AirTA Sites legal
Sub-processors
Every company that processes personal data for AirTA Sites, what it does, what it receives, and where.
Current Sub-processors
As of 11 November 2026. Data we hold is stored in Japan; "Where" is where each company processes it.
Vercel
Vercel Inc.
- Does
- Hosting: serves every site and runs the application; stores uploaded images, video files and CVs (CVs and raw recordings in private storage); renders job videos on short-lived machines
- Receives
- Everything a visitor sends to a site passes through it; request logs keep no form contents
- Where
- Tokyo region
- Based in
- United States
Supabase
Supabase, Inc.
- Does
- Database: stores each site's content, applications, candidate accounts and enquiries
- Receives
- All data the service holds, separated per agency by row-level security
- Where
- Tokyo region
- Based in
- United States
Anthropic
Anthropic, PBC
- Does
- AI features: drafting, page design, the agents and the site assistant
- Receives
- Public site content and counts. The site assistant receives what visitors type, and the feedback agent survey comments, with email addresses and phone numbers removed first. Applicants' work history only at a data level the agency turns on, with names and contact details removed. Never kept for training
- Where
- United States
- Based in
- United States
Resend
Plus Five Five, Inc.
- Does
- Email: what an agency's site sends (sign-in codes, job alerts, replies, newsletters, campaigns, surveys the agency switches on) and notifications to the agency; and, when the agency adds one, verifying its own sending domain
- Receives
- Recipient's email address and the message; the agency's sending domain and its DNS records. Notifications to agencies carry a link, never a CV or an applicant's details
- Where
- Tokyo region (sending)
- Based in
- United States
Stripe
Stripe, Inc. (through Stripe Japan, Inc.)
- Does
- Plan subscriptions by card or bank transfer, invoices, and card payments for AI credit top-ups
- Receives
- The agency's name and billing address, and the paying staff member's name and email; card details, or the details of the bank transfer. We never see or store full card numbers
- Where
- United States and Japan
- Based in
- United States
ElevenLabs
Eleven Labs Inc.
Only if you turn it on- Does
- Speech to text for job and intro videos: turns a consultant's recording into captions
- Receives
- The audio of a recording the agency's staff make. Never candidates' data
- Where
- United States
- Based in
- United States
Google
Google LLC
Only if you turn it on- Does
- Search Console: brings the site's search data into the admin; the Indexing API tells Google when a job page opens, changes or closes
- Receives
- The connection's access credentials, stored encrypted, and the addresses of job pages. Nothing about visitors or candidates is sent
- Where
- United States
- Based in
- United States
DataForSEO
DataForSEO OÜ
- Does
- Search data: search volumes, rankings and competing pages for Google in Japan
- Receives
- Search words, job titles and website addresses. No personal data
- Where
- Outside Japan
- Based in
- Estonia
Serper
Serper (google.serper.dev)
- Does
- Search results for blog research, and who ranks on Google's first page
- Receives
- The topic or search words. No personal data
- Where
- Outside Japan
- Based in
- Outside Japan
SE Ranking
SE Ranking (api.seranking.com)
- Does
- Search data: search volumes, rankings and backlink totals for Google in Japan
- Receives
- Search words and website addresses. No personal data
- Where
- Outside Japan
- Based in
- Outside Japan
SearchApi
SearchApi (searchapi.io)
- Does
- Google for Jobs listings, and answers from ChatGPT to questions about an agency's field
- Receives
- Job titles, cities and questions about the field. No personal data
- Where
- Outside Japan
- Based in
- Outside Japan
Services You Connect
Not our sub-processors: your team chooses each one, under your own agreement with its provider, and decides what is sent. Nothing goes to any of them until you connect it.
CRM
- Zoho RecruitBuilt for your CRM
Recruitment ATS with a Japanese interface. Sign in with Zoho to connect jobs, applications and stages.
- Recruit CRMBuilt for your CRM
The ATS and CRM boutique agencies like. Connects with one API token.
- ManatalBuilt for your CRM
The ATS widely used across Asia. Jobs come in even without a token.
- kintoneBuilt for your CRM
For agencies that run jobs and candidates in Cybozu kintone. Matched to your own apps' fields.
- Bullhorn Recruitment CloudBuilt for your CRM
Bullhorn on Salesforce (formerly TalentRover). Your Salesforce admin approves the connection.
- Tamago-DBBuilt for your CRM
The bilingual recruitment ATS. Connect with an API key from your Tamago-DB: jobs in, applications with CVs out.
- CRM feed and inboxBuilt for your CRM
For CRMs without an API, Excel or a spreadsheet. Jobs come in from a feed or a file; applications go to your CRM's inbox address.
- BullhornNeeds your vendor's approval
The global recruitment CRM. Jobs in, applications with CVs out, and stages back.
- PORTERSNeeds your vendor's approval
Widely used by Japanese agencies. Jobs, applications and screening stages.
- VincereBuilt for your CRM
Waiting on Vincere's partner approval. Until then, CRM feed and inbox works.
- JobAdderBuilt for your CRM
Waiting on JobAdder's partner approval. Until then, CRM feed and inbox works.
- MatchinGoodBuilt for your CRM
We're asking the maker about API access. Its website feed and email intake may work meanwhile.
- SalesforceBuilt for your CRM
Other recruitment CRMs on Salesforce, such as TargetRecruit.
Where applications go
- WebhookAvailable
Applications and enquiries sent, signed, to a URL you choose. An owner decides whether contact details go too. Reaches a CRM through Zapier or Make.
Notifications
- SlackAvailable
Applications, enquiries and other notifications posted to a channel: what happened and a link, never personal details.
- Microsoft TeamsAvailable
The same notifications, posted to a channel through a Teams workflow.
- ChatworkAvailable
The same notifications, posted to a group chat you choose.
LINE
- LINE Official AccountAvailable
A "Chat on LINE" button across your site: it opens LINE on a phone and shows a QR code on a computer.
- LINE job alertsAvailable
Candidates log in with LINE and new jobs that match arrive from your LINE Official Account (Messaging API and LINE Login).
Analytics and ad tags
- Google Analytics 4Available
Analytics, with applications, enquiries and sign-ups as events.
- Google Tag ManagerAvailable
Any other tag, managed in one place. We check it's published and not counting twice.
- Google AdsAvailable
Applications and more, counted as conversions.
- Meta PixelAvailable
Facebook and Instagram ads measured, with automatic form reading off.
- LinkedIn Insight TagAvailable
LinkedIn ads measured and retargeted.
- Microsoft ClarityAvailable
Heatmaps and recordings, never on My page.
- Yahoo! JAPAN AdsAvailable
Yahoo! Ads conversions and retargeting.
How We Choose and Bind ThemLink to this section
Each company receives only what its job needs. Each is bound by a written contract to protect the data at least as well as our Terms (Section 14) require, and we remain responsible for them.
Where a company is based outside Japan, we keep the arrangements Japan's privacy law requires for it (APPI, Article 28) and will explain them on request.
Changes to This ListLink to this section
We email every customer at least 30 days before adding or replacing a company here, and update the date at the top of this page. A customer who objects on reasonable data-protection grounds may leave without charge if we cannot address the objection.