Legal
Subprocessors, transparently.
The current list of third parties that may process customer data on our behalf. We notify all customers at least 30 days before adding or replacing a subprocessor.
Last updated · May 18, 2026
Infrastructure4 subprocessors
VendorPurposeRegion
- Amazon Web ServicesPrimary cloud infrastructure (compute, storage, networking).US, EU
- CloudflareEdge CDN, DDoS protection, WAF for marketing and dashboard.Global
- VercelHosting for marketing site and authenticated dashboard.US, EU
- NeonManaged Postgres for application data.US, EU
Operational4 subprocessors
VendorPurposeRegion
- DatadogApplication performance monitoring and infrastructure logs.US, EU
- ResendTransactional email delivery (account, security, billing).US
- StripeBilling and payment processing.US
- LinearCustomer support ticketing and engineering issue tracking.US
AI / ML3 subprocessors
VendorPurposeRegion
- AnthropicVision-language model inference for alt-text and remediation suggestions.US
- OpenAIBackup vision-language model inference and translation.US, EU
- AssemblyAISpeech-to-text for video captioning.US
Change notifications
30 days' notice, always.
We email every customer at least 30 days before adding or replacing a subprocessor. Subscribe below to receive notifications even if you're not yet a customer.
Need a specific subprocessor flag?
We support contractual restrictions on AI subprocessors for districts that require it. Talk to us.