February 2025
To provide the Leapsome platform to our customers, we currently use the following subprocessors that process personal data in accordance with our DPA. You can find more details about how we process your personal data under https://www.leapsome.com/dpa.
Please note that depending on the use case for each subcontractor, the set of personal data processed can be quite limited (in some cases, it is only the IP address).
Furthermore, and depending on your use of our platform, we may use the following subcontractors as subprocessors that process personal data in accordance with our DPA.
OPTIONAL - only if you explicitly request additional software integrations
Merge API, Inc.
415 Mission Street, WeWork, Floor 37,
San Francisco, CA 94105
Integrations to third-party software solutions
OPTIONAL - only on specific instruction by you as Controller to provide additional functions supported by artificial intelligence within the software, including but not limited to Leapsome’s Copilot
1. OpenAI LP
Address: 3180 18th St, San Francisco, California 94110, USA
Contact person’s name, position and contact details: Jason Kwon, General Counsel, support@openai.com
Description of the processing: User input is used for smart recommendations by an artificial intelligence. Such user input may contain personal data such as names or email addresses.
Guarantees for third-country transfers: standard contractual clauses and transfer risk assessment.
2. turbopuffer Inc.
Address: 47 Park Ave, Ottawa ON, K2P 1B1, Canada
Contact: info@turbopuffer.com
Processing Purpose: turbopuffer Inc. provides vector database services and search capabilities for large datasets. This allows us to improve our system efficiency and enhance data processing speeds for our platform. All data will be processed in data centres located in the European Union (Frankfurt am Main, Germany).
Categories of Data Processed: vector embeddings, document metadata, and associated attributes for search and retrieval purposes, see also Leapsome DPA under Annex I (https://www.leapsome.com/dpa)
Nature of Processing: turbopuffer Inc. processes data for providing its services in accordance with our instructions and the terms of the DPA between us and turbopuffer Inc..
Data Subjects: For more information, please refer to Annex I of the Leapsome DPA (https://www.leapsome.com/dpa)
Retention Period: personal data will be retained for as long as necessary taking into account the purpose of the processing, and in compliance with applicable laws, including laws on the statute of limitations and Privacy Laws. For more information, please refer to Annex I of the Leapsome DPA (https://www.leapsome.com/dpa)
Security Measures: turbopuffer Inc. maintains security measures which are designed to protect the confidentiality, integrity, and availability of personal data. These measures are audited against the American Institute of Certified Public Accountants (AICPA) Trust Services Criteria for security and availability. For more information, see https://turbopuffer.com/docs/security.