Sub-processors

Current as at 23 August 2026. This list forms part of the Data Processing Agreement.

Supabase, Inc.

European Economic Area, eu-west-3 (Paris, France)

Managed Postgres database and practitioner authentication. Holds every practitioner account and learner record in the app.

Data: Practitioner account data, learner records (pseudonymous), observations, skill assessments, goals

Vercel, Inc.

European Economic Area, with a global edge network for static assets

Application hosting, serverless functions and the edge network that serves the app.

Data: Server logs, request telemetry, transient session cookies

Resend, Inc.

European Economic Area, processing under UK GDPR transfer safeguards

Transactional email delivery: sign-in and account emails sent through Supabase authentication.

Data: Practitioner email address, transactional message content

Anthropic PBC

United States, under the provider's standard data protection terms

The three optional AI drafting features: Make-it-SMART, parent summary and prose polish. Each returns an editable draft to the practitioner and never writes to a learner's record. Names, contact details and links are stripped from the text before the request leaves our server (lib/ai/pii.ts).

Data: De-identified free text drawn from observation notes and goals. No practitioner or learner identifiers are sent.

Not used

Worth stating plainly, because their absence is a deliberate choice rather than an oversight. We use no analytics provider, no advertising or tracking pixels, and no session-replay tool. We do not use a payment processor: the app is free during beta and the billing routes return a “not yet live” response. When billing does go live, the processor will be added here before the first payment is taken.

Changes to this list

We give at least 30 days’ notice before adding or replacing a sub-processor. You can object on reasonable data protection grounds, and if we cannot resolve the objection within 30 days you can terminate the affected service without penalty. Write to compliance@teze.app to be told about changes as they happen.