Sub-processors
Last updated: 19 October 2026
This page lists the third-party providers that Spradley ApS uses to deliver the Service, what each one does, which personal data it processes and where. For how we handle personal data overall, see our Privacy Policy.
Providers we use to run the Service
Neon
Purpose. Database hosting. The production datastore for the Service.
Data processed. All platform data, including interview answers as written and in redacted form.
Location. EU (Frankfurt, Germany).
Vercel
Purpose. Hosting of the Spradley application, serverless functions and Speed Insights.
Data processed. Request data such as IP address, and page performance measurements.
Location. EU (Frankfurt, Germany) for application functions.
Cloudflare
Purpose. Hosting of the spradley.io website.
Data processed. Request data such as IP address, browser and the page requested.
Location. Cloudflare, Inc. (United States). Pages are served from the data centre nearest the visitor.
Google Cloud: Vertex AI
Purpose. AI model inference for the live interviewer, safety checks, answer classification, quote extraction and Brain.
Data processed. Live interview turns as written, including names, so the interviewer can follow the conversation. Analysis and reporting use redacted text.
Location. EU (Vertex AI EU multi-region and europe-west1, Belgium).
Google Cloud: Sensitive Data Protection
Purpose. Redaction of personal identifiers from stored answers.
Data processed. Answer text as written, submitted for redaction.
Location. EU (europe-west1, Belgium).
Google Cloud: Speech-to-Text
Purpose. Transcription of voice answers (primary provider).
Data processed. Respondent speech audio and the resulting transcript.
Location. EU multi-region.
Google Cloud Run
Purpose. The analysis engine that builds reports.
Data processed. Redacted answer text and the analysis built from it.
Location. EU (europe-west1, Belgium).
Mistral AI
Purpose. Transcription of voice answers when the primary provider fails.
Data processed. Respondent speech audio and the resulting transcript.
Location. EU company (France).
ElevenLabs
Purpose. Text to speech and the voice interviewer, for interviews with voice turned on.
Data processed. Interviewer question text; in voice interviews, respondent speech and transcripts.
Location. United States.
Resend
Purpose. Transactional email: interview invitations, reminders and account notifications.
Data processed. Recipient name and email address, and the content of the message.
Location. United States.
PostHog
Purpose. Product analytics. See Section 3(e) of the Privacy Policy for what is recorded on each surface.
Data processed. Page views and interview flow steps without a person profile; for Administrators, user ID, role, organisation and interactions.
Location. EU.
Integrations a Customer chooses to connect
These process data only when the Customer turns them on.
Slack
Purpose. Importing workspace members as employees and sending interview invitations as direct messages.
Data processed. Employee names, email addresses and Slack IDs, and the invitation message.
Location. United States.
Notion
Purpose. Exporting reports to a Notion page the Customer chooses.
Data processed. Report content, including redacted quotes. It is stored in the Customer's own Notion workspace.
Location. United States.
HiBob
Purpose. Importing employees, departments and positions from the Customer's HR system.
Data processed. Employee names, work email addresses, departments and positions.
Location. The Customer's own HiBob tenancy.
Notice of changes
We may add or replace sub-processors as the Service evolves. We will update this page and notify Customers of material changes by email. To request advance notice of changes, contact privacy@spradley.io.