# Security & data processing

EU-hosted storage, AI processing overview, subprocessor list, and standard DPA downloads for RecruitmentAds.com procurement review.

Canonical: https://recruitmentads.com/security

[← Back to home](https://recruitmentads.com/)

## At a glance

- Customer workspaces are logically separated. Other customers cannot access your materials.
- Core project data is stored on EU infrastructure (AWS Ireland, Supabase Frankfurt, EU VPS).
- We do not use customer data to train our own AI models.
- External AI providers are used only for features you select (text, image, video, voice).
- The Service creates recruitment marketing assets from vacancy and brand inputs, not candidate screening, ranking, or hiring decisions.
- Standard DPA, subprocessor list, and processing overview are available below.

## Core platform storage

Primary customer data locations. Feature-specific AI providers are listed under subprocessors.

| System            | Purpose                                | Location                  |
| ----------------- | -------------------------------------- | ------------------------- |
| AWS eu-west-1     | Media and render storage               | Ireland                   |
| Supabase EU       | Authentication and database            | Frankfurt                 |
| EU VPS (RunCloud) | Templates, metadata, and job-agent app | EU, datacenter on request |

## Download trust pack

Standard templates for procurement review. Not customer-specific: your company details are added when you sign a pilot or subscription agreement. For the full document index, see [Legal & compliance](https://recruitmentads.com/legal).

[Data & Processing Overview](https://recruitmentads.com/trust/data-and-processing-overview.pdf)

[Inputs, storage locations, AI features, retention, and customer responsibilities.](https://recruitmentads.com/trust/data-and-processing-overview.pdf)

[Download PDF ↓](https://recruitmentads.com/trust/data-and-processing-overview.pdf)

[Subprocessor List](https://recruitmentads.com/trust/subprocessor-list.pdf)

[Third-party providers by feature, location, and training position.](https://recruitmentads.com/trust/subprocessor-list.pdf)

[Download PDF ↓](https://recruitmentads.com/trust/subprocessor-list.pdf)

[Standard Data Processing Agreement](https://recruitmentads.com/trust/data-processing-agreement.pdf)

[Article 28 DPA template, executed with your pilot or subscription agreement.](https://recruitmentads.com/trust/data-processing-agreement.pdf)

[Download PDF ↓](https://recruitmentads.com/trust/data-processing-agreement.pdf)

The standard DPA is a template for review. It is executed when you sign a pilot or subscription agreement. For a countersigned copy, email [\[email protected\]](https://recruitmentads.com/cdn-cgi/l/email-protection).

## Subprocessors

Not every provider is used for every project. It depends on the features you select. See the [full subprocessor list (PDF)](https://recruitmentads.com/trust/subprocessor-list.pdf) for retention notes, underlying model details, and training positions.

| Provider                  | Purpose                                       | Location                       |
| ------------------------- | --------------------------------------------- | ------------------------------ |
| Amazon Web Services (AWS) | Media storage and infrastructure              | Ireland (eu-west-1)            |
| Supabase                  | Authentication and database                   | Frankfurt (eu-central-1)       |
| EU VPS (RunCloud)         | Templates, metadata, job-agent app            | EU                             |
| Cloudflare                | DNS, CDN, and network security                | Global network                 |
| OpenAI API                | Text processing and analysis (when selected)  | May involve non-EEA processing |
| Google Gemini / Imagen    | Text and image processing (when selected)     | May involve non-EEA processing |
| fal.ai                    | AI image and video generation (when selected) | May involve non-EEA processing |
| ElevenLabs                | Voice-over generation (when selected)         | May involve non-EEA processing |
| Stripe                    | Payments and billing                          | Provider infrastructure        |
| Resend                    | Transactional email                           | Provider infrastructure        |
| Firecrawl                 | Job URL retrieval and parsing                 | Provider infrastructure        |
| Brandfetch / Logodog      | Public brand asset lookup                     | Provider infrastructure        |

## Contact

Privacy, DPA, and subprocessors: [\[email protected\]](https://recruitmentads.com/cdn-cgi/l/email-protection#a8d8dac1dec9cbd1e8dacdcbdaddc1dcc5cdc6dcc9ccdb86cbc7c5)

Support: [\[email protected\]](https://recruitmentads.com/cdn-cgi/l/email-protection#c1b2b4b1b1aeb3b581b3a4a2b3b4a8b5aca4afb5a0a5b2efa2aeac)

[← Back to legal overview](https://recruitmentads.com/legal)