Sub-processor List
Effective: 3 August 2026
This page lists the sub-processors engaged by Group Everest Limited, trading as Qualify Nation, to process Customer Personal Data on behalf of business customers, as referred to in clause 4.2 of our Data Processing Addendum. Which sub-processors are engaged for a given customer depends on the Services and features that customer has contracted for and uses.
| Sub-processor | Purpose | Personal data processed | Location of processing |
|---|---|---|---|
| Anthropic | AI-powered features: CV parsing, analysis and improvement suggestions; skills analysis; interview practice; learning assistance and chat | CV content, interview answers, learner queries and related context submitted to AI features | United States |
| OpenAI | AI-powered features: transcription of recorded calls, chat and knowledge retrieval (embeddings), course-illustration generation | Recorded call audio, chat messages and spoken queries submitted to AI features | United States |
| ElevenLabs | AI voice agents (inbound and outbound calls) and text-to-speech narration | Call audio and transcripts; contact details and application context used to conduct AI-assisted calls | United States |
| Amazon Web Services | File storage (S3) and outbound candidate email delivery (SES) | Stored CV files; candidate email correspondence | London, United Kingdom (eu-west-2) |
| DigitalOcean | Managed database and platform hosting | Platform account and activity data | London, United Kingdom (lon1) |
| Cloudflare | Network security, TLS termination, DDoS mitigation and bot protection | IP addresses and traffic metadata | Global edge network |
| Brevo | Transactional email (invitations, notifications) | Name, email address, message content | European Union |
| Mailgun | Email delivery | Name, email address, message content | United States / Europe |
| Twilio | SMS and voice communications | Telephone numbers, message and call content | United States / Ireland |
| Dialpad | Cloud telephony: voice calls, SMS and call transcription | Telephone numbers, call audio and transcripts, message content | United States |
| Stripe | Payment processing | Billing and payment details | United States / global |
International transfers
Where a sub-processor processes Customer Personal Data outside the United Kingdom, the transfer is safeguarded by a mechanism valid under Chapter V UK GDPR — in each case the EU Standard Contractual Clauses as amended by the UK International Data Transfer Addendum, incorporated into our data processing agreement with that sub-processor, as described in clause 5 of the DPA.
Changes to this list
We will update this page and notify subscribed customers at least fourteen (14) days before adding or replacing a sub-processor, in accordance with clause 4.3 of the DPA. To subscribe to change notifications, or to raise an objection, email [email protected] from your registered partner contact address.