Legal · Sub-processors
Sub-processors
Third-party services that process Nulera customer data. We disclose every sub-processor by name, country, and purpose. New sub-processors are listed here before they go live.
Last updated: May 26, 2026. Email aguvaitkus@gmail.com for advance notice of changes or to request a Data Processing Agreement.
| Sub-processor | Purpose | Country |
|---|---|---|
| Vercel | Hosting, serverless functions, edge middleware | United StatesDPF-certified |
| Vercel Blob | File attachment storage (resumes, etc) | United StatesDPF-certified (Vercel) |
| Vercel Analytics | Page-view counts in cookieless mode (no IP retention beyond aggregation) | United StatesDPF-certified (Vercel) |
| Neon | PostgreSQL database (US-East region) | United StatesStandard Contractual Clauses available |
| Resend | Transactional email (verification, password reset, digest notifications, waitlist approvals) | United StatesDPF-certified |
| OAuth sign-in (account linking); Gmail send + Google Calendar (only when you connect Google in Settings) | Global infrastructureDPF-certified for EU data | |
| Groq | AI-powered drafts and prep suggestions. Processes job/contact text only when you explicitly invoke the AI features. | United States |
International data transfers
Customer data is stored in Neon's US-East region. Sub-processors located in the United States operate under the EU-US Data Privacy Framework (DPF), which the European Commission has determined provides an adequate level of protection for personal data transferred from the EU. For sub-processors not yet DPF-certified (or for non-EU data transfers), we rely on Standard Contractual Clauses where required.
Notice of changes
When we add a new sub-processor that processes customer data, we update this page before the change goes live and send notice to users who have requested advance notification. To subscribe, email aguvaitkus@gmail.com.
See also: Privacy Policy.