Subprocessors
Last updated 8 October 2026
Resurface uses the providers below to run the service. Subprocessors process Customer Personal Data, meaning the resumes, job descriptions and results you send us, on our behalf, under our Data Processing Addendum. Each one is bound by written data protection terms.
To be told about changes, email office@bulldog-adv.com with the subject “Subprocessor updates”. Customers who have accepted the DPA are notified by email at least 30 days before a new subprocessor starts processing their data.
Subprocessors (process candidate data)
TypeSafe · TypeSafe AI, Inc.
- Purpose
- Scoring model (Jev): answers the screening questions for each resume. Zero data retention is on for our account since 8 October 2026: request content is deleted as soon as the answer is returned. TypeSafe runs Jev on AWS, Modal, Nebius and CoreWeave, which process prompts without storing them.
- Data
- Resume text and the screening questions
- Location
- United States
- Trains on our data
- No (source)
Cloudflare · Cloudflare, Inc.
- Purpose
- Fallback scoring model (Workers AI, Clef). Used only when TypeSafe is unavailable.
- Data
- Resume text and the screening questions
- Location
- Cloudflare global network
- Trains on our data
- No (source)
Anthropic · Anthropic, PBC
- Purpose
- Drafts screening questions from a job description (Claude).
- Data
- Job descriptions. Never resumes.
- Location
- Anthropic's own infrastructure; see its trust center
- Trains on our data
- No (source)
Neon · Databricks, Inc. (Neon, LLC)
- Purpose
- Database.
- Data
- Results (score, verdicts, quoted resume lines, resume hash) and rubrics
- Location
- United States (AWS us-east-1, Northern Virginia)
- Trains on our data
- Does not process data with models
Vercel · Vercel Inc.
- Purpose
- Application hosting and compute.
- Data
- All API and MCP requests, while they are processed
- Location
- United States (US East, Washington, D.C.)
- Trains on our data
- Does not process data with models
Providers for your account and our website
Resurface is the controller of this data, under our Privacy Policy. These providers do not receive resumes or job descriptions.
Clerk · Clerk, Inc.
- Purpose
- Sign-in and accounts for your team, including OAuth for MCP clients.
- Data
- Names, emails and sign-in details of your users.
Paddle · Paddle.com
- Purpose
- Payments for score packs, as merchant of record.
- Data
- Billing details. Card details go to the provider directly, never to us.
Microsoft Clarity · Microsoft Corporation
- Purpose
- Website analytics on public pages only.
- Data
- Anonymised clicks and scrolling, without cookies. Never runs on the dashboard, sign-in pages or the API.
Where data lives
- The application runs on Vercel in US East.
- The database runs on Neon in AWS us-east-1.
- Resume files and their full text are processed in memory and are not stored by Resurface.
See the trust center for how data moves through the service and how it is protected.