Subprocessor Register kept short, kept current.

AwardScience is operated by KYWH Limited. These are the only third parties that process customer data on our behalf to deliver the platform, with what each one does, where it processes data, and the safeguard that governs it. Last updated 21 September 2026.

FrankfurtEU PRIMARYIrelandEU RECOVERYN. VirginiaUS PRIMARYN. CaliforniaUS RECOVERYSingaporeAPAC PRIMARYSydneyAPAC RECOVERY
Primary regionRecovery copy, same geographyReplication
Core infrastructure
01
01

Amazon Web Services

Amazon Web Services, Inc. Hosting, compute, database, object storage, backup, transactional email, monitoring and logging, and AI inference via Amazon Bedrock. Each customer is hosted in one primary region, selected at provisioning, with a recovery copy in a second region of the same geography.

  • EU: Frankfurt (eu-central-1), recovery in Ireland (eu-west-1)
  • US: N. Virginia (us-east-1), recovery in N. California (us-west-1)
  • APAC: Singapore (ap-southeast-1), recovery in Sydney (ap-southeast-2)
  • AWS DPA with EU Standard Contractual Clauses
Core infrastructure
02
02

Google Workspace

Google Asia Pacific Pte. Ltd. Customer support correspondence, on a no-content basis, with identifiers only and never submission content.

  • Data region set to Europe
  • Google Cloud DPA with EU SCCs
  • Core, engaged for every customer
Core infrastructure
03
03

Cloudflare

Cloudflare, Inc. Bot and abuse protection on applicant-facing forms. Processes connection metadata only, never submission content.

  • Global edge network
  • Cloudflare DPA with EU SCCs
  • EU-US Data Privacy Framework participant

How we manage change.

Notice
01
01

30 days before any change

Enterprise customers receive at least 30 days’ prior written notice of any new or replacement subprocessor, with a right to object and, if unresolved, to terminate without penalty.

Location
02
02

Your region, fixed by contract

Choose the EU, the US or Asia-Pacific at provisioning. Your data, and its recovery copy, stay within that geography, and the region does not change without your written instruction.

Agreement
03
03

DPA available

A Data Processing Agreement with the EU Standard Contractual Clauses, the UK International Data Transfer Addendum and the Swiss amendments is available for enterprise customers.

AI inference runs inside AWS. AwardScience runs its AI features through Amazon Bedrock in the customer’s own tenant region. Because Amazon Web Services performs the inference, the underlying model providers do not receive customer data and are not subprocessors. For completeness, AwardScience uses no third-party analytics or advertising trackers on applicant data, no offshore development or support agency, and no payment processor of its own.

Scroll to Top