Subprocessor List

Supabase, Inc.

Postgres database, authentication, row-level security, and vector storage. Account, tenant, roster, worksheet, submission, marking, billing-reference, and audit records are stored in the configured project region.

Render Services, Inc.

Workflow processing in the configured Singapore region, including PDF and image preparation, ingestion, marking, and feedback exports. Tasks access the private source and student-work evidence needed for each operation.

Mathpix, Inc.

OCR, layout, and line geometry for worksheet and student-page inputs. Axtant disables optional improvement use where supported and deletes asynchronous PDF artifacts after retrieval.

OpenAI, L.L.C.

Visual assessment understanding, reading of student work, student-response mapping, marking, and cohort synthesis through the Responses API. Inputs are limited to the exact source, response, and marked-example evidence required for each operation; response storage is disabled and no provider tools are enabled. Records of sandboxed computation from earlier service versions remain tenant-scoped under the same export, legal-hold, retention, and deletion controls as marking evidence.

Stripe Payments Europe, Limited and Stripe affiliates

Checkout, subscriptions, metered overage, invoices, customer portal, payment events, refunds, tax calculation where enabled, and billing reconciliation. Stripe receives agency billing contacts, payment-related data, and the Checkout visitor's network location to select between supported currencies.

Mailgun Technologies, Inc.

Transactional application email and custom SMTP for authentication. Mailgun receives the recipient, template content, delivery metadata, and bounce or complaint events. Student answer content is not placed in email.

Functional Software, Inc. (Sentry)

Privacy-scrubbed application error monitoring and terminal operational alerts. Axtant disables session replay, tracing, logs, user context, cookies, headers, request bodies, query strings, breadcrumbs, and stack variables. Student answers, photos, OCR, and feedback are not sent to Sentry.

Cloudflare, Inc.

Application hosting, request handling, private object storage, database connection pooling, and processing queues and workflows. Cloudflare handles application requests and stores uploaded worksheets, guides, student pages, and generated artifacts in private R2 buckets. Edge requests may be processed globally; the buckets use an Oceania location hint, which is not a guarantee of data residency.

Authoritative DNS for Axtant's website and email domains.

Apple (iCloud Mail)

Mail hosting for Axtant's public contact addresses. Apple processes messages, attachments, sender and recipient details, and mail metadata sent to these inboxes. It does not deliver product emails to agencies or students.

Changes

Axtant will update this list before a material production subprocessor begins processing customer data where practical. Axtant may replace a provider or change a processing region only after reviewing the provider's security, privacy, and contractual terms.