Last updated: October 2025
The following tables provide information regarding HiBob’s corporate affiliates and third-party Sub-processors that may have access to Personal Data when providing services to HiBob on Customer’s behalf.
The entities listed below are HiBob Affiliates that may serve as Sub-processors to deliver the Services:
| Entity Name | Type of Service | Corporate Address | Transfer Mechanism | Security Measures | Contact details |
| Hi Bob (UK) Limited | Providing the Services | The Buckley Building (Fl. 1), 49 Clerkenwell Green, London EC1R 0EB, England | Adequacy Decision SCCs | Trust Centre | dpo@hibob.io |
| Hi Bob Ltd. | Providing the Services | 148 Menachem Begin Rd., Tel Aviv-Jaffa 6492104, Israel | Adequacy Decision SCCs | Trust Centre | dpo@hibob.io |
| Hi Bob (NL) B.V. | Providing the Services | Vijzelstraat 68, 1017 HL Amsterdam, Netherlands | N/A | Trust Centre | dpo@hibob.io |
| Hi Bob (DE) GmbH | Providing the Services | Karl-Liebknecht-Str. 29A, 10178, Berlin, Germany | N/A | Trust Centre | dpo@hibob.io |
| Hi Bob, UNIPESSOAL LDA | Providing the Services | Rua do Centro, Cultural 37A, 1700-249 Lisboa, Portugal | N/A | Trust Centre | dpo@hibob.io |
| Hi Bob (AU) Pty Ltd. | Providing the Services | Level 12, 66 King St, Sydney, NSW 2000, Australia | SCCs | Trust Centre | dpo@hibob.io |
| Hi Bob (Canada) Inc. | Providing the Services | 100 King Street West, Suite 6000, 1 First Canadian Place, Toronto, Canada | Adequacy Decision SCCs | Trust Centre | dpo@hibob.io |
| Hi Bob Inc. | Providing the Services | 275 7th Ave, New York, NY 10001, USA | DPF SCCs | Trust Centre | dpo@hibob.io |
HiBob uses the third-party Sub-processors listed below to host Personal Data or provide specific functionalities within the Services:
| Entity Name | Type of Service | Processing Location | Corporate Address | Transfer Mechanism | Security Measures (links to Sub-processor resources) | Contact Details |
| Amazon Web Services EMEA SARL | Cloud computing and storage provider | EU | 38 Avenue John F. Kennedy, 1855 Luxembourg | N/A | AWS Cloud Security | aws-EU-privacy@amazon.com |
| Cloudinary Ltd. | Image processing provider used for uploading images to the HiBob platform | EU | 20 Aharon Bart St, Petah Tikva 4951448, Israel | Adequacy Decision SCCs | Trust Centre | privacy@cloudinary.com |
| Cloudflare, Inc. | Cloud security provider used to scan for and prevent malicious cyber attacks | EU | 101 Townsend St, San Francisco, CA 94107, USA | DPF SCCs | Trust Hub, GDPR Compliance Page | dpo@cloudflare.com |
| Zendesk, Inc. | Support ticketing system provider, used to receive and manage support tickets from End Users and Customers | EU | 989 Market St, San Francisco, CA 94103, USA | DPF SCCs | Compliance Certifications & Memberships | privacy@zendesk.com |
In addition to the Core Sub-processors listed above, HiBob offers enhanced features and capabilities that may utilize additional third-party Sub-processors. These optional Sub-processors are not required for the core HiBob Services, and will only be used if and when Customer opts in to the specific features or products listed below:
| Entity Name | Applicable Services/Products | Type of Service | Processing Location | Corporate Address | Transfer Mechanism | Security Measures (links to Sub-processor resources) | Contact Details |
| Box, Inc. | UK Payroll | Secure file transfer to and from Customer as required as part of the provision of the Services | EU | 900 Jefferson Ave, Redwood City, CA, USA | DPF SCCs | Trust Centre | privacy@box.com |
| Okta, Inc. (Auth0) | UK Payroll | Identity and access management services (SSO) | EU | 100 First Street, Suite 600, San Francisco, CA 94105, USA | SCCs | Security Centre | privacy@okta.com |
| Descope Technologies Israel (2022) Ltd. | HiBob SSO platform (where purchased by Customer) | Identity and access management services (SSO) | EU | 11 HaAhim MiSlavuta St, Tel Aviv 6701022, Israel | Adequacy Decision SCCs | Security & Compliance | privacy@descope.com |
| OneSignal, Inc. | HiBob’s mobile app | In-app notification service provider, used for notifying End Users of new activity in the mobile app | EU | 201 S. B St, San Mateo, CA 94401, USA | DPF SCCs | Privacy & Security | Privacy@OneSignal.com |
| Nylas, Inc. | Calendar scheduling features | API integration for syncing events scheduled on the HiBob platform to End Users’ business calendars | EU | 944 Market St, San Francisco, CA, USA | DPF SCCs | Trust Centre, Information Security Standards | Security@nylas.com |
| OpenAI, L.L.C. | AI features within the HiBob platform | LLM processing & generative AI (opt-in only) | EU | 3180 18th St. San Francisco, CA 94110, USA | SCCs | Trust Portal | privacy@openai.com |
| Amazon Web Services EMEA SARL | AI features within the HiBob platform | Utilization of AI models hosted on AWS (opt-in only) | EU | 38 Avenue John F. Kennedy, 1855 Luxembourg | N/A | AWS Cloud Security | aws-EU-privacy@amazon.com |
HiBob’s Bob Finance module may rely on additional third-party Sub-processors to deliver financial planning and analysis capabilities.
These Sub-processors are distinct from those used in the core HiBob Services and will only be used if the Customer elects to enable the Bob Finance module.
| Entity Name | Type of Service | Processing Location | Corporate Address | Transfer Mechanism | Security Measures (links to Sub-processor resources) | Contact Details |
| Okta, Inc. (Auth0) | Identity and access management services (SSO) | EU | 100 First St., Suite 600, San Francisco, CA 94105, USA | Adequacy Decision (DPF), SCCs | Auth0 Security Centre, Okta Trust Centre | privacy@okta.com |
| Twilio, Inc. (SendGrid) | Email notifications for Bob Finance module activity | EU | 375 Beale St., Suite 300, San Francisco, CA 94105, USA | Adequacy Decision (DPF), SCCs | Trust Centre | privacy@twilio.com |
| Freshworks Inc. (Freshdesk) | Customer support ticketing from within the Services | EU | 2950 S. Delaware St., Suite 201, San Mateo, CA 94403, USA | Adequacy Decision (DPF), SCCs | Trust Centre | dpo@freshworks.com |
| Optional features for the Bob Finance module | ||||||
| Microsoft Corporation (Azure OpenAI) | AI analytics feature (Arc AI) enablement based on dashboard data | EU | One Microsoft Way, Redmond, WA 98052-6399, USA | Adequacy Decision (DPF), SCCs | Service Trust Portal | dpoffice@microsoft.com https://aka.ms/privacyresponse |
In the event that HiBob appoints a new Sub-processor, it will provide prior notice in accordance with its contractual obligations under the DPA executed with Customers.