AssemblyNote uses a small number of third-party vendors ("subprocessors") to help us operate the service. Each is contractually bound to protect the data it handles and may only use it to help us deliver AssemblyNote — never for its own purposes. This list is referenced in Section 7 (Sub-Processors) of our Data Processing Agreement, which your school's administrator can review and sign from within the AssemblyNote dashboard.
Current subprocessors
| Subprocessor | Purpose | Data processed | Location |
|---|---|---|---|
| Resend (Plus Five Five, Inc.) | Email delivery | Parent/guardian email addresses; newsletter content | United States |
| Supabase, Inc. | Database & application data storage | All platform data (encrypted at rest and in transit) | United States |
| Vercel Inc. | Application hosting & infrastructure; cookieless web analytics | All platform data (encrypted in transit); aggregate page views and performance metrics | United States |
| Inngest | Background job processing (e.g. scheduled newsletter sends) | Newsletter content and campaign metadata processed during scheduled sends | United States |
| Functional Software, Inc. (Sentry) | Application error monitoring & diagnostics | Error reports (message, page, browser, timestamp, signed-in user ID) and session replays for a sample of staff sessions, with all text masked and all images and media blocked. Reports are automatically scrubbed before they are sent: email addresses, phone numbers, names, IP addresses, access tokens and session cookies are stripped out. Not used to process Student Data; access is restricted to AssemblyNote engineering | United States |
| PostHog, Inc. | Product analytics | How signed-in school staff use AssemblyNote: page views, clicks and feature usage, tied to the account's internal ID and school. Staff names, email addresses, and the text of anything clicked or typed are never sent; URLs are trimmed of query strings before they leave the browser. Session replays for a sample of staff sessions, with all text masked and all images and media blocked, on the same terms as Sentry's. Not used to process Student Data: families never use the web app, and nothing about a student is included | United States |
| Stripe, Inc. | Subscription billing & payment processing | School billing contact name and email, plan and subscription status. Card details go directly to Stripe and never touch AssemblyNote's systems | United States |
Advance notice. We'll provide at least 14 days' notice by email to your school's account contact before adding a new subprocessor that handles Student Data. This page will always reflect our current list.
Questions? We’re here.
Reach out any time about how we use subprocessors or for more detail on a specific vendor's data handling practices.