Sub-processors
Last updated: 30 October 2026
To deliver the OneATS applicant tracking system and onboarding services, OneATS engages third-party infrastructure and sub-processing providers. We require all sub-processors to maintain high standards of security and data privacy consistent with our Data Processing Agreement.
Core Infrastructure Sub-processors
| Entity | Processing Purpose | Data Transferred | Hosting Region |
|---|---|---|---|
| Amazon Web Services (AWS) | Cloud application hosting, Postgres database, and file storage (resumes/documents) | Customer and candidate application data, uploaded CVs and documents | India (ap-south-1 Mumbai) |
| Amazon Web Services (SES) | Transactional email delivery (interview invites, application confirmations, reminders) | Candidate and user names, email addresses, notification contents | India (ap-south-1) |
| Razorpay Software Private Limited | INR payment gateway and GST tax subscription billing | Billing contact details, transaction references (payment details held securely by Razorpay) | India |
| Stripe, Inc. | USD international subscription payments | Billing contact details, transaction references (payment details held securely by Stripe) | United States |
Customer-Enabled Integrations
These external platforms only receive data when a company or interviewer explicitly enables the respective integration within their workspace:
| Platform | Purpose | Trigger Condition |
|---|---|---|
| Google Workspace (Google Calendar, Meet) | Two-way interview scheduling and automatic Google Meet video room generation | When an interviewer connects their Google account |
| Microsoft 365 (Outlook, Teams) | Two-way calendar synchronization and automatic Microsoft Teams meeting generation | When an interviewer or tenant connects their Microsoft 365 account |
| Zoom Video Communications | Automatic Zoom video meeting generation for interviews | When a company connects their corporate Zoom account credentials |
| Job Boards (Naukri, LinkedIn, Indeed) | Multi-channel job posting and candidate source tracking | When a company publishes a vacancy to these distribution channels (job metadata only) |
Notice of New Sub-processors
OneATS provides at least 30 days’ advance notice before onboarding any new sub-processor that handles Customer Personal Data, giving customers reasonable opportunity to review and object on valid data protection grounds.