Sub-processors
Last reviewed: 12 June 2026
This page lists the sub-processors that T4G Impact (NEMRAC Consulting S.L., Spain) engages to deliver the T4G Impact Roster platform. We will notify you of material changes to this list — for example the addition of a new sub-processor with access to your CV — by email and on-screen banner before the change takes effect, in accordance with Article 28(2) GDPR. If you object to a new sub-processor you may close your account before the change takes effect.
| Legal entity | Role | Country of processing | Transfer mechanism | DPA / privacy notice | Last reviewed |
|---|---|---|---|---|---|
| Amazon Web Services EMEA SARL | Cloud infrastructure — Amazon Cognito (authentication), DynamoDB (structured data), Amazon S3 (CV file storage). | European Union — Ireland (eu-west-1). | AWS GDPR Data Processing Addendum, incorporating the European Commission’s Standard Contractual Clauses for any onward transfers. | AWS GDPR Center / Privacy Notice | 12 June 2026 |
| Anthropic PBC | AI provider for CV parsing — the Claude Sonnet 4.6 model extracts structured fields (years of experience, languages, country, education, role categories). Contractually prohibited from training on submitted data under Anthropic’s GDPR-compliant Data Processing Agreement (Art. 28 GDPR). | United States (San Francisco, California). | EU–US Data Privacy Framework (and UK Extension) where Anthropic is self-certified at the time of transfer; otherwise the European Commission’s Standard Contractual Clauses, supplemented for UK personal data by the ICO International Data Transfer Addendum, supported by a Transfer Impact Assessment we maintain. | Anthropic Data Processing Agreement (Art. 28 GDPR) / Commercial Terms / Privacy Notice / Trust Center | 12 June 2026 |
| Google LLC | “Sign in with Google” OAuth identity federation for candidates who choose that sign-in method. Receives email address and federated subject identifier only. | United States, with global processing per Google’s policies. | EU–US Data Privacy Framework and Google’s Model Contract Clauses under the Google Data Processing Addendum. | Google DPA / Privacy Notice | 12 June 2026 |
Questions
Address questions about this list to privacy@t4glab.com or, for data-protection-specific questions, to dpo@t4glab.com.