream and interview transcripts generated during the interview session, used to drive the AI interviewer interaction. |
| Kombo ↗ | HR | Unified API used to synchronize candidate data and assessment results into customers' Applicant Tracking Systems |
|
Candidate data is limited to identifying details (name, email) and the assessment outcomes (scores, PDF reports) the customer configures to be pushed to their ATS. Kombo does not store the data but acts as a connector between TestGorilla and the customer ATS. |
| Chargebee ↗ | Billing | Subscription billing and management |
|
Personal data is limited to customer billing details (name, email, address, VAT details). No candidate or assessment data is stored. |
No subprocessors match your filters.
No changes recorded yet. Changes will appear here after the next scan detects updates.