| Vercel | Application hosting, edge routing, logs, and deployment infrastructure | account metadata, request metadata, application logs | US/EU, region dependent | environment specific |
| PostgreSQL database provider | Primary application database for learner, class, assignment, and audit data | application records, learner progress, school roster data | Environment dependent | environment specific |
| Upstash Redis | Caching, rate limits, queues, and ephemeral AI/cache state when configured | cache keys, rate-limit counters, short-lived metadata | US/EU, region dependent | environment specific |
| Vercel Blob | Optional storage for generated assets, exports, and uploaded learning artifacts | uploaded files, generated files, signed asset URLs | US/EU, region dependent | environment specific |
| IP intelligence provider (e.g. IPinfo) | Optional coarse geolocation and VPN/proxy signals for suspicious-login detection when configured | IP address at query time, country/ASN metadata | US/EU, provider dependent | environment specific |
| Sentry | Error monitoring and performance diagnostics when configured | error traces, device/browser metadata, redacted request context | US/EU, region dependent | environment specific |
| Anthropic | Structured educational generation and scoring when configured | pseudonymized prompts, student work excerpts | US | environment specific |
| xAI | Fallback educational generation when configured | pseudonymized prompts, student work excerpts | US | environment specific |
| OpenAI | Optional oral-reading transcription (Whisper) when configured | audio URL, oral-reading transcript | US, contract dependent | environment specific |
| Managed ASR Provider | Optional oral-reading transcription and word alignment (non-OpenAI) | audio URL, oral-reading transcript | Contract dependent | pending |
| Translation Provider | Optional navigation, family communication, and support translation | text selected for translation | Contract dependent | pending |
| Stripe | Subscription billing, payment processing, and optional COPPA identity verification | billing contact, payment metadata, identity verification documents | US/EU | active |
| Persona | Optional alternate verifiable parental consent identity verification when configured | identity verification documents, verification status metadata | US, contract dependent | environment specific |
| Google OAuth | Adult authentication when Google sign-in is enabled | email address, name, profile image | US/EU, provider dependent | environment specific |
| Cloudflare Turnstile | Bot protection on sign-up, sign-in, and sensitive forms | challenge metadata, browser signals | US/EU, provider dependent | environment specific |
| Plausible Analytics | Optional privacy-preserving, cookieless site analytics when configured | aggregate page views, referrer URL | EU/US, provider dependent | environment specific |
| Inngest | Background job orchestration for AI, retention, roster sync, and maintenance tasks | job payloads, task metadata | US/EU, region dependent | environment specific |
| Clever | Optional school roster and SSO integration when enabled by the customer | roster identifiers, student names, grade levels, class assignments | US | pending |
| ClassLink | Optional school roster and SSO integration when enabled by the customer | roster identifiers, student names, grade levels, class assignments | US | pending |
| SendGrid or email delivery provider | Account, invite, report, and notification email delivery | email address, message metadata | Contract dependent | environment specific |