Loading page
Last updated: 28 September 2026
Third-party services that process personal information on our behalf, what they receive, and where they process it. We give schools at least 30 days' notice before adding a subprocessor that receives student information.
| Provider | Purpose | Data | Location | Safeguards |
|---|---|---|---|---|
| Vercel | Application hosting, serverless functions and cookieless page analytics | All application data in transit; request metadata | Australia (Sydney, syd1) for compute; global edge network for static assets | All functions pinned to syd1; TLS; SOC 2 Type II |
| Neon | Primary Postgres database | Student, class, assessment, planning and account records | Australia (Sydney) | Encryption at rest and in transit; tenant row-level security; point-in-time recovery |
| Upstash | Session revocation, rate limiting, caching and short-lived AI conversation memory | Session identifiers, rate-limit counters, AI conversation summaries | Australia (Sydney) | TLS; AI memory expires after 30 days and is purged when a student is erased |
| OpenAI | Large language model for the teaching assistant and report drafting | Teacher prompts and de-identified tool results; student names are replaced with tokens before sending | United States | Student names tokenised; request storage disabled (store=false); no training on API data |
| Sentry | Error and performance monitoring | Error stack traces and technical request metadata; default PII collection is disabled and session replay is off | Germany (EU) | sendDefaultPii disabled; no session replay; limited retention |
| Resend | Transactional email (sign-in codes, invitations, password resets) | Staff name and email address | United States | TLS; no student data in email content |
| Inngest | Background job orchestration (exports, report generation) | Job identifiers and parameters; no student names in event payloads | United States | Signed webhooks; TLS |
| HubSpot | Customer support ticketing | Staff contact details and the content of support requests | United States | Staff are asked not to include student information in tickets |
| Optional Google Workspace single sign-on | Staff email address and name, returned by the school's own Google tenant | Global | Hosted-domain check; OAuth with PKCE | |
| Sanity | Content management for lesson plans and teaching resources | Curriculum content only; no student or staff personal information | European Union | Read-only public content API from the application |