1. Overview
This page lists the third parties that Worqen OÜ engages to process Personal Data on its behalf as Sub-processors when providing the Worqen Service. This page is incorporated by reference into Worqen's Data Processing Addendum and Worqen's Privacy Policy.
We update this page whenever we add or replace a Sub-processor. Customers under the DPA may subscribe to change notifications at [email protected] (subject line "Sub-processor notifications"); we will give at least 30 days' advance notice of additions and replacements, except where shorter notice is required by law.
2. Current Sub-processors
| Sub-processor | Service provided | Categories of Personal Data | Location |
|---|---|---|---|
| Persona (Persona Identities, Inc.) | KYC and identity verification | Legal name, DOB, government-issued ID images, selfie / biometrics, address, sanctions / PEP screening data | United States; transfers under EU SCCs |
| Mailgun (Sinch / Mailgun Technologies) | Transactional and marketing email delivery | Email address, email content | United States; transfers under EU SCCs |
| Google LLC (Google Calendar and Google Meet) | Interview scheduling: calendar events, availability and Google Meet links | Interview title and time, participants' email addresses; for users who connect their Google Calendar, the account email, OAuth token and free/busy time blocks | United States; transfers under EU SCCs |
| Google Analytics (Google Ireland Limited / Google LLC) | Website and product analytics, loaded only with the visitor's analytics consent | Pages viewed, referrer and campaign parameters, device and browser details, approximate location derived from the IP address, product events with amounts and internal escrow record numbers | United States; transfers under EU SCCs |
| Microsoft Clarity (Microsoft Corporation) | Usability analytics (heatmaps and session replays), loaded only with the visitor's analytics consent | Clicks, scrolling, mouse movement and page views, content shown on the pages visited, device and browser details, approximate location derived from the IP address | United States; transfers under EU SCCs |
| Cloudflare (Cloudflare, Inc.) | Content delivery, DNS, protection against attacks and automated abuse (including Turnstile on the sign-up form), and the country of each request | IP addresses, request metadata (page address, headers, user agent) | Globally distributed; transfers under EU SCCs |
| Object storage provider (S3-compatible object storage) | Storage of avatars, job photos, CVs and message attachments | User-uploaded media and documents | EEA primary; replicated to additional regions |
| Sentry (Functional Software, Inc.) | Application error monitoring | Stack traces, request metadata, pseudonymous user identifiers, optional email | United States; transfers under EU SCCs |
| Solana RPC providers (Solana RPC) | Broadcasting and reading Solana blockchain transactions | Wallet addresses, transaction data (public on-chain by design) | Globally distributed |
| Hosting and infrastructure provider (hosting & infrastructure) | Compute, networking and storage that runs the Service | All Personal Data processed by the Service | EEA primary |
3. On-chain data and the Solana network
The Solana blockchain itself is not a Sub-processor of Worqen. It is a decentralised public ledger. Personal Data you choose to commit to the chain (such as a wallet address you transact from) becomes globally and permanently visible. We cannot delete or alter on-chain data. Treat the chain accordingly.
4. Worqen affiliates
Worqen OÜ does not currently use processing affiliates. If we incorporate affiliates in the future and use them as Sub-processors, they will be added to this page with the same notice mechanism.
5. Contact
Questions, change-notification subscriptions and objections under the DPA: [email protected].