At Caro, We partner with third party service providers who are contracted to provide the same level of data protection and information security that customers expect from us. Some of these third parties are engaged as “subprocessors” to process personal data in connection with providing our products.
A current list of subprocessors is listed below. Caro may update this list from time to time. Subscribe to updates to subprocessors by emailing legal@carohq.com.
Infrastructure subprocessors
These vendors are used throughout Caro’s product for infrastructure, monitoring, and analytics.
Authorized subprocessor
Description
Google Cloud Platform
Provider of computing resources for deploying and operating web application.
USA
MongoDB Atlas (GCP)
Database storage provider.
USA
Cloudflare
Content delivery network and DDoS protection.
USA
Descope
Authentication service used to facilitate SSO.
USA
Datadog
Monitoring and analytics platform.
USA
Sentry
Error monitoring and alerting.
USA
Amplitude
Product and user analytics platform.
USA
Integration subprocessors
These vendors are supported via integrations that may be configured in your specific Caro account. Subject to the configuration settings you have established, information including personal data may be sent to these subprocessors.
Authorized subprocessor
Description
Workday HCM
Payroll and human resources information.
USA
Hibob
Payroll and human resources information.
USA, EU, UK, Australia, Israel
Greenhouse
Applicant tracking.
USA
Lever
Applicant tracking.
USA
Ashby
Applicant tracking.
USA
Workday Adaptive Planning
Financial planning and forecasting.
USA
Anaplan
Financial planning and forecasting.
USA
Pigment
Financial planning and forecasting.
USA, EU, UK