Firstweek, Inc. uses the third-party services listed below to provide the Firstweek platform. Each subprocessor has been evaluated for the data it processes and is subject to contractual data protection obligations consistent with applicable law.
Services marked conditional only process data if your workspace has enabled that specific integration. All other services are used across all workspaces.
| Subprocessor | Purpose | Data Processed | Location |
|---|---|---|---|
| Amazon Web Services (AWS) | Cloud hosting, databases, and file storage | All application data | United States |
| Anthropic | AI inference for onboarding letter generation and in-letter Q&A chat | New-hire onboarding content, integration data retrieved from connected workspace sources, and new-hire chat questions submitted via the onboarding letter | United States |
| OpenAI | AI inference fallback for onboarding letter generation and in-letter Q&A chat (zero data retention — API data is not used to train models) | New-hire onboarding content, integration data retrieved from connected workspace sources, and new-hire chat questions submitted via the onboarding letter | United States |
| Stripe | Payment processing and subscription billing | Billing contact information and payment card data | United States |
| Resend | Transactional email delivery | Recipient email addresses and email body content | United States |
| Coresignal conditional | LinkedIn profile enrichment for new-hire onboarding context | New-hire LinkedIn profile URL; returns structured work history, education, and skills Only active when LinkedIn enrichment is enabled and the new-hire has a provided linked LinkedIn profile. | European Union |
| Google Analytics | Website usage analytics | Browser identifiers, IP addresses, and behavioral data | United States |
| Slack conditional | Workspace communication integration | Channel messages and workspace metadata | United States |
| GitHub conditional | Source code repository integration | Repository content and organization metadata | United States |
| Atlassian conditional | Jira and Confluence integration | Project tickets and documentation content | United States / European Union |
| Google (Workspace / Drive) conditional | Google Drive document integration | Document content and Drive metadata | United States |
| Notion conditional | Workspace documentation integration | Page content and workspace metadata | United States |
| HubSpot, Inc. conditional | CRM integration — deal history, pipeline definitions, and engagement summaries for new-hire onboarding context | Deal records (amounts, stages, outcomes), pipeline stage definitions, engagement note and call summaries (no email bodies), contact titles/departments, company industry and size Only active when the HubSpot integration is connected. No marketing contact lists, email bodies, or revenue forecast data are accessed. | United States |
| Jina AI | URL content extraction for onboarding link summarization | URLs of manually-added links submitted by workspace administrators | United States |
| Bugsnag | Application error monitoring and crash reporting | Anonymized error reports including exception type, message, and request context. Credentials and sensitive field values are redacted. No email addresses, names, or session data are transmitted. | United States |
We update this page when we add or remove a subprocessor. For material changes — adding a subprocessor that processes new categories of your data — we will post notice in the application before the change takes effect.
For questions about our subprocessor relationships or to request a Data Processing Agreement, contact [email protected].
We'll walk you through what Firstweek builds from your actual tools - tailored to your team, in 30 minutes.