SprintHR Subprocessor List
Provider: Gleent, Inc.
Product: SprintHR
Effective Date: October 1, 2026
Last Updated: September 30, 2026
Version: 1.0
This SprintHR Subprocessor List identifies third-party service providers that Gleent, Inc. ("Gleent") may use to process Customer Personal Data in connection with SprintHR.
This list supplements the SprintHR Customer Agreement, Data Processing Addendum ("DPA"), Privacy Policy, AI Terms, and other applicable SprintHR terms.
A Subprocessor is a third party engaged by Gleent to process Customer Personal Data on Gleent's behalf in providing SprintHR.
Not every Subprocessor listed below is used for every Customer, feature, deployment, or transaction. The providers involved depend on the SprintHR services, modules, integrations, AI features, payment methods, infrastructure, and configuration used by the Customer.
Current Subprocessors
| Subprocessor | Service / Purpose | Customer Data That May Be Processed | Processing Location |
|---|---|---|---|
| Cloudflare, Inc. and affiliates | Object storage, backups, content delivery, security services, and AI processing through Cloudflare services such as R2 and Workers AI | Customer files, stored objects, backups, technical data, logs, AI prompts, retrieved context, AI outputs, and other Customer Data depending on the enabled service | May vary by Cloudflare service, configuration, and data-location settings. Cloudflare services operate through globally distributed infrastructure. |
| Google LLC and affiliates / Google Cloud | Cloud infrastructure, compute, storage, backups, managed services, and AI/ML processing where Google AI or Google Cloud AI services are enabled | Application data, Customer Data, files, backups, logs, metadata, AI prompts, retrieved context, and AI outputs depending on the enabled service | Customer-selected or configured Google Cloud regions or multi-regions where supported; other processing may occur as permitted by the applicable Google Cloud terms. |
| DigitalOcean, LLC and affiliates | Cloud compute, storage, infrastructure, and backups | Application data, Customer Data, files, backups, system data, metadata, and logs | Customer-selected region where available, together with locations used by DigitalOcean and its subprocessors as permitted by its terms. |
| Amazon Web Services, Inc. and affiliates — Amazon Simple Email Service (SES) | Transactional and service email delivery, including notifications generated by SprintHR | Recipient name and email address, message content, notification data, delivery metadata, and related technical information | AWS region configured for the applicable SES service and other processing permitted under AWS terms. |
| OpenAI, L.L.C. and affiliates | AI-assisted features, including generation, summarization, classification, extraction, analysis, and other AI functions | AI prompts, instructions, retrieved context, documents or data submitted to an enabled AI feature, AI outputs, and related metadata | Processing locations may vary based on the OpenAI service, infrastructure, and applicable data-residency configuration. |
| OpenRouter, Inc. | AI model routing and access to third-party model providers, which may include providers such as Anthropic, OpenAI, Google, and others depending on the selected model and routing configuration | AI prompts, instructions, retrieved context, AI outputs, and related request metadata | Processing may occur through OpenRouter and the downstream model provider selected or automatically routed for the request. Locations vary by provider. |
| PayMongo Philippines, Inc. and/or PayMongo Payments, Inc. | Subscription payments, billing, payment processing, and related transaction services | Customer or billing contact details, transaction information, payment references, billing metadata, and other information necessary to process payments | Philippines and other locations used by PayMongo and its authorized service providers in accordance with its applicable privacy and service terms. |
AI Provider Routing
SprintHR may support more than one AI provider or model.
The particular AI provider used for a request may depend on:
- the AI feature being used;
- Customer configuration;
- model selection;
- availability;
- security and privacy requirements;
- performance;
- cost;
- reliability;
- geographic or technical requirements; and
- provider availability.
Where SprintHR uses OpenRouter, Customer Data submitted to an AI request may also be transmitted to the downstream model provider selected for, or automatically routed to, that request.
Where SprintHR connects directly to providers such as OpenAI, Google, or Cloudflare Workers AI, the applicable provider may process the relevant AI Inputs and Outputs directly on Gleent's behalf.
Gleent will use AI providers in accordance with the SprintHR DPA, AI Terms, applicable contractual arrangements, and Customer configuration.
Categories of Processing
Depending on the SprintHR services enabled by a Customer, subprocessors may perform activities including:
- cloud hosting and compute;
- database, file, and object storage;
- backup and disaster recovery;
- network delivery and security;
- transactional email delivery;
- AI model inference and related AI processing;
- logging and technical operations;
- payment and billing processing; and
- other technical processing necessary to provide the Services.
Data Minimization
Gleent seeks to limit Customer Personal Data disclosed to a Subprocessor to the information reasonably necessary for the relevant service or function.
The categories of data actually processed by a particular Subprocessor depend on:
- the SprintHR module or feature used;
- Customer configuration;
- the action performed by an Authorized User;
- the integrations enabled by Customer; and
- the infrastructure or AI provider selected for the relevant request.
For example, a payment provider does not ordinarily require access to employee HR records, while an AI provider may receive only the information supplied or retrieved for the particular AI-assisted request.
International Processing
Some Subprocessors operate infrastructure outside the Philippines.
Where Customer Personal Data is processed outside the Philippines, Gleent will handle the processing in accordance with the SprintHR DPA, applicable Philippine data-protection requirements, contractual safeguards, and the applicable Subprocessor arrangements.
Where a provider supports Customer-selected or configurable processing regions, the actual processing location may depend on Gleent's deployment and configuration of that service.
Subprocessor Obligations
Where a third party acts as a Subprocessor for Customer Personal Data, Gleent will require appropriate contractual, confidentiality, privacy, and security obligations consistent with Gleent's obligations under the SprintHR DPA and applicable law.
Gleent remains responsible for its Subprocessors to the extent required by the SprintHR DPA and applicable law.
Changes to Subprocessors
Gleent may add, replace, or discontinue Subprocessors as SprintHR's infrastructure, features, AI providers, integrations, or business requirements change.
Where required by the SprintHR DPA or applicable law, Gleent will provide Customers with appropriate notice of a new or replacement Subprocessor and any applicable opportunity to raise reasonable data-protection objections.
The current version of this list will be published through the SprintHR Legal Center.
Customer-Selected Third-Party Integrations
This list is intended to identify service providers engaged by Gleent as Subprocessors.
It does not necessarily include third-party services independently selected, connected, or contracted by the Customer.
For example, if a Customer independently connects its own third-party application, storage account, communication platform, banking service, identity provider, or other integration to SprintHR, that third party may process Customer Data under the Customer's own relationship and instructions.
Such a provider is not automatically a Gleent Subprocessor merely because SprintHR interoperates with it.
Contact
Questions regarding SprintHR Subprocessors or the processing of Customer Personal Data may be sent to:
Gleent, Inc.
Unit 18, 2nd Floor, Sundrel Bldg.
Brgy. Sala, City of Cabuyao
Laguna, Philippines
Privacy / Data Protection: [email protected]
Legal: [email protected]
