Sub-Processors

HealthPass Sub‑Processor List

These suppliers process candidate or user personal data as part of the HealthPass service.

Microsoft Azure

Purpose: Cloud hosting, storage, compute

Region: Australia (region selected by Controller)

Postmark

Purpose: Email delivery to candidates/users

Region: USA

Cloudmersive

Purpose: Virus scanning for uploaded candidate documents

Region: Australia

IPInfo.io

Purpose: IP geolocation for security and fraud detection

Region: Global

KeyCDN

Purpose: CDN for static assets (may process user IPs)

Region: Global

Twilio

Purpose: SMS delivery to candidates/users

Region: Global

Limited-Scope Sub-Processors

These suppliers process only Controller business contact data (billing, support, CRM). They do not process candidate data.

Xero

Purpose: Invoice and billing management

Region: USA

Dext

Purpose: Receipt and expense management

Region: Global

Atlassian/JIRA

Purpose: Customer support ticketing

Region: Global

Calendly

Purpose: Demo and meeting scheduling

Region: USA

HubSpot

Purpose: Customer CRM

Region: USA

Integrations with third‑party systems (such as Salesforce or Deputy) use the Controller’s own accounts and credentials. These systems are not sub‑processors of HealthPass.

Non‑PII Technical Processors

These suppliers process no personal data. They handle only templates, assets, or system‑generated content.

ConvertAPI

PDF to PNG conversion - no personal data processed.

HERE Maps

Irish postcode lookup - no personal data processed.

DmarcDigests

Email domain monitoring - no candidate data.

Rewind Backups

GitHub backup Source code only - no PII.