Legal Service providers
Service providers
- Version
- 1.1
- Effective
- 12 October 2026
- Governing law
- England and Wales
On this page ยท 10 sections
VERTX SERVICE PROVIDERS
This page lists the service providers that process personal data on behalf of VERTX Talent Ltd, as described in section 8 of our Privacy Policy. Each works under a written data processing agreement. We update this page when a provider is added or removed. Members of our own team are not service providers: some of them work outside the United Kingdom, and section 11 of our Privacy Policy explains how their access is protected.
"In use" means the provider handles personal data today. "Built, switched off" means the connection exists in our platform but is not turned on; no personal data goes to that provider until it is, and we will update this page when it is switched on.
1Hosting, database and storage
| Provider | What it does | Personal data | Where | Transfer safeguard | Status |
|---|---|---|---|---|---|
| Supabase | Database, sign-in and file storage | All account, profile, application and platform data | London, United Kingdom. A read-only backup copy is held in Australia until we delete it | None needed for the UK copy; the provider's data processing agreement (UK Addendum) for the backup copy | In use |
| Vercel | Hosts the website and application | All data passing through the platform, including IP addresses | Application runs in London; content delivery network worldwide; US company | UK Addendum or UK Extension to the EU-US Data Privacy Framework, as set out in the provider's data processing agreement | In use |
| Upstash | Rate limiting and short-lived caching | IP addresses and account identifiers | Outside the UK; US company | As set out in the provider's data processing agreement (UK Addendum or IDTA) | In use |
2Artificial intelligence
| Provider | What it does | Personal data | Where | Transfer safeguard | Status |
|---|---|---|---|---|---|
| Anthropic | Runs Remi and our other AI features: matching, scoring, summarising, reading CVs, in-platform assistance, and the automated safety checks of private messages and profile text | Profiles, CVs, assessment material, role details, messages sent to AI features, and private messages and profile text sent for a safety check | United States | UK Addendum to the standard contractual clauses in the provider's data processing agreement | In use |
The provider does not use the data we send to train its models.
3Identity, right to work and phone checks
| Provider | What it does | Personal data | Where | Transfer safeguard | Status |
|---|---|---|---|---|---|
| Veriff | Identity checks and, for British and Irish passports, right to work checks | Identity document, live selfie and the facial match between them | Estonia, European Union | UK adequacy regulations (EU) | In use |
| Twilio | Checks that a UK mobile number is a mobile line, and sends SMS codes | UK mobile number | United States | As set out in the provider's data processing agreement (UK Addendum or UK Extension to the EU-US Data Privacy Framework) | Built, switched off |
4Video, interviews and scheduling
| Provider | What it does | Personal data | Where | Transfer safeguard | Status |
|---|---|---|---|---|---|
| Mux | Hosts introduction videos and assessment screen recordings | Video and audio, and viewing statistics | United States | As set out in the provider's data processing agreement | In use |
| Daily | Video calls for assessment interviews and for interviews between companies and engineers on the contracting service, and recordings of them. An interview with a company is recorded only if both sides agree | Video, audio and names | United States | As set out in the provider's data processing agreement | In use |
| Cal.com | Interview booking | Name, email address and booking details | United States | As set out in the provider's data processing agreement | In use |
| Sign-in with Google, calendars and video meeting links | Name, email address and meeting details | United States and worldwide | UK Extension to the EU-US Data Privacy Framework or UK Addendum | In use | |
| Microsoft | Sign-in with Microsoft, our team's business email and meeting links | Name, email address and email content | United Kingdom and worldwide | UK Extension to the EU-US Data Privacy Framework or UK Addendum | In use |
5Email and communications
| Provider | What it does | Personal data | Where | Transfer safeguard | Status |
|---|---|---|---|---|---|
| Resend | Sends our emails, including sign-in emails | Name, email address and message content | United States | As set out in the provider's data processing agreement | In use |
6Assessment
| Provider | What it does | Personal data | Where | Transfer safeguard | Status |
|---|---|---|---|---|---|
| Judge0 | Runs assessment code in an isolated sandbox | The code a candidate writes | As set out in our agreement with the provider | As set out in the provider's data processing agreement | Built, switched off |
| GitHub | Reads the public repositories a candidate gives us, and sign-in with GitHub | Username, public repositories and activity | United States | As set out in the provider's terms | In use |
7Security, monitoring and analytics
| Provider | What it does | Personal data | Where | Transfer safeguard | Status |
|---|---|---|---|---|---|
| Sentry | Error monitoring, and masked session replay only with your consent | IP address, page addresses, error details and masked recordings | Germany, European Union | UK adequacy regulations (EU) | In use |
| PostHog | Product analytics, only with your consent | Pseudonymous identifiers and usage events | Germany, European Union | UK adequacy regulations (EU) | In use |
| Cloudflare | Bot protection on our forms | IP address and browser signals | Worldwide | As set out in the provider's data processing agreement | Built, switched off |
| Clearbit | Shows company logos | Your IP address and the company's web domain, when your browser loads a logo | United States | None: your browser loads the logo directly from the provider | In use |
| IPinfo | Tells us whether a connection comes from a home network or a data centre, to detect fraud | IP address | United States | As set out in the provider's data processing agreement | Built, switched off |
8Payment providers
We use payment providers to take card and Direct Debit payments from companies and to make international payouts to engineers. They are listed by category only. Write to privacy@vertxtalent.io if you would like their names.
9Public records we consult
We also look up public records, which are not service providers: Companies House (UK company and officer records) and public VAT registers, to verify companies.
10Questions
Write to privacy@vertxtalent.io for a copy of the safeguard for any provider.
VERTX Service Providers version 1.1, effective 12 October 2026, VERTX TALENT LTD.