Talara uses the third-party subprocessors listed below to provide the service. Each is bound by a data processing agreement with confidentiality and security obligations and may process personal data only on Talara's documented instructions. Subprocessors that provide AI features do not train their models on Talara customer data.
We provide at least 30 days' advance notice before adding a new subprocessor, as set out in our DPA, so customers can object. To be notified of changes to this page, contact privacy@talara.app. This page is referenced from our Privacy Policy.
Core subprocessors
Engaged for every customer, as an inherent part of the service.
| Subprocessor | Legal entity & country | Purpose | Data categories | Region | Safeguard |
|---|---|---|---|---|---|
| Amazon Web Services | Amazon Web Services, Inc. United States (Delaware) |
Application hosting (compute), managed database (Aurora), transactional email delivery (SES), secrets management | All application data in transit and at rest; recruiting emails | United States (us-east-1) | SCCs / DPF |
| Anthropic (Claude) | Anthropic PBC United States (Delaware) |
AI features and the Tally assistant | Recruiting content submitted to AI features (job descriptions, candidate summaries, transcripts, chat) | United States | SCCs; no training on customer data |
| Recall.ai | Hyperdoc Inc., d/b/a Recall.ai United States (Delaware) |
Meeting notetaker: joins scheduled interviews, records and transcribes | Interview audio, video and transcripts (voice and image of candidates and interviewers) | United States | SCCs (confirming) |
Recall.ai receives the most sensitive data category we process (recorded interviews). Its DPA is in the process of being confirmed; this row will be updated once that is finalized.
Optional subprocessors
Engaged only if you connect the integration. If you don't enable it, that subprocessor never receives your data.
| Subprocessor | Legal entity & country | Purpose | Data categories | Region | Safeguard |
|---|---|---|---|---|---|
| Google (Gmail, Calendar, Meet) | Google LLC United States (Delaware) |
Sending candidate email and scheduling interviews via a connected Google account | Email content, calendar events, meeting metadata | United States / EU (per customer account region) | SCCs |
| Microsoft (Outlook, Teams, Graph) | Microsoft Corporation United States (Washington) |
Sending candidate email and scheduling interviews via a connected Microsoft account | Email content, calendar events, meeting metadata | United States / EU (per customer account region) | SCCs / DPF |
| Zoom | Zoom Communications, Inc. United States (Delaware) |
Video interview hosting when a customer connects Zoom for scheduling | Meeting metadata; recordings only if the customer enables Zoom recording | United States | SCCs |
| WorkOS | WorkOS, Inc. United States (Delaware) |
Single sign-on (SSO) for customers who enable enterprise SSO | Login identity attributes (name, work email) | United States | SCCs |
| LinkedIn Corporation United States (Delaware), a Microsoft company |
OIDC sign-in for users who choose to sign in with LinkedIn | Login identity attributes (name, work email, profile ID) | United States | SCCs / DPF | |
| BambooHR | Bamboo HR, LLC United States (Utah) |
HRIS sync for customers who connect BambooHR | Employee record fields synced when a candidate is hired | United States | SCCs |
| HiBob | HiBob Ltd. United Kingdom |
HRIS sync for customers who connect HiBob | Employee record fields synced when a candidate is hired | EU / United Kingdom | SCCs |
| Slack | Slack Technologies, LLC United States (California), a Salesforce company |
Notifications and hiring-team collaboration for customers who connect Slack | Recruiting notification content posted to connected channels | United States | SCCs / DPF |
| Firecrawl | SideGuide Technologies, Inc., d/b/a Firecrawl United States (Delaware) |
Fetching public website content for customers who use career-site import tooling | Public URLs (no candidate PII) | United States | SCCs |
| Hunter.io | Hunter Web Services, Inc. United States (Delaware) |
Work-email enrichment for customers who enable enrichment | Name, company and domain, resolved to a professional email | United States | SCCs |
| GitHub | GitHub, Inc. United States (Delaware), a Microsoft company |
Engineering-team integrations for customers who connect GitHub | Repository and identity metadata for the connected integration | United States | SCCs / DPF |
| Indeed | Indeed, Inc. United States (Delaware) |
Job posting distribution for customers who connect Indeed | Job listing content; application data returned by Indeed | United States | SCCs |
Corporate subprocessors
Used for Talara's own sales and marketing operations. These do not process customer candidate data.
| Subprocessor | Legal entity & country | Purpose | Data categories | Region | Safeguard |
|---|---|---|---|---|---|
| HubSpot | HubSpot, Inc. United States (Delaware) |
Website CRM and demo-request email (processes Talara's own prospect and marketing contacts, not customer candidate data) | Demo-request name, work email, company | United States | EU-US Data Privacy Framework |
Questions
Questions about our subprocessors: privacy@talara.app. See also our Privacy Policy.