Legal

Subprocessors

Last updated: 2026-06-04

This page lists every third-party service that processes personal data on TakeMeUp.cv's behalf, the data each one receives, where they process it, and the legal transfer mechanism if data leaves the European Economic Area. We update this list whenever the underlying processing changes and notify subscribers of material updates before they take effect.

For the legal basis on which we engage each subprocessor and the rights you have over how this data is handled, see our Privacy Policy.

Essential infrastructure

  • Anthropic PBC

    Privacy notice →
    Role
    AI inference for all AI features
    Data
    CV content (text + structured fields) at the moment you trigger an AI feature
    Location
    United States
    Transfer
    EU-U.S. Data Privacy Framework + DPA in force via Anthropic Commercial Terms (auto-incorporates EU SCCs)
  • Role
    Authentication, session management
    Data
    Email, password hash, MFA tokens, session metadata
    Location
    United States (hosted on AWS)
    Transfer
    EU-U.S. Data Privacy Framework + DPA in force via Clerk Master Services Agreement (auto-incorporates EU SCCs)
  • Stripe Payments Europe Ltd

    Privacy notice →
    Role
    Payment processing for one-shot purchases and PRO subscriptions
    Data
    Email, billing address, last 4 of card, transaction history
    Location
    Ireland (EU) + United States
    Transfer
    Stripe Ireland is the EU controller. DPA in force via Stripe Services Agreement (auto-incorporates EU SCCs for any US legs)
  • Role
    Postgres database (all persisted application data)
    Data
    Account, CV content, AI artifacts, payments, all other persisted state
    Location
    United Kingdom (AWS London region — eu-west-2)
    Transfer
    UK adequacy decision (EU Commission, valid through 2031). DPA in force via Neon Subscription Agreement (auto-incorporates EU SCCs + UK addendum for Neon US parent)
  • Role
    Application hosting, serverless functions, edge cache
    Data
    All HTTP traffic, request logs (without raw IPs — we hash before logging)
    Location
    European Union (Frankfurt — fra1, eu-central-1)
    Transfer
    EU resident for application. DPA in force via Vercel Customer Agreement (auto-incorporates EU SCCs + DPF for Vercel US parent)
  • Role
    CV photo storage
    Data
    CV photos uploaded by users
    Location
    United Kingdom (London region)
    Transfer
    UK adequacy decision (EU Commission, valid through 2031)

Transactional email

  • Role
    Transactional email (account confirmations, receipts)
    Data
    Recipient email address, message body
    Location
    European Union (Frankfurt)
    Transfer
    EU resident

Job-board data (queries only — no CV PII)

  • Role
    Job listings API (Market Pulse, Match)
    Data
    Job title + country query (no CV PII)
    Location
    United Kingdom
    Transfer
    UK adequacy decision (EU Commission)
  • Role
    Job listings API
    Data
    Job title + country query (no CV PII)
    Location
    European Union (Estonia)
    Transfer
    EU resident
  • France Travail (ex-Pôle Emploi)

    Privacy notice →
    Role
    Public French job board API
    Data
    Job title + country query (no CV PII)
    Location
    France (EU)
    Transfer
    EU resident
  • Bundesagentur für Arbeit

    Privacy notice →
    Role
    Public German job board API
    Data
    Job title + country query (no CV PII)
    Location
    Germany (EU)
    Transfer
    EU resident
  • RapidAPI Inc.

    Privacy notice →
    Role
    API proxy for Active Jobs DB and LinkedIn Jobs
    Data
    Job title + country query (no CV PII)
    Location
    United States
    Transfer
    DPF + SCCs (proxy, no DPA available — flagged for migration to direct integrations)

Public reference data (anonymous queries)

  • ESCO (European Skills, Competences, Qualifications and Occupations)

    Privacy notice →
    Role
    Occupation taxonomy and skill matching
    Data
    Anonymous occupation/skill lookup queries (no PII)
    Location
    European Union (EU Commission)
    Transfer
    EU resident
  • Role
    Salary benchmark statistics
    Data
    Anonymous aggregate queries (no PII)
    Location
    European Union (EU Commission)
    Transfer
    EU resident