Filter results

Clear filters
Related services
Subprocessor type
iCIMS Affiliates

Last Modified: March 27, 2024

Subprocessor List

View or export the full iCIMS subprocessor list without filtering capabilities here.

The following legal entities are engaged by iCIMS, Inc. and its subsidiaries, excluding SkillSurvey, Inc. (collectively, iCIMS“), and are authorized to process personal data for iCIMS services. These subprocessors are identified below by the iCIMS service(s) they assist in supporting (collectively, the “iCIMS Talent Cloud”). 

The following legal entities are engaged by iCIMS, Inc. and its subsidiaries, including SkillSurvey, Inc. (collectively SkillSurvey), and are authorized to process personal data for SkillSurvey services. 

*All Talent Cloud Services includes the following iCIMS services: Applicant Tracking, Career Sites, Marketing Automation, Candidate Relationship Management, Connect, Digital Assistant, Language Assessment, Offer Management, Opportunity Marketplace, Onboarding, Talent Cloud AI, Test Builder, Text Engagement, Video Interviews, Video Studio. All Talent Cloud Services excludes connectors, integrations, and other third-party products or services that are optional and selected by our customers.

*All Talent Cloud Services includes the following iCIMS services: Applicant Tracking, Career Sites, Marketing Automation, Candidate Relationship Management, Connect, Digital Assistant, Language Assessment, Offer Management, Opportunity Marketplace, Onboarding, Talent Cloud AI, Test Builder, Text Engagement, Video Interviews, Video Studio. All Talent Cloud Services excludes connectors, integrations, and other third-party products or services that are optional and selected by our customers.

*All SkillSurvey Services includes Reference, Source, Post-Hire, Career Readiness, and Credential OnDemand.

No results

iCIMS Talent Cloud Subprocessors

 
Amazon Web Services, Inc.
AWS Hosting
Purpose: Cloud hosting, transcription
Description of Processing:

AWS provides a network of connected servers that host iCIMS services. AWS provides scalable resources to make iCIMS services, applications, and websites accessible.

See more: https://aws.amazon.com/privacy/

Related services:
Processing regions:
  • United States
  • EU
  • Canada
  • United Kingdom
Categories of transferred data:
  • All Categories
AWS Services
Purpose: File conversion, virus scanning
Description of Processing:

AWS is used to support document file conversion and virus scanning within iCIMS’ Document Management System.

See more: https://aws.amazon.com/privacy/

 

Related services:
Processing regions:
  • United States
  • EU
  • Canada
Categories of transferred data:
  • Contact information
  • Education and skills
  • Employment information
  • Personal identification
  • Professional experience and affiliations
  • Resume data
  • Social media
Auth0, Inc.
Purpose: Identity access management
Description of Processing:

Auth0 is an authentication and authorization platform that allows for secure access controls within iCIMS services.  

See more: https://auth0.com/privacy 

Related services:
Processing regions:
  • United States
  • EU
  • Canada
Categories of transferred data:
  • Authentication or authorization information
Cronofy Limited
Purpose: API platform used for calendar synchronization
Description of Processing:

Cronofy provides a scheduling platform used for calendar synchronization.  

See more:  https://www.cronofy.com/privacy/  

Related services:
Processing regions:
  • United States
  • EU
Categories of transferred data:
  • Contact information
  • Personal identification
Daxtra Technologies, Ltd
Purpose: Resume parsing, redaction, and searching capabilities
Description of Processing:

Daxtra provides accurate resume parsing, redaction, and searching capabilities. Personal data is not stored for resume parsing. 

See more: https://www.daxtra.com/resources/daxtra-group-privacy-policy/ 

Related services:
Processing regions:
  • United States
  • EU
  • Canada
Categories of transferred data:
  • Contact information
  • Education and skills
  • Employment information
  • Personal identification
  • Professional experience and affiliations
  • Resume data
  • Social media
Forethought Technologies, Inc.
Purpose: Automated customer support and support chat services
Description of Processing:

Forethought Technologies provides automated answers to common customer questions using artificial intelligence trained with iCIMS data (knowledge base articles, anonymized historical support tickets) and relevant knowledge and suggestions provided by iCIMS. Personal data is not collected or stored unless a customer includes it in a support ticket or support chat, and it is only temporarily stored for 24 hours before being anonymized.  

See more: https://forethought.ai/privacy-policy/ 

Related services:
Processing regions:
  • United States
Categories of transferred data:
  • Browsing information
  • Contact information
  • Employment information
  • Personal identification
GlobalLogic, Inc.
Purpose: Outsourced customer support
Description of Processing:

GlobalLogic provides reliable customer support for iCIMS services. GlobalLogic remotely accesses data only and does not store data. GlobalLogic resources would never access customer data without a request/authorization from the customer. 

See more:  https://www.globallogic.com/gdpr/ 

Related services:
Processing regions:
  • India
Categories of transferred data:
  • Data would only be accessed for support purposes
Google, LLC
Google Cloud Platform
Purpose: Cloud Hosting
Description of Processing:

Google Cloud Platform provides a network of connected servers that host iCIMS Career Sites for a very limited number of customers only.  

See more:  https://policies.google.com/privacy?hl=en-US 

Related services:
Processing regions:
  • United States
Categories of transferred data:
  • All Categories
Apigee
Purpose: API Management Solution
Description of Processing:

Google Apigee provides a scalable API program to facilitate interactions between applications. No data is stored.  Apigee is a Google entity.  

See more: https://docs.apigee.com/api-platform/faq/privacy-security-settings 

Related services:
Processing regions:
  • United States
  • EU
Categories of transferred data:
  • All Categories
Google DialogFlow
Purpose: In-service chatbot
Description of Processing:

Google DialogFlow provides conversational interfaces that better user experiences for existing iCIMS customers. Google Dialogflow is not a subprocessor for new customers.  

See more:  https://policies.google.com/privacy?hl=en-US 

Related services:
Processing regions:
  • United States
Categories of transferred data:
  • Audio analysis
  • Browsing information
  • Contact information
  • Employment information
  • Personal identification
Google reCAPTCHA
Purpose: In-service spam and abuse prevention
Description of Processing:

Google provides an in-service service called reCAPTCHA to detect and block spam and abusive traffic for iCIMS Services. 

See more: https://policies.google.com/privacy?hl=en-US 

Related services:
Processing regions:
  • United States
Categories of transferred data:
  • Personal identification
Google Search
Purpose: In-service search engine
Description of Processing:

Google provides an in-service search engine for iCIMS services.  

See more:  https://policies.google.com/privacy?hl=en-US

Related services:
Processing regions:
  • United States
Categories of transferred data:
  • All Categories
Intercountry ICB
Purpose: Candidate language assessment
Description of Processing:

Intercountry provides a language evaluation service to overcome linguistic and cultural barriers throughout the hiring process. Intercountry remotely accesses data only. 

See more: https://www.intercountry.com/rgdp  

Related services:
Processing regions:
  • EU
Categories of transferred data:
  • Education and skills
Looker Data Sciences, Inc.
Purpose: Provides analytics and data visualization capabilities
Description of Processing:

Looker Data Science provides in-service analytics and data visualization for iCIMS customers. Looker does not store personal data.  

See more:  https://cloud.google.com/terms/looker/dpst  

Related services:
Processing regions:
  • United States
  • EU
Categories of transferred data:
  • Browsing information
  • Employment information
  • Personal identification
Mailgun Technologies, Inc.
Purpose: API that is used to track, send, and receive in-service emails
Description of Processing:

Mailgun is a reliable email service provider used to track, send, and receive emails within iCIMS services. iCIMS follows common industry best practices around email deliverability in attempting to deliver email messages for 72 hours. Emails that bounce (cannot be delivered) after 72 hours are deleted, and the recipient email address gets added to the suppression list so subsequent emails will be blocked.  

See more:  https://www.mailgun.com/privacy-policy/ 

Related services:
Processing regions:
  • United States
Categories of transferred data:
  • Contact information
  • Education and skills
  • Employment information
  • Personal identification
  • Professional experience and affiliations
Message Systems, Inc.
Purpose: (d.b.a SparkPost) API that is used to track, send, and receive in-service emails
Description of Processing:

Message Systems is a reliable email service provider used to track, send, and receive emails within iCIMS services. iCIMS follows common industry best practices around email deliverability in attempting to deliver email messages for 72 hours. Emails that bounce (cannot be delivered) after 72 hours are deleted, and the recipient email address gets added to the suppression list so subsequent emails will be blocked.  

See more:  https://www.sparkpost.com/policies/privacy/ 

Related services:
Processing regions:
  • United States
  • EU
Categories of transferred data:
  • Contact information
  • Education and skills
  • Employment information
  • Personal identification
  • Professional experience and affiliations
Microsoft, Inc.
Azure
Purpose: Cloud hosting and disaster recovery
Description of Processing:

Microsoft cloud hosting is a network of connected servers that host some of iCIMS services.  

Microsoft processes data exclusively in the EU for the following services: Applicant Tracking, Onboarding, Offer Management.   

Microsoft provides disaster recovery capabilities for the following services: Applicant Tracking, Onboarding, Offer Management, Connect. 

See more:  https://www.microsoft.com/en-us/trust-center/privacy/gdpr-overview 

Related services:
Processing regions:
  • United States
  • EU
Categories of transferred data:
  • All Categories
Microsoft Search
Purpose: In-service search engine
Description of Processing:

Microsoft provides searching capabilities within iCIMS services. 

See more:  https://www.microsoft.com/en-us/trust-center/privacy/gdpr-overview 

Related services:
Processing regions:
  • United States
  • EU
Categories of transferred data:
  • All Categories
MongoDB, Inc.
Purpose: Cloud database
Description of Processing:

MongoDB provides reliable and scalable storage capabilities for some iCIMS services. The document model maps to the objects in your application code, making data easy to work with. Ad hoc queries, indexing, and real time aggregation provide powerful ways to access and analyze your data. Limited personal data, including contact information, is processed and stored.  

See more:  https://www.mongodb.com/cloud/trust/compliance/gdpr

Related services:
Processing regions:
  • United States
  • EU
Categories of transferred data:
  • Browsing information
  • Contact information
  • Personal identification
  • User account information
Outsourcia
Purpose: Customer support
Description of Processing:

Outsourcia provides reliable customer support for some of iCIMS services, for customers in the EU only. Outsourcia remotely accesses data only and does not store data. Outsourcia resources only access customer data upon a request/authorization from the customer.   

See more: https://www.outsourcia.com/gdpr-compliance/policy  

Related services:
Processing regions:
  • Madagascar
Categories of transferred data:
  • Contact information
  • Employment information
  • Personal identification
OwnBackup, Inc.
Purpose: Salesforce backup storage
Description of Processing:

OwnBackup provides backup storage for Salesforce data, which contains customer support ticket information. These backups do not include attachments. 

See more: https://www.ownbackup.com/privacy-policy/ 

Related services:
Processing regions:
  • United States
Categories of transferred data:
  • Browsing information
  • Employment information
  • Personal identification
Rev.com, Inc.
Purpose: Video transcriptions, closed captioning
Description of Processing:

Rev.com provides professional video transcriptions and closed captioning services. Only used in US hosted workspaces.  

See more:  https://www.rev.com/about/privacy 

Related services:
Processing regions:
  • United States
Categories of transferred data:
  • Personal identification
Salesforce.com, Inc.
Purpose: Ticketing and customer support
Description of Processing:

Salesforce provides infrastructure for customers and applicants to file support tickets. Candidate personal data is not collected or stored unless included by a customer in a support ticket. 

See more: https://www.salesforce.com/company/privacy/ 

Related services:
Processing regions:
  • United States
Categories of transferred data:
  • Browsing information
  • Contact information
  • Employment information
  • Personal identification
SumoLogic, Inc.
Purpose: Audit log retention and analytics
Description of Processing:

SumoLogic provides a log aggregator to facilitate ingestion, aggregation and search of application and system logs. 

See more: https://www.sumologic.com/privacy-statement/  

Related services:
Processing regions:
  • United States
  • EU
Categories of transferred data:
  • Browsing information
  • Employment information
Twilio, Inc.
Twilio SMS
Purpose: Texting to SMS carriers
Description of Processing:

Twilio is a SMS service provider for sending text messages to candidates and applicants. 

See more:  https://www.twilio.com/legal/privacy 

Related services:
Processing regions:
  • United States
Categories of transferred data:
  • Contact information
  • Employment information
  • Personal identification
Twilio MFA
Purpose: Texting to support multifactor authentication
Description of Processing:

For Applicant Tracking customers, Twilio is used to support multifactor authentication in the following services: Applicant Tracking, Opportunity Marketplace, Career Sites, and Candidate Relationship Management. 

See more:  https://www.twilio.com/legal/privacy 

Related services:
Processing regions:
  • United States
Categories of transferred data:
  • Contact information
  • Personal identification
SendGrid
Purpose: Automated email sending
Description of Processing:

Twilio is an email service provider that supports automated sending.   

See more:  https://www.twilio.com/legal/privacy 

Related services:
Processing regions:
  • United States
Categories of transferred data:
  • Contact information
  • Personal identification
UiPath, Inc.
UiPath Automation
Purpose: In-service automation
Description of Processing:

UiPath provides in-service automation enhancements that are optional and purchased separately. The customer determines the automation rules and data involved.  

UiPath does not store personal data for longer than 24 hours.  

See more: https://www.uipath.com/legal/trust-and-security/privacy-policy  

Related services:
Processing regions:
  • United States
Categories of transferred data:
  • Data would only be accessed for automation authorized by the customer
Cloud Elements
Purpose: API platform used to integrate to HCM solutions
Description of Processing:

Cloud Elements is a scalable API integration platform used to create a unified application ecosystem. Cloud Elements receives customer data only when the customer elects to integrate with other specific third parties. 

See more: https://www.uipath.com/legal/trust-and-security/privacy-policy 

Related services:
Processing regions:
  • United States
  • EU
Categories of transferred data:
  • All Categories
Visier, Inc.
Purpose: Data analytics and visualization
Description of Processing:

Visier provides data analytics and visualization for iCIMS customers.  

See more:  https://www.visier.com/privacy/  

Related services:
Processing regions:
  • United States
  • EU
  • Canada
Categories of transferred data:
  • Education and skills
  • Employment information
  • Personal identification
  • User account information
Vonage Holdings Corp.
Purpose: Text messaging automation and video streaming
Description of Processing:

Vonage provides video streaming services and an SMS API that enables text communications within the iCIMS platform. Call Detail Records are stored, which contain the phone number and any information entered by a candidate in the message body of SMS (which could contain personal data). 

See more:  https://www.vonage.com/legal/privacy-policy/  

Related services:
Processing regions:
  • United States
Categories of transferred data:
  • Contact information
  • Employment information
  • Personal identification
Workato, Inc.
Purpose: API Integration platform
Description of Processing:

Workato is a scalable API integration platform used to create a unified application ecosystem. Workato retention periods are configurable by the customer during implementation

See more: https://www.workato.com/legal/services-privacy-policy

Related services:
Processing regions:
  • United States
  • EU
  • India
Categories of transferred data:
  • All Categories
Zendesk, Inc.
Purpose: Ticketing service provider for customer support
Description of Processing:

Zendesk provides infrastructure for customers and applicants to file support tickets.  

For new customers, Zendesk is only a subprocessor for Video Interviews, Language Assessment, and Test Builder.  

See more: https://www.zendesk.com/company/privacy-and-data-protection/  

Related services:
Processing regions:
  • United States
Categories of transferred data:
  • Browsing information
  • Contact information
  • Personal identification
 

SkillSurvey Subprocessors

 
DocuSign, Inc.
Purpose: E-Signature Integration
Description of Processing:

DocuSign integrates with SkillSurvey services to provide electronic signature functionality for references, applicants, and hospital affiliation contacts.  

See more: https://www.docusign.com/privacy/  

Related services:
Processing regions:
  • United States
Categories of transferred data:
  • Contact information
  • Forms that require signature
  • Personal identification
Forethought (SKS)
Purpose: Automated customer support and support chat services
Description of Processing:

Forethought Technologies provides automated answers to common customer questions using artificial intelligence trained with iCIMS data (knowledge base articles, anonymized historical support tickets) and relevant knowledge and suggestions provided by iCIMS. Personal data is not collected or stored unless a customer includes it in a support ticket or support chat, and it is only temporarily stored for 24 hours before being anonymized.  

See more: https://forethought.ai/privacy-policy/ 

Related services:
Processing regions:
  • United States
Categories of transferred data:
  • Browsing information
  • Contact information
  • Employment information
  • Personal identification
Google reCAPTCHA
Purpose: (d.b.a reCAPTCHA) In-service spam and abuse prevention
Description of Processing:

Google provides an in-service service to detect and block spam and abusive traffic for iCIMS Services. 

See more: https://policies.google.com/privacy?hl=en-US 

Related services:
Processing regions:
  • United States
Categories of transferred data:
  • Personal identification
Harbinger Group, Inc.
Purpose: Development Contractor
Description of Processing:

Harbinger Group assists with service development for SkillSurvey services.  

See more:  https://www.harbingergroup.com/privacy-policy/  

Related services:
Processing regions:
  • United States
  • India
Categories of transferred data:
  • Browsing information
  • Contact information
  • Employment information
  • Personal identification
Hevo Data, Inc.
Purpose: Data Pipeline Platform
Description of Processing:

Hevo Data integrates with SkillSurvey pulls data from SkillSurvey databases and transfers it to a central reporting database. 

See more: https://hevodata.com/privacy/ 

Related services:
Processing regions:
  • United States
Categories of transferred data:
  • All Categories
Microsoft, Inc.
Purpose: (d.b.a Azure) Cloud hosting
Description of Processing:

Microsoft Azure provides a network of connected servers that host SkillSurvey services. 

See more:  https://www.microsoft.com/en-us/trust-center/privacy/gdpr-overview 

Related services:
Processing regions:
  • United States
Categories of transferred data:
  • All Categories
OwnBackup, Inc.
Purpose: Salesforce backup storage
Description of Processing:

OwnBackup provides backup storage for Salesforce data, which contains customer support ticket information. These backups do not include attachments. 

See more: https://www.ownbackup.com/privacy-policy/ 

Related services:
Processing regions:
  • United States
Categories of transferred data:
  • Browsing information
  • Employment information
  • Personal identification
Ping Identity Corporation
Purpose: Single-Sign-On
Description of Processing:

Ping Identity is an identity management platform that allows customers to implement Single Sign On functionality for its users.

See more: https://www.pingidentity.com/en/legal/privacy.html

Related services:
Processing regions:
  • United States
Categories of transferred data:
  • Authentication or Authorization Information
Salesforce.com, Inc.
Purpose: Ticketing and customer support
Description of Processing:

Salesforce provides infrastructure for customers and applicants to file support tickets. Candidate personal data is not collected or stored unless included by a customer in a support ticket.  

See more: https://www.salesforce.com/company/privacy/ 

Related services:
Processing regions:
  • United States
Categories of transferred data:
  • Browsing information
  • Contact information
  • Employment information
  • Personal identification
SumoLogic, Inc.
Purpose: Audit log retention and analytics
Description of Processing:

SumoLogic provides a log aggregator to facilitate ingestion, aggregation and search of application and system logs. 

See more:  https://www.sumologic.com/privacy-statement/ 

Related services:
Processing regions:
  • United States
  • EU
Categories of transferred data:
  • Browsing information
  • Employment information
Twilio, Inc.
Twilio SMS
Purpose: Texting to SMS carriers
Description of Processing:

Twilio is a SMS service provider for sending text messages to candidates and applicants. 

See more:  https://www.twilio.com/legal/privacy 

Related services:
Processing regions:
  • United States
Categories of transferred data:
  • Contact information
  • Employment information
  • Personal identification
SendGrid
Purpose: Automated email sending
Description of Processing:

Twilio is an email service provider that supports automated sending.   

See more:  https://www.twilio.com/legal/privacy 

Related services:
Processing regions:
  • United States
Categories of transferred data:
  • Contact information
  • Personal identification
Workato, Inc.
Purpose: API Integration platform
Description of Processing:

Workato is a scalable API integration platform used to create a unified application ecosystem. Workato receives customer data only when the customer elects to integrate with other specific third parties. Workato does not store customer data.   

See more: https://www.workato.com/legal/services-privacy-policy 

Related services:
Processing regions:
  • United States
Categories of transferred data:
  • Browsing information
  • Contact information
  • Employment information
  • Personal identification
Zendesk, Inc.
Purpose: Ticketing service provider for customer support
Description of Processing:

Zendesk provides infrastructure for customers and applicants to file support tickets.  

See more: https://www.zendesk.com/company/privacy-and-data-protection/  

Related services:
Processing regions:
  • United States
Categories of transferred data:
  • Browsing information
  • Contact information
  • Personal identification
 

Subprocessors for Professional Services

 
EPI-USE America, Inc.
Purpose: Outsourced support used to integrate HCM solutions
Description of Processing:

EPI-USE provides reliable support for integrating the Customer’s HCM Vendor with iCIMS services 

See more: https://www.epiuse.com/privacy-policy/  

Related services:
Processing regions:
  • United States
  • South Africa
Categories of transferred data:
  • Data would only be accessed for HCM integration purposes
GlobalLogic, Inc.
Purpose: Outsourced professional services
Description of Processing:

GlobalLogic provides reliable professional services for implementing iCIMS services. GlobalLogic resources would not access customer data without acknowledgment from the customer. GlobalLogic resources are granted role-based access to the customer’s data for which they are assigned as a project resource, and their access is promptly disabled upon completion of the project. GlobalLogic does not store any customer data. 

See more:  https://www.globallogic.com/gdpr/ 

Related services:
Processing regions:
  • United States
  • Canada
  • India
Categories of transferred data:
  • Data would only be accessed to assist with implementation of iCIMS services
Harbinger Group, Inc.
Purpose: Outsourced support used to integrate HCM solutions
Description of Processing:

Harbinger Group provides reliable support for integrating the Customer’s HCM Vendor with iCIMS services. Harbinger does not store any customer data.

See more: https://www.harbingergroup.com/privacy-policy/

Related services:
Processing regions:
  • United States
  • India
Categories of transferred data:
  • Data would only be accessed for HCM integration purposes
HireClix, LLC
Purpose: Outsourced professional services
Description of Processing:

HireClix provides reliable professional services for implementing iCIMS services. HireClix resources would not access customer data without acknowledgment from the customer. HireClix resources are granted role-based access to the customer’s data for which they are assigned as a project resource, and their access is promptly disabled upon completion of the project. HireClix does not store any customer data. 

See more: https://www.hireclix.com/privacy 

Related services:
Processing regions:
  • United States
Categories of transferred data:
  • Data would only be accessed to assist with implementation of iCIMS services