Digitspots Solutions ("we") uses the third-party service providers listed below to deliver the HR Onboarding service. Each sub-processor is engaged under a written contract that requires confidentiality and data protection standards equivalent to those we commit to in our Privacy Policy. This list is updated whenever we add or remove a sub-processor, with at least 30 days' notice to customers for material changes.
Infrastructure & Storage
| Sub-processor | Purpose | Data processed | Region |
|---|
| Amazon Web Services (AWS) | Cloud hosting, serverless compute (Lambda), DynamoDB, S3, SES, Bedrock, CloudWatch | All customer and employee data at rest and in transit | us-east-1 (United States) |
AI & Machine Learning
| Sub-processor | Purpose | Data processed | Region |
|---|
| Anthropic (via AWS Bedrock) | AI-generated HR assistant responses (Claude models) | Employee bot conversation messages; no persistent training on customer data | AWS us-east-1 |
Payments
| Sub-processor | Purpose | Data processed | Region |
|---|
| Stripe | International card payments and subscription billing | Billing name, address, card metadata (last 4 digits); full card data never touches our servers | United States / EU |
| Paystack | Nigerian, Ghanaian, Kenyan, and South African card and bank-transfer payments | Billing name, address, card/bank metadata; full card data never touches our servers | Nigeria |
Messaging & Communication
| Sub-processor | Purpose | Data processed | Region |
|---|
| Slack (Salesforce) | Slack bot message delivery to employees | Employee Slack user ID; bot conversation messages | United States / EU |
| Meta (WhatsApp Business API) | WhatsApp bot message delivery to employees | Employee phone number; bot conversation messages | EU / Global |
| Zoho | Zoho Cliq bot message delivery to employees | Employee Zoho user ID; bot conversation messages | Multi-region (EU / IN / AU / US) |
Error monitoring & Analytics
| Sub-processor | Purpose | Data processed | Region |
|---|
| Sentry | Application error monitoring and alerting | Stack traces, request metadata (tenant ID, user role); PII is scrubbed before transmission | United States |
| PostHog | Product usage analytics (funnel and feature adoption) | Anonymous event data with tenant ID; no individual employee PII | EU (self-hosted on AWS) |
Change notification
We will notify tenant administrators by email and in-product notice at least 30 days before adding a new sub-processor that processes personal data, or before materially changing how an existing sub-processor is used. If you object to a new sub-processor, please contact dpo@hronboarding.org within 30 days; we will work with you in good faith to resolve the concern.
Contact
Questions about this list or our data processing practices: dpo@hronboarding.org