Sub-processors
Last reviewed: 12 June 2026
This page lists the sub-processors that T4G Lab (NEMRAC Consulting S.L., Spain) engages to deliver the T4G Roster platform. We will notify you of material changes to this list — for example the addition of a new sub-processor with access to your CV — by email and on-screen banner before the change takes effect, in accordance with Article 28(2) GDPR. If you object to a new sub-processor you may close your account before the change takes effect.
| Legal entity | Role | Country of processing | Transfer mechanism | DPA / privacy notice | Last reviewed |
|---|---|---|---|---|---|
| Amazon Web Services EMEA SARL | Cloud infrastructure — Amazon Cognito (authentication), DynamoDB (structured data), Amazon S3 (CV file storage). | European Union — AWS Europe (Spain) Madrid, eu-south-2. | AWS GDPR Data Processing Addendum, incorporating the European Commission’s Standard Contractual Clauses for any onward transfers. | AWS GDPR Center / Privacy Notice | 12 June 2026 |
| Anthropic PBC | AI provider for CV parsing — the Claude Sonnet 4.6 model extracts structured fields (years of experience, languages, country, education, role categories). Contractually prohibited from training on submitted data under the Anthropic Commercial Terms. | United States (San Francisco, California). | EU–US Data Privacy Framework where Anthropic is self-certified at the time of transfer; otherwise the European Commission’s Standard Contractual Clauses (Module 2), supported by a Transfer Impact Assessment we maintain. | Commercial Terms / Privacy Notice / Trust Center | 12 June 2026 |
| Google LLC | “Sign in with Google” OAuth identity federation for candidates who choose that sign-in method. Receives email address and federated subject identifier only. | United States, with global processing per Google’s policies. | EU–US Data Privacy Framework and Google’s Model Contract Clauses under the Google Data Processing Addendum. | Google DPA / Privacy Notice | 12 June 2026 |
Questions
Address questions about this list to privacy@t4glab.com or, for data-protection-specific questions, to dpo@t4glab.com.