Sub-processors
Staffena uses the companies below to run the service. Each handles only what it needs to, and each is bound by a contract with terms at least as protective as the ones in our own agreement. We will tell customers before we add one.
Supabase
- What they do
- The database, the authentication service and file storage.
- Where
- Singapore (ap-southeast-1)
- What reaches them
- Everything a company puts in the product: employee records, leave, attendance, pay, documents and the audit trail.
Vercel
- What they do
- Runs the application and serves it.
- Where
- Global edge; application rendering in the region nearest the request.
- What reaches them
- Data in transit while a page is rendered. Nothing is stored there: the application keeps no database and no files of its own.
Resend
Not in use yet- What they do
- Sends the email the product generates and carries replies to the support desk.
- Where
- United States and European Union
- What reaches them
- The recipient’s address and the content of the message — a verification code, an invitation, a notice that a request was decided. No payslip figures are ever put in an email.
Anthropic
- What they do
- Answers the two questions the product asks a model: scoring a CV against an opening, and the in-product assistant.
- Where
- United States
- What reaches them
- Only what a prompt contains, and only when the company has switched the feature on. Pay never reaches a prompt — salary, payslips, advances, loans and claims are refused before the call is made — and a prompt is built only from rows the person asking could already read.
Paddle
Not in use yet- What they do
- Takes payment and issues invoices, as merchant of record.
- Where
- United Kingdom and European Union
- What reaches them
- The billing contact and what the company was charged. No employee data reaches them.
Nobody else. We do not sell data and we do not share it with advertisers. Two features ask a model a question — scoring a CV against an opening, and the in-product assistant — and both are off until a company switches them on. Pay is refused before such a call is made: salary, payslips, advances, loans and claims never reach a prompt, and a prompt is built only from rows the person asking could already read.