Transparency

Subprocessors

Third-party services that process data on behalf of SayVeritas. This list is provided for procurement transparency.

Last updated: 9 September 2026. We notify customers of material changes to this list.

Vendor	Purpose	Data Categories	Region	Safeguards
OpenAI	Speech-to-text transcription, rubric-aligned scoring support, image generation for assessments	Audio recordings (for transcription), transcript text (for scoring)	United States	DPA available
Google (Gemini)	StudyLab learning materials and conversations; configurable analysis support	Transcript text	United States	DPA available
Anthropic (Claude)	StudyLab analysis and class reports; Assess independent review and class reports (Claude Sonnet 5 by default)	Transcript text, learning materials, rubric criteria, and assessment evidence	Depends on contracted service and processing configuration	See provider terms and the school DPA for applicable safeguards
Mistral AI (Voxtral)	Audio transcription with Voxtral; configurable analysis support	Audio recordings; transcript text and assessment context when used for analysis	Depends on contracted service and processing configuration	See provider terms and the school DPA for applicable safeguards
Supabase	Database hosting, file storage, authentication	All platform data (encrypted at rest)	United States	SOC 2 Type II, DPA available
Vercel	Application hosting and edge delivery	Application logs, request metadata	Global (edge network)	SOC 2 Type II, DPA available
LemonSqueezy	Planned merchant of record for individual teacher credits — checkout not yet live	Billing information, purchase history	United States	Pending launch verification; no live checkout offered
MailerLite	Email communications (sales and marketing emails only)	Teacher email addresses (not student data)	European Union	GDPR compliant, DPA available

OpenAI

Speech-to-text transcription, rubric-aligned scoring support, image generation for assessments

Data: Audio recordings (for transcription), transcript text (for scoring)

Region: United States

DPA available

Google (Gemini)

StudyLab learning materials and conversations; configurable analysis support

Data: Transcript text

Region: United States

DPA available

Anthropic (Claude)

StudyLab analysis and class reports; Assess independent review and class reports (Claude Sonnet 5 by default)

Data: Transcript text, learning materials, rubric criteria, and assessment evidence

Region: Depends on contracted service and processing configuration

See provider terms and the school DPA for applicable safeguards

Mistral AI (Voxtral)

Audio transcription with Voxtral; configurable analysis support

Data: Audio recordings; transcript text and assessment context when used for analysis

Region: Depends on contracted service and processing configuration

See provider terms and the school DPA for applicable safeguards

Supabase

Database hosting, file storage, authentication

Data: All platform data (encrypted at rest)

Region: United States

SOC 2 Type II, DPA available

Vercel

Application hosting and edge delivery

Data: Application logs, request metadata

Region: Global (edge network)

SOC 2 Type II, DPA available

LemonSqueezy

Planned merchant of record for individual teacher credits — checkout not yet live

Data: Billing information, purchase history

Region: United States

Pending launch verification; no live checkout offered

MailerLite

Email communications (sales and marketing emails only)

Data: Teacher email addresses (not student data)

Region: European Union

GDPR compliant, DPA available

Data Flow Summary

Student Audio

Recorded → Stored in Supabase → Sent to the configured transcription provider (Mistral or OpenAI) → Transcript stored → Audio available for 30 days (teacher download) → Auto-deleted

Transcripts

Stored in Supabase → Sent to configured OpenAI, Anthropic, Google, or Mistral models for analysis → Scores saved → Transcript retained per school policy

Teacher Data

Email stored in Supabase + MailerLite (for communications) → LemonSqueezy payment processing is planned; online checkout is not yet available

No Student PII to Marketing

MailerLite receives teacher emails only. Student names, recordings, and transcripts are never sent to marketing systems.

What We Don't Do

✗We do not sell student data to any third party
✗We do not use student recordings to train AI models
✗We do not share student data with advertising platforms
✗We do not retain audio beyond the configured retention period

Need more details for procurement?

We can provide DPAs, security questionnaire responses, and detailed data flow documentation upon request.