Sub-processors
Under Singapore's Personal Data Protection Act (PDPA S26 — Transfer Limitation), we disclose the third parties that process personal data on our behalf. Direct identifiers (national ID, passport numbers, contact numbers, and emails) are scrubbed before resume text is processed by external AI inference services. Contact dpo@roleradarai.com with any questions.
| Processor | Purpose | Data | Region | DPA |
|---|---|---|---|---|
| Supabase | Auth, Postgres, object storage | Account & profile data, parsed resumes | Singapore | Link |
| AWS Lightsail | Backend API hosting | Encrypted at rest & in transit | Singapore | Link |
| NVIDIA Corporation | AI inference & embeddings (NIM catalog) | Scrubbed resume text & job descriptions | US | Link |
| Google (AI Studio / Vertex AI) | AI model evaluation & LLM inference | Scrubbed resume text & job descriptions | US / Global | Link |
| Groq | Fast LLM inference / parsing | Scrubbed resume text & job descriptions | US | Link |
| OpenRouter | Multi-model LLM routing (burst/testing) | Scrubbed resume text & job descriptions | US | Link |
| Anthropic | Paid LLM fallback (Claude Sonnet/Opus) | Scrubbed resume text & job descriptions | US | Link |
| RunPod | Self-hosted LLM inference (vLLM) | Scrubbed resume text (in-memory only) | US | Link |
| Google Identity | OAuth authentication | Email address, full name | Global | Link |