Every third-party vendor that processes personal data on our behalf, with a current change log. We notify program directors at least thirty days before adding a new subprocessor that touches student records.
| Subprocessor | Purpose | Region | Data categories | Student data |
|---|---|---|---|---|
| Vercel, Inc. | Application hosting, serverless functions, and CDN | United States | All platform data in transit; ephemeral cache | Yes |
| Turso (ChiselStrike, Inc.) | Primary application database (libSQL / SQLite) | United States | Account records, progress, submissions, audit log | Yes |
| Upstash, Inc. | Redis cache and rate-limiting | United States | Hashed identifiers, rate-limit counters, ephemeral cache entries | Limited |
| Resend, Inc. | Transactional email delivery (account, password reset, instructor announcements) | United States | Recipient name and email address; message body | Limited |
| Stripe, Inc. | Payment processing for institutional subscriptions | United States | Billing contact and payment instrument (collected directly by Stripe) | No |
| Anthropic, PBC | AI features in career-prep, financial-tools, and content review | United States | Prompt content for the duration of the request only; no PII required to use these features | No |
| WorkOS, Inc. | Single sign-on (SAML and SCIM) for institutions that require it | United States | Authentication identifiers and SSO directory attributes | Limited |
| Google LLC (Google Workspace and Gmail API) | Internal team email at thehomehealthpro.com; Gmail API for our internal admin CRM mailbox | United States | Email correspondence with us; internal CRM thread metadata | No |
All subprocessors above operate in the United States and store data on US infrastructure. Where a subprocessor processes student education records, the relationship is governed by a written agreement that requires the subprocessor to safeguard that data consistent with our obligations as a school official under FERPA.
When we add, remove, or materially change a subprocessor that processes student education records, we:
To subscribe to subprocessor change notifications, write to privacy@thehomehealthpro.com with the subject line "Subprocessor notifications" and the email address you want added to the list.
Last updated: May 6, 2026