Konfir uses certain processors to assist in providing Konfir’s services. A processor is a third party data processor engaged by Konfir who agrees to receive personal data from Konfir intended for processing activities to be carried out (i) on behalf of Konfir customers; (ii) in accordance with customer instructions as communicated by Konfir; and (iii) in accordance with the terms of a written contract between Konfir and the sub-processor.
Konfir maintains an up-to-date list of the names and locations of all of its processors. This list is below, or you can obtain a copy by contacting help@konfir.com.
Processor List: End-user information
Sub‐processor |
Types of data transferred |
Purpose for the data transfer |
Location |
Amazon Web Services |
- Marketing Data
- Technical Information
- User Account Information
- Verification Data
|
Hosting of the servers, database, load balancing of the application, server monitoring, back ups |
UK |
Experian group companies |
- Marketing Data
- Technical Information
- User Account Information
- Verification Data
|
Operational support (including project delivery, data delivery and data science/analysis), incident support and management (including recovery and back-up).
User Management
Cloud SaaS solution |
Global |
Fraud Finder |
|
Document processing to support delivery of our services |
UK |
Google |
- User Account Information
- Technical Information
- Verification Data
- Marketing Data
|
API ecosystem / API gateway; SIEM (security monitoring tool); SOAR (security tool for alerts and incidents); incidents affecting the services; global support team |
Ireland, USA, Global Support |
HCL Technologies |
- Technical Information
- User Account Information
- Verification Data
|
Deliver our support services |
India |
Hotjar |
- User Account Information
- Marketing Data
|
Improving our user experience |
Ireland |
Imperva |
- Verification Data
- User Account Information
|
Web Application Firewall (WAF) |
Global |
Intercom |
- User Account Information
- Verification Data
|
Customer support |
USA |
Kaseya |
- User Account Information
- Technical Information
- Verification Data
- Marketing Data
|
Backup Supplier |
UK |
Konfir Verify |
|
Deliver our services |
UK |
Loqate |
- Verification Data (received, not sent)
|
Deliver our services |
UK |
Make |
- Technical Information
- Verification Data
|
To automate and orchestrate recurring operational tasks |
USA |
OpenAI |
|
Deliver our services |
USA |
Okta (Not applicable to API clients) |
|
Supplier of identity management services and authentication for web services |
Germany, Ireland |
Slack |
|
Customer support |
UK |
Twilio / Sendgrid |
- User Account Information (name of customer account only)
- Verification Data (candidate first name, phone number, new employer name and new job title only)
- Technical Information
|
Deliver our services |
USA |
UT Tax |
|
Deliver our services |
UK |
Processor list: Customer information
Sub‐processor |
Types of data transferred |
Purpose for the data transfer |
Location |
Amazon Web Services |
- Marketing Data
- Technical Information
- User Account Information
- Verification Data
|
Hosting of the servers, database, load balancing of the application, server monitoring, back ups |
UK |
Experian group companies |
- Marketing Data
- Technical Information
- User Account Information
|
Operational support (including project delivery, data delivery and data science/analysis), incident support and management (including recovery and back-up).
Cloud CRM platform is used to manage client contacts, service requests, and records needed to deliver the services. |
Global |
Google |
- User Account Information
- Technical Information
- Verification Data
- Marketing Data
|
API ecosystem / API gateway; SIEM: Security monitoring tool; SOAR: Security tool for alerts and incidents |
Ireland, USA, Global Support |
HCL Technologies |
- Technical Information
- User Account Information
- Verification Data
|
Deliver our support services |
India |
Hotjar |
|
Improving our user experience |
Ireland |
Hubspot |
- User Account Information
- Technical Information
|
Customer relationship management |
EU |
Imperva |
- Verification Data
- User Account Information
|
Web Application Firewall (WAF) |
Global |
Intercom |
|
Customer Support |
UK |
Kaseya |
- User Account Information
- Technical Information
- Verification Data
- Marketing Data
|
Backup Supplier |
UK |
Make |
|
To automate and orchestrate recurring operational tasks |
USA |
Relevance AI |
|
Marketing activity automation |
EU |
Twilio / SendGrid |
- User Account Information
- Technical Information
|
Sending emails to our client users |
USA |
Webflow |
|
To contact prospective customers |
USA |
Data Type definitions
|
Types of data transferred
|
Example data
|
|
Marketing Data
|
Information used to identify and improve experience for users, such as cookies for preferences, website engagement, and product reviews
|
|
Technical Information
|
Metadata on outbound communications such as delivery and open status
|
|
User Account Information
|
Information about a client user such as Name, contact, session and device information. This does not include any candidate data.
|
|
Verification Data
|
Information contained within a verification including information provided to us by our customers and information obtained from our data partners, including personally identifiable information, banking transaction data, and employment information.
|
Please refer to our privacy notice here for a description of the types of personal data referred to in the table above.
Konfir also uses other third parties to assist in providing Konfir's services, who do so as separate controllers of the personal data we provide to them.
Third party controller list
|
Organisation
|
Konfir Entity (Controller)
|
Types of data transferred
|
Purpose for the data transfer
|
Controller's privacy policy
|
Location
|
|
Truelayer
|
Konfir UK
|
- Verification Data (received, not sent)
- User Account Information
|
Deliver our services
|
Privacy Notice
|
UK
|
|
HMRC
|
Konfir Verify
|
- Verification Data
- User Account Information
|
Deliver our services
|
Privacy Notice
|
UK
|
