Skip to main content
Transparency

Subprocessors

Third-party services that process data on behalf of SayVeritas. This list is provided for procurement transparency.

Last updated: January 2026. We notify customers of material changes to this list.

OpenAI

Speech-to-text transcription, rubric-aligned scoring support, image generation for assessments

Data: Audio recordings (for transcription), transcript text (for scoring)
Region: United States
DPA available
Google (Gemini Flash)

Rubric-aligned scoring support (consensus scoring)

Data: Transcript text
Region: United States
DPA available
Supabase

Database hosting, file storage, authentication

Data: All platform data (encrypted at rest)
Region: United States
SOC 2 Type II, DPA available
Vercel

Application hosting and edge delivery

Data: Application logs, request metadata
Region: Global (edge network)
SOC 2 Type II, DPA available
LemonSqueezy

Payment processing (merchant of record for individual teacher credits)

Data: Billing information, purchase history
Region: United States
PCI DSS compliant
MailerLite

Email communications (sales and marketing emails only)

Data: Teacher email addresses (not student data)
Region: European Union
GDPR compliant, DPA available

Data Flow Summary

Student Audio

Recorded → Stored in Supabase → Sent to OpenAI for transcription → Transcript stored → Audio available for 30 days (teacher download) → Auto-deleted

Transcripts

Stored in Supabase → Sent to OpenAI/Google for scoring → Scores saved → Transcript retained per school policy

Teacher Data

Email stored in Supabase + MailerLite (for communications) → Payment info handled by LemonSqueezy (never touches our servers)

No Student PII to Marketing

MailerLite receives teacher emails only. Student names, recordings, and transcripts are never sent to marketing systems.

What We Don't Do

  • We do not sell student data to any third party
  • We do not use student recordings to train AI models
  • We do not share student data with advertising platforms
  • We do not retain audio beyond the configured retention period

Need more details for procurement?

We can provide DPAs, security questionnaire responses, and detailed data flow documentation upon request.