Service providers

Last updated: October 17, 2026.

These companies help SuperSchool provide the service. They may process Customer Data only to perform their contracted function for SuperSchool. They may not sell it, use it for advertising, use it for another internal purpose, or use it to train or improve AI models.

SuperSchool does not use an advertising network or place third-party advertising trackers in the service.

Amazon Web Services, Inc.

Service: Application infrastructure, object storage, operational logging, and backups.
Processing location: United States, primarily us-east-1.
Customer Data: Account information, instructional materials, student work, school resources, stored classroom audio and transcripts, generated materials, integration credentials and data stored by SuperSchool, and security records.
Purpose: Host, secure, back up, and deliver the SuperSchool service.
Retention: Controlled by SuperSchool's deletion process. Customer content and recoverable backups are included in the 30-day deletion window in our DPA.
AI training: Not applicable. AWS may not use Customer Data for its own purposes.

OpenAI, L.L.C.

Service: Transcription and AI-assisted educator features.
Processing location: United States.
Customer Data: Classroom audio for transcription; classroom transcripts, educator prompts, and the relevant instructional, student-work, or school context submitted for a requested feature, including Google content used by that feature.
Purpose: Convert authorized audio to text and return educator-requested output. For selected Google files and resources imported through configured Classroom syncs, prepare searchable text representations and summaries, and use relevant content and metadata to answer questions or generate teaching materials. Automatic Drive folder discovery and whole-Drive syncing have been retired.
Retention: SuperSchool has an approved zero-retention arrangement for OpenAI audio processing. Retention for other AI endpoints and hosted tools depends on the endpoint and applicable provider controls; the audio arrangement does not establish zero retention for every AI feature. Provider-held Customer Data is included in SuperSchool's deletion obligations under the DPA.
AI training: OpenAI may not use SuperSchool's inputs or outputs to train or improve its models. SuperSchool does not opt in to provider data sharing.

SuperSchool separately stores classroom audio or recording segments and the resulting transcript in its private AWS infrastructure. Stored audio and transcripts are protected as Customer Data and, where applicable, Student Data.

Google LLC

Service: Optional educator authentication and approved tool integrations.
Processing location: Subject to the Google service and the customer's Google account arrangements.
Customer Data: For sign-in, the authentication request and related account metadata. For an integration, only the scopes and data the authorized user selects for the configured function.
Purpose: Authenticate adult users and provide a user-requested integration.
Retention: Access continues until the user disconnects the integration, the token expires, or authorization is revoked. Data already imported into SuperSchool follows the retention rule for its destination category.
AI training: Google does not receive Customer Data from SuperSchool for AI-model training.

Google may separately process authentication and integration events under its own terms when a user chooses a Google service.

Plus Five Five, Inc. (Resend)

Service: Transactional account email.
Processing location: United States.
Customer Data: An adult user's email address and the content and delivery metadata for verification, password-reset, policy, support, or security messages.
Purpose: Deliver service-related email.
Retention: Resend's standard contractual schedule applies to email and delivery records. Classroom transcripts, instructional materials, and Student Data are not placed in transactional email.
AI training: Not applicable. Resend may not use Customer Data for advertising or another internal purpose.

Langfuse (ClickHouse, Inc.)

Service: AI conversation and tool-execution diagnostics.
Processing location: United States; SuperSchool uses us.cloud.langfuse.com.
Customer Data: Account, organization, and conversation identifiers; educator prompts; model answers; tool inputs and results; and relevant document, Google Workspace, or student content included in those conversations. Traces may include images or other inline media. Credential redaction does not remove classroom content.
Purpose: Diagnose failures and maintain the operation of existing AI features. Traces containing Google data are subject to the Limited Use and human-access restrictions in the privacy policy.
Retention: Traces remain until deleted or removed under a configured project retention policy. Deleting a SuperSchool conversation does not itself delete its Langfuse trace. A deletion request to SuperSchool covers these provider-held copies as well.
AI training: Langfuse states that it does not train or fine-tune models on client data. SuperSchool's no-training restrictions apply to these traces.

PostHog

Service: Adult-account analytics, performance monitoring, and error reporting.
Processing location: United States; SuperSchool uses PostHog's US Cloud service.
Customer Data: Adult account identifiers, name, email, organization, role, approval and verification status; page URLs, browser and device details, performance measurements, errors, and operation outcomes. Classroom files and student answers are not intentionally included in analytics events. Automatic click capture and session recording are disabled.
Purpose: Understand account activity and diagnose reliability and performance problems in the existing service.
Retention: Account profiles and events follow PostHog's applicable service retention and deletion controls. A deletion request to SuperSchool includes relevant PostHog profiles and events; signing out or clearing browser cookies alone does not delete them.
AI training: SuperSchool does not send this information for model training; the provider restrictions above apply.

Crisp IM SAS

Service: Adult-account support chat and support profiles.
Processing location: Core infrastructure in Amsterdam, Netherlands, with provider subprocessors as described in Crisp's privacy statement.
Customer Data: Adult account name, email, organization, role, account status, browser and session information, and messages or attachments sent to support. Student information should not be included in support messages. Any authorized support access to specific Google data remains subject to the privacy policy's human-access restrictions.
Purpose: Provide customer support and identify the account requesting help.
Retention: Support profiles and conversations are retained under the applicable Crisp service terms and deletion controls. A deletion request to SuperSchool includes relevant support records, subject to legal retention requirements.
AI training: SuperSchool does not provide this information for model training; the provider restrictions above apply.

Browserbase

Service: Remote browsers for educator-requested tasks and connected-tool sign-in sessions.
Processing location: Browser sessions are configured for the United States (us-east-1 by default).
Customer Data: Pages visited, page content, task inputs and files used in the remote browser, and saved browser profiles containing cookies and other sign-in state. Ordinary task sessions may also produce session recordings and logs; SuperSchool disables those for its separate sign-in sessions.
Purpose: Allow the educator to connect a teaching tool and complete requested browser-assisted tasks. Websites visited in the browser also receive information submitted to them at the educator's direction.
Retention: Saved contexts persist between sessions until removed. Session recordings and logs follow the applicable Browserbase retention controls. A deletion request to SuperSchool covers relevant browser profiles and provider-held task data as well.
AI training: SuperSchool does not provide this information for model training; the provider restrictions above apply.

Changes to this list

SuperSchool will provide at least 30 days' advance notice before adding a provider that will receive Student Data. A Customer may object on reasonable data-protection grounds as described in the DPA.

Questions: legal@superschool.us