This page lists, by category, the third-party services ("sub-processors") that may process personal data on Opaige's behalf in the course of operating the Service. Each is bound by a data processing agreement with terms equivalent to those described in our Privacy Policy. The specific vendor behind each category is available on request — see the note below the table.
| Category | Purpose | Data category | Jurisdiction |
|---|---|---|---|
| Cloud infrastructure & database | Application hosting, managed database, edge delivery, and encrypted object storage for the app and mirrored recordings. | All account, session, and scored-mock data; mirrored recordings. | United States |
| Voice AI infrastructure | Real-time voice AI that runs voice mock interviews, including transcription and post-call analysis. | Voice audio + transcript of voice mock interviews. | United States |
| Video AI infrastructure | Real-time conversational video AI that runs video mock interviews. | Video + voice of video mock interviews. | United States |
| Transactional email | Delivery of account and report emails (welcome, verify, password reset, scored report, weekly digest). | Email address; rendered email content. | United States |
| Payment processing | Billing and subscription management for paid Opaige plans. | Name, billing email, payment-method metadata (full card data is tokenised by the processor and never reaches Opaige). | United States |
The specific company behind each category above is disclosed on request to account holders, prospective enterprise customers under NDA, and supervisory authorities. Email privacy@opaige.com and we will provide the current named list. We keep the public page category-level because naming infrastructure vendors publicly serves no data-subject interest and exposes commercially sensitive choices.
We notify account holders by email at least 30 days before a new sub-processor is engaged or an existing one replaced, where reasonably practicable. You may object by contacting privacy@opaige.com — if the objection cannot be resolved we will work with you on an alternative or, where required, terminate the affected portion of the Service.
Several sub-processors are based in the United States. Transfers of personal data outside the UK/EEA are made under appropriate safeguards — Standard Contractual Clauses, the UK International Data Transfer Addendum, and (where applicable) the EU-US Data Privacy Framework certification of the vendor.