Version: 2026.07 · Last updated July 8, 2026
| Vendor | Purpose | Data processed | Website |
|---|---|---|---|
| Supabase | Application database, authentication, file storage | All district-entered data (encrypted at rest) | supabase.com |
| Cloudflare | Edge hosting, CDN, DDoS protection, TLS termination | HTTP requests, IP addresses (transit only) | cloudflare.com |
| Lovable AI Gateway (Google Gemini) | AI summarization for educator-authored notes and reports | Teacher-authored text with student names redacted before transmission | lovable.dev |
| Resend | Transactional email (invitations, notifications, reports) | Recipient email, message body | resend.com |
Notification of changes
Districts under a Data Processing Agreement receive advance notice of material subprocessor changes per the terms of that agreement.