Subprocessors
Last updated: October 2026
When an employer uses Omniteam for recruitment, Omniteam.ai B.V. processes candidate and interviewer data as a processor on the employer's behalf. We use the subprocessors below to provide the platform. Each one is bound by data processing terms under article 28 GDPR. LiveKit is used whenever an interview takes place in Omniteam's own interview room; it is not used for interviews held in Microsoft Teams, Google Meet, Zoom or Webex, or for transcripts added by hand. Recall.ai is used only if the employer uses the meeting notetaker. This list is published at omniteam.ai/en/subprocessors.
| Subprocessor | Purpose | Data | Location and transfer safeguard |
|---|---|---|---|
| Microsoft Ireland Operations Ltd (Microsoft Azure) | Hosting, database and file storage, search, messaging, email delivery, speech-to-text, document reading, AI processing (Azure OpenAI) and application monitoring | All platform data, including candidate data | EU: the Netherlands and Ireland (Azure West Europe for the application and files; Azure North Europe, Ireland, for the database); Azure OpenAI in Microsoft's EU Data Zone. Microsoft processes the data under its own data protection terms, including limited safety and abuse monitoring, and does not use it to train its models. Limited exceptions covered by Microsoft's Data Protection Addendum (Standard Contractual Clauses). |
| LiveKit, Inc. | Real-time audio and video for interviews held in Omniteam's own interview room (AI interviews and live interviews with an interviewer) and writing the audio recording to our Azure storage | Voice of candidates and interviewers in the room; camera image in transit if a camera is switched on (not recorded); participant display names and session metadata | US company. Live audio and video through LiveKit's EU region; the recording (audio only) is written directly to our Azure storage in the EU; service telemetry processed in the US. Standard Contractual Clauses (module 3) in LiveKit's data processing addendum and a transfer impact assessment; LiveKit is also certified under the EU-US Data Privacy Framework (non-HR data). LiveKit processes its own account and service telemetry data as an independent controller. |
| Recall.ai (Hyperdoc Inc.) | Meeting notetaker that records the audio of interviews held in Microsoft Teams, Google Meet, Zoom or Webex (only if the employer uses the notetaker) | Meeting audio, participant display names and speaking times | US company; EU region (Frankfurt); access from the US possible. Audio only, no transcription by Recall.ai; audio deleted from Recall.ai once we have retrieved it and in any case within 24 hours. Standard Contractual Clauses and a transfer impact assessment. Recall.ai processes its own account and usage data as an independent controller. |
Not subprocessors: Stripe processes billing data for Omniteam as its own controller. Meeting platforms, calendars and applicant tracking systems that an employer connects (for example Microsoft 365, Google Workspace, Zoom, Webex, Greenhouse or Workable) are the employer's own providers under the employer's agreements.
We inform customers at least 30 days before we add or replace a subprocessor, so they can object. If a subprocessor gives us shorter notice of a change in its own subprocessors, we inform customers without delay and, where possible, at least 10 days before the change. Questions: [email protected].