Loading...
Third-Party Services
Subprocessors
We use the following third-party services to process data on behalf of our customers. All subprocessors are contractually bound to protect your data.
Last updated: March 2026. We will notify affected customers at least 30 days before adding new subprocessors or making material changes.
Google Cloud Platform / Firebase
United StatesApplication hosting, database, authentication, and storage
Data Categories
- Account data
- Session content
- Student responses
- Usage data
Certifications
SOC 1/2/3ISO 27001ISO 27017ISO 27018FedRAMP
Vercel
United StatesWebsite hosting and edge deployment
Data Categories
- Technical data
- Access logs
Certifications
SOC 2 Type IIISO 27001
Stripe
United StatesPayment processing
Data Categories
- Payment information
- Billing details
Certifications
PCI DSS Level 1SOC 1/2
Sentry
United StatesError monitoring and performance tracking
Data Categories
- Error logs
- Session metadata
- Device information
Certifications
SOC 2 Type IIGDPR compliant
Resend
United StatesTransactional email delivery
Data Categories
- Email addresses
- Email content
Certifications
SOC 2 Type II
Cloudflare
Global (edge network)CDN, DDoS protection, and bot management
Data Categories
- IP addresses
- Request metadata
Certifications
SOC 2 Type IIISO 27001PCI DSS
OpenAI
United StatesAI-powered features (quiz generation, feedback)
Data Categories
- Content submitted for AI processing
Certifications
SOC 2 Type II
Subprocessor Change Notifications
We notify customers before adding new subprocessors. If you have concerns about a subprocessor change, you may object within 30 days of notification.
Questions about our subprocessors? Contact privacy@classtempo.com