Legal
Subprocessors
Version 2026.07 · Effective July 26, 2026
This document is a working draft pending review by legal counsel. It is provided for transparency and is not yet a binding agreement.
In plain language
The infrastructure vendors that process data on our behalf, and what each receives.
To run Scoraide we rely on a small set of infrastructure vendors that process data on our behalf under contract. We hold each to confidentiality and security obligations consistent with our Privacy Policy and Data Processing Addendum. This page lists them and what each receives.
Current subprocessors
| Vendor | Purpose | Data it may process |
|---|---|---|
| Supabase | Database, authentication, and file storage | Account and student records, practice tests and responses, scores and reports, generated PDF reports. |
| Vercel | Application hosting and delivery | Requests to the app, including IP address in server logs; no student records are stored at rest here. |
| Anthropic | AI question generation and analysis (Skolar), and the marketing support chat | Prompts containing exam blueprints and, for analysis, a student's responses; and support-chat conversation content. Not used to train models. |
| Stripe | Payments and subscriptions (organizations) | Billing contact and payment details for paying organizations. No student practice data. |
| Resend | Transactional email | Recipient email address and message content for invites and report-ready notifications. |
| Sentry | Error monitoring | Diagnostic error data and technical context. Configured to avoid student personal data in reports. |
Our commitment to keep this current
We will keep this list up to date. Before adding a new subprocessor that processes student data, or replacing one, we will update this page and, for school and agency customers with a signed DPA, provide advance notice as that agreement requires so the institution can review or object. To be notified of changes, write to support@venakaninfo.com.