Data Processing Agreement & Sub-processors
Last updated: April 17, 2026
1. Roles
When you use Intervio to collect and process candidate data, you are the data controller and we are the data processor. This DPA sets out the terms on which we process personal data on your behalf.
2. Processing
We process personal data only on your documented instructions (e.g. to run the interview flow, transcription, AI scoring, storage, and retention). We assist you in meeting GDPR obligations (e.g. data subject rights, security, breach notification).
3. Sub-processors
We use the following sub-processors. We ensure each is bound by contract to protect personal data. We will notify you of changes and give you an opportunity to object where required by law.
- Hosting / infrastructure — Application and media storage (location as per your deployment).
- Transcription provider — Converts video/audio to text. Receives video and returns transcript.
- OpenAI — AI scoring; receives question text and transcript, returns rating and feedback. May process data outside EEA; we use appropriate transfer mechanisms.
- Email delivery — System SMTP or your organization SMTP for sending emails.
- Payment gateway — Subscription payments; we do not store full card data.
4. International transfers
Where sub-processors process data outside the EEA/UK we use Standard Contractual Clauses (SCCs), UK IDTA, or adequacy decisions as applicable.