Subprocessors
Subprocessor List
version July, 2026
How to read this list
PageUp engages third party subprocessors in two distinct ways, separated here to aid review.
Application subprocessors are inherent to delivering the PageUp service — hosting, email/SMS delivery, security, and candidate-facing analytics. Application subprocessors are part of the data flow for the PageUp application; depending on the provider, this may include processing of Client Data in transit, at rest, or both, in the locations indicated. Clients cannot use the applicable service without these providers in the data flow.
General business subprocessors support PageUp’s operations. They may process Client Data only where clients or candidates provide it to PageUp outside the application (e.g. support tickets, implementation, correspondence) and are included because PageUp’s definition of “Client Data” is broad enough to capture such information.
PageUp group subprocessors are PageUp affiliates supporting clients on a need-to-know basis, listed separately for completeness.
1. Application Subprocessors
Engaged as part of the PageUp service. Client Data flows to these providers in the ordinary course of delivering the application.
|
Processor |
Service |
Processing Details |
Location |
|
Core |
|||
|
Amazon Web Services, Inc |
SAAS / PAAS hosting platform
|
Hosts the PageUp application and stores Client Data at rest in the client’s nominated AWS region.
|
All regions. Data storage is localised to nominated client location |
|
SendGrid, Inc |
Email service – sends to recipient |
Processes outbound emails generated by the PageUp application for delivery to recipients, including recipient name, email address, sender, subject and message body. Subject and recipient email are retained for up to 30 days for diagnostic purposes. PageUp has no control over content. |
USA, EU |
|
MessageBird BV |
SMS service – sends to recipient |
Processes outbound SMS messages generated by customer users within the PageUp service for delivery to recipients, including recipient phone number and message content. Diagnostic metadata, including recipient phone number and message content, is retained for up to 30 days. PageUp has no control over SMS content. |
EU |
|
Mailgun |
Email service – sends to recipient (Recruitment Marketing Module only) |
Processes outbound emails generated by the PageUp application for delivery to recipients, including recipient name, email address, sender, subject and message body. Emails and metadata are retained for up to 30 days for diagnostic purposes. PageUp Clinch has no control over content. |
EU, USA, Australia |
|
Twilio |
SMS service – sends to recipient (Recruitment Marketing Module only) |
Processes outbound SMS messages generated by customer users within the PageUp Clinch Recruitment Marketing module for delivery to recipients, including recipient phone number and message content. Diagnostic metadata, including recipient phone number and message content, is retained for up to 30 days.. PageUp Clinch has no control over SMS content. |
All regions. Data storage is localised to USA |
|
Imperva, Inc |
Security – firewall protection |
Inbound traffic to the PageUp service is routed through Imperva’s security network, where it is inspected for threats before reaching PageUp’s hosting environment. |
USA, EU, SEA, Australia. Data storage is localised to nominated client location |
|
Wiz, Inc |
Security – cloud native application protection platform |
Continuously evaluates PageUp’s cloud environment for misconfigurations, vulnerabilities and threats. Access to candidate/client PI is limited to the extent required for security analysis (including scanning of data stores for sensitive data classification and posture analysis). |
EU, US, Australia |
|
Google, LLC |
Analytics |
Captures website and application visitor analytics, including page views, referrers, and session metadata such as IP address. |
Global |
|
Heap, Inc |
Analytics |
Captures user interaction data within the PageUp application — including page views, clicks, form interactions and session metadata such as IP address — to support product analytics and usage insights. |
EU, USA |
|
Microsoft, Inc |
Power Apps Integration Middleware |
Data Transfer between PageUp and other customer owned systems |
All Regions. Data storage is localised to nominated client location. |
|
Microsoft, Inc |
Azure – hosting and storage |
Stores email and name of candidates who subscribe to job ad alerts (legacy clients only). |
USA |
|
Optional / module-specific |
|||
|
Cronofy Limited |
Calendar integration |
Candidate/client PI from calendars for the purposes of providing calendar booking service. |
USA, UK, EU, Australia |
|
Rustici Software, LLC |
e-Learning services |
Applicable only to Learning customers, who may opt out of sending candidate PI when using this service. |
US |
|
Amazon Web Services, Inc |
AI Features |
As described in PageUp’s AI Transparency Statement. |
All Regions. Data storage is localised to nominated client location. |
Â
2. General Business Subprocessors
Support PageUp’s operations. These providers may process Client Data where it is provided to PageUp outside the application (e.g. support tickets, implementation, correspondence with PageUp staff).
|
Processor |
Service |
Processing Details |
Location |
|
Zendesk, Inc |
Customer service and technical support |
Candidate/client PI contained in account information or files created during support communications. |
Australia, USA, SEA. Data storage is localised to Australia. |
|
Salesforce, Inc |
Customer service (CRM) |
Client PI in account information/files. |
All regions. Data storage is localised to client location |
|
Atlassian Pty Ltd |
Customer service and technical support |
Candidate/client PI stored in Jira/Confluence if required for solving bugs and client reported problems. |
All regions. Data storage is localised to client location |
|
Monday.com Ltd |
Project management |
Client PI in account information/files |
EU, UK |
|
Google, LLC |
Google Workspace |
Client PI processed for internal business purposes via G-Suite products (e.g. G-Drive, Gmail). |
All regions. Data storage is localised to client location |
|
Slack Technologies, LLC |
Internal communications |
Client PI that may be contained in internal PageUp staff communications. |
USA |
|
Emapta Versatile Services, Inc |
Customer service, and product development |
Candidate/client PI contained in PageUp Application. |
Philippines |
|
Abnormal AI Inc |
Security – email security protection for PageUp staff emails |
Limited candidate/client PI contained in emails to PageUp staff. |
All regions. Data storage is localised to client location |
|
Darktrace Holdings Limited |
Security – email security protection for PageUp staff emails |
Limited candidate/client PI contained in emails to PageUp. |
All regions. Data storage is localised to client location |
|
Alexander Mann Solutions Limited |
Select implementations |
Certain client PI disclosed during implementation. Candidate/client PI (on a need-to-know basis). |
EU, USA, SEA, Australia – dependent on implementation location |
|
Remote Technology New Zealand Limited |
Customer Pre-Sales Management |
Candidate/client PI contained in PageUp Application and Client PI in account information/files |
New Zealand |
Â
3. PageUp Group Subprocessors
PageUp engages the following PageUp group entities on a need-to-know basis.
|
Processor |
Service |
Processing Details |
Location |
|
Clinch Technology Limited |
Client support – Recruitment Marketing module |
Candidate/client PI (on a need-to-know basis) |
EU |
|
PageUp People Inc |
Client support |
Candidate/client PI (on a need-to-know basis) |
USA |
|
PageUp People Limited |
Client support |
Candidate/client PI (on a need-to-know basis) |
UK |
|
eArcu Limited |
Client support |
Candidate/client PI (on a need-to-know basis) |
UK |
Cross-border transfers from the EEA/UK are made under the EU Standard Contractual Clauses available on request.
