Sub-processors
Last updated: April 2026
HeyOrky uses the following third parties to deliver the Service. Each vendor is bound by a Data Processing Agreement that mirrors the protections in HeyOrky's Data Processing Agreement with customers.
| Vendor | Purpose | Data | Region |
|---|---|---|---|
| Amazon Web Services | Hosting infrastructure (ECS Fargate, RDS PostgreSQL, S3 for resumes and audio). | All customer data, candidate data, resumes, audio recordings. | United States (us-east-1) |
| Anthropic | Claude API for resume screening, interview evaluation, and email generation. Anthropic does not train on HeyOrky's API traffic. | Resume text, interview transcripts (text), evaluation context. No PII is sent in prompts beyond what is necessary for the evaluation. | United States |
| Resend | Transactional email delivery (magic-link, candidate emails). | Recipient email address, email subject and body content. | United States |
| Stripe | Payment processing for subscriptions, packs, and inline charges. | Customer billing email, organization name, payment metadata. Card data is held only by Stripe (never by HeyOrky). | United States |
Notice of changes
HeyOrky will give existing customers at least 30 days' notice before granting a new sub-processor access to customer data. Customers may object to a new sub-processor in writing by emailing legal@heyorky.ai.