Trust
Sub-processors
Last updated: July 2026
Crumblelead works with a small number of vetted third-party services to run the platform and process data on behalf of our customers. Below is how those sub-processors break down by function, what personal data each category handles, and where it's processed. We notify customers at least 30 days before engaging any new sub-processor.
| Category | Purpose | Data categories | Location |
|---|---|---|---|
| AI processing | Reads and structures candidate information to power search and matching | Résumé text, candidate names, skills and experience, job descriptions | United States |
| Cloud hosting & database | Stores and runs the platform | All platform data, encrypted at rest | Singapore |
| Payment processing | Subscription billing | Billing name, email address, payment details | United States |
| Email delivery | Sends email you compose or authorise, plus account emails such as verification and invitations | Recipient addresses, email subject and body | United States, or your own provider |
| Security & content delivery | DDoS protection, TLS termination and content delivery | IP addresses, request metadata, device and browser information | Global edge locations |
| Candidate sourcing | Public professional-profile search to assist sourcing | Candidate names, job titles, company names | United States |
| Website analytics | Measures usage of our marketing site only | IP addresses, page views, device and browser information, no candidate or customer data | United States |
Need the full named list?
We share the complete, current list of named sub-processors, vendor by vendor, with customers and prospects under our Data Processing Agreement, along with our sub-processor change notifications. For that, or any question about how your data is processed, email [email protected].