Last updated: 24 April 2026
Last updated: 24 April 2026
1. Purpose of this page
This page lists the third parties ("Subprocessors") that TechMagic engages for the MagicScreen product to help deliver the Service. Each Subprocessor may process Customer Personal Data on our behalf under a written contract that imposes data protection obligations no less protective than those in our Data Processing Agreement.
The list is product-specific to MagicScreen. TechMagic's wider corporate vendors (used for the techmagic.co website and internal operations) are separate and do not process MagicScreen Customer Personal Data. Some infrastructure and personnel resources (notably development, support, and operations in Lviv, Ukraine) are shared with the wider TechMagic group under internal controls.
We publish this list to support our customers' transparency obligations under UK GDPR and EU GDPR.
2. How we manage Subprocessors
Each Subprocessor is subject to due diligence covering security, privacy, compliance, and operational maturity.
We have a signed data processing agreement with each Subprocessor.
International transfers are governed by the UK IDTA, UK Addendum, or EU Standard Contractual Clauses as appropriate, plus supplementary measures where required.
We review Subprocessor arrangements at least annually.
3. Notification of changes
We will provide at least 30 days' prior notice of any addition or replacement of a Subprocessor.
To receive notifications, email hello@techmagic.co with the subject line "Subscribe — Subprocessor updates" and the name of your organisation.
Customers may object to a new Subprocessor on reasonable data-protection grounds. See Section 9 of the DPA.
4. Current Subprocessors
4.1 Infrastructure and hosting
Subprocessor | Service | Location of Processing | Data categories |
|---|---|---|---|
Amazon Web Services EMEA SARL | Cloud hosting; primary data storage | United Kingdom or European Economic Area | All Customer Personal Data |
Cloudflare Inc. | DNS, WAF, DDoS protection, CDN | Global (traffic routing); EU/UK for Customer data | Technical data; authentication tokens |
4.2 AI and ML
Subprocessor | Service | Location of Processing | Data categories |
|---|---|---|---|
OpenAI Ireland Ltd. / OpenAI LLC | Large language model inference for screening assessments | EU (Ireland); United States (failover) | Candidate responses; role criteria — zero-data-retention configuration |
Additional LLM provider (where engaged for specific workflows) | Alternate language model inference | United States or EU | As above |
Speech-to-text transcription provider (only where audio or video screening is enabled by the Customer) | Speech-to-text transcription | United States or EU | Candidate audio recordings |
Specific provider names and regions are confirmed with each Customer at onboarding and updated here as new providers are engaged.
4.3 Product operations
Subprocessor | Service | Location of Processing | Data categories |
|---|---|---|---|
Stripe Payments Europe Ltd. | Payment processing | EU / UK | Billing and payment data (no candidate data) |
Application error-monitoring provider | Application error monitoring | EU | Technical logs (no candidate content) |
Infrastructure-monitoring provider | Infrastructure monitoring | EU | Technical logs; usage metadata |
4.4 Customer communication and support
Subprocessor | Service | Location of Processing | Data categories |
|---|---|---|---|
Customer-support and messaging provider | Customer support and messaging | United States or EU | Customer user contact data; support conversations |
Transactional email-delivery provider | Transactional email delivery | United States or EU | Customer user contact data |
4.5 Marketing and analytics (website only; no Customer or candidate data)
Aligned with the tools used across the wider TechMagic group (per the existing TechMagic Privacy Policy):
Subprocessor | Service | Location of Processing | Data categories |
|---|---|---|---|
Google Ireland Ltd. (Google Analytics) | Website analytics | EU / United States | Visitor technical data; website usage |
Pipedrive OÜ | CRM for sales follow-up on inbound enquiries | EU | Prospect and customer-user contact data |
Intuit Mailchimp | Marketing email delivery and list management | United States | Prospect contact data (opt-in only) |
4.6 Group internal processing
Processing entity | Role | Location |
|---|---|---|
TechMagic (Lviv operations centre), 108 Stryiska Street, 79026, Lviv, Ukraine | Product development, support, and operations personnel (acting on behalf of the MagicScreen processor entity) | Ukraine — personnel access production via encrypted remote sessions; no data is transferred for standalone processing in Ukraine beyond the access required to operate the Service |
5. Sub-Subprocessors
Our Subprocessors may engage their own sub-Subprocessors. Each Subprocessor is contractually required to flow down equivalent data protection obligations. Current sub-Subprocessor information is available from each Subprocessor's own trust or privacy pages.
6. Historical changes
Date | Change |
|---|---|
24 April 2026 | Initial publication. |
(Material additions and removals will be logged here going forward.)
7. Questions
For questions about Subprocessors, contact hello@techmagic.co.