NextCommitHQNetwork
Sign in

Service Providers

Effective date: 2026-09-05.

These are the companies that process personal information on behalf of NextCommitHQ to run NextCommitHQ Network. Each one is bound by contract to use the data only to provide its service to us. We add a provider to this list before it receives any personal information.

1. Current providers

  • Railway Corporation (United States). Application hosting and request logs. Runs the Network's web servers and scheduled jobs. Data processed: everything the application handles in memory while serving requests, plus request logs containing IP address, user agent, path, status, timing, and request id. Region: United States.
  • Neon, Inc. (United States). Managed PostgreSQL database. Stores all application data: accounts, profiles, organizations, openings, hiring records, messages, Chalkboard content, notifications, feedback, reports, the audit trail, and backups. Region: United States. Encrypted at rest and in transit.
  • WorkOS, Inc. (United States). Sign-in and session management (AuthKit). Holds email address, sign-in credentials, passkeys, multi-factor enrollment, sign-in events, and the session cookie. We receive a stable subject identifier, the email address, its verification status, and a display name.
  • Resend, Inc. (United States). Transactional email delivery. Receives the recipient address, subject, and body of each notification email we send, and returns delivery status. Retains message content for its standard log period.

2. Providers we do not use today

We do not currently use third-party analytics, advertising networks, advertising measurement, session replay, error-tracking services that capture page content, customer-data platforms, social-media plugins, payment processors, or AI or machine-learning providers. Fonts are served from our own domain, not from a font network. Any of these may be added in the future; each will be listed here, with what it receives, before it is connected, and advertising partners will additionally be covered by the consent and opt-out described in the Cookie Notice.

3. Sub-processors of our providers

Each provider above runs on infrastructure from major cloud vendors (for example Amazon Web Services or Google Cloud) in United States regions. Their own sub-processor lists are published on their websites.

4. Changes

When we add or replace a provider we update this page and, where the change is material to how your data is handled, notify you through the Network or by email at least 14 days in advance. If you object to a new provider, you may delete your account before the change takes effect.

5. Contact

Questions about providers or data processing: privacy@nextcommithq.com.