Subprocessors
Transparency is the foundation of trust. Here we list every service provider that processes personal data within jobsuchi.ch — with location, purpose, and privacy guarantee.
| Service | Purpose | Location | Data categories | Privacy guarantee |
|---|---|---|---|---|
| Infomaniak | Hosting (servers, database, object storage, backups) and AI processing (LLM, vision) | Geneva, Switzerland (Infomaniak Network SA) | All application data, CVs, user profiles, sessions, encrypted backups | CH-FADP (revFADP), data processing agreement, data centres in Switzerland |
| AlpineAI | AI processing (LLM) | Switzerland | CV text, job descriptions (temporary, no training) | CH-FADP (revFADP), no data training |
| InnoGPT | AI processing (Claude models for cover letters, CV tailoring, company research) | Germany (Inno KI GmbH), servers in the EU | CV text, job descriptions, company names (temporary, no training) | EU GDPR, data processing agreement, no data training |
| Replicate | AI photo retouching (application photo; Flux and GPT-Image models) | USA (Replicate, Inc.) | Only the uploaded photo, no name, no contact details | EU Standard Contractual Clauses, data processing agreement, no data training |
| Stripe | Payment processing | USA | Email, payment amount, card info (never on our servers) | EU Standard Contractual Clauses, PCI-DSS Level 1 |
| Resend | Email delivery (sent via Ireland eu-west-1) | USA (account data, logs) | Email address, activation links | EU Standard Contractual Clauses |
| Umami | Web analytics (page views, events, anonymous) | EU (self-hosted, imamu.code-nexus.co) | IP address (hashed), device/browser, page views (no PII) | GDPR Art. 5, no cookies, 90-day retention |
| Sentry | Error tracking and performance monitoring | EU (self-hosted, sentry.code-nexus.co) | Error messages, stack traces (PII-scrubbed, no CV content) | GDPR-compliant, PII scrubbing enabled |