Subprocessor List

Version: 1.0
Last Updated: October 1, 2025

This document provides a list of subprocessors engaged by HR Online Consulting LLC ("Processor") in connection with the provision of the InjexPro platform and related services.

This list applies to all Non-US customers and is referenced by the Data Processing Agreement (DPA).

1. Purpose

Subprocessors are third parties engaged by the Processor to support service delivery where such processing is necessary. All subprocessors are contractually bound to data protection obligations consistent with applicable data protection laws.

2. Authorized Subprocessors

2.1 Cloud Infrastructure & Hosting

Microsoft Azure

• Service: Cloud infrastructure, compute, storage, managed databases
• Purpose: Hosting and operation of the InjexPro application and databases
• Data Location: European Union
• Access to Personal Data: Yes (infrastructure level)

2.2 Authentication & Identity Providers

Microsoft Entra ID

• Service: Authentication and identity management
• Purpose: Secure user authentication
• Access to Personal Data: User identity data only

Google Identity Services

• Service: Authentication
• Purpose: User login via Google accounts
• Access to Personal Data: User identity data only

LinkedIn OAuth

• Service: Authentication
• Purpose: User login via LinkedIn accounts
• Access to Personal Data: User identity data only

2.3 Payment Processing

Stripe, Inc.

• Service: Payment processing and billing
• Purpose: Subscription management and invoicing
• Access to Personal Data: Limited (billing and payment-related data)
• PHI Access: No

2.4 Email & Communications

Resend

• Service: Transactional email delivery
• Purpose: Account notifications, billing communications
• Access to Personal Data: Limited (email address, message metadata)
• PHI Access: No

3. Subprocessor Management

• Subprocessors are selected based on security, reliability, and compliance standards.
• Data processing agreements are in place with all subprocessors where required.
• Access to Personal Data is limited to what is strictly necessary.

4. Updates to Subprocessors

The Processor may update this Subprocessor List from time to time.

If we add a new subprocessor, we will notify organization owners at least 14 days in advance via email. Continued use of the Services after such updates constitutes acknowledgment of the updated list.

5. Contact

Questions regarding subprocessors may be directed to: legal@injexpro.com