Sub-Processors
Last updated: 2026-08-05
This list covers sub-processors used by the Interactive Case Study Builder platform.
| Sub-Processor | Role | Data Categories | Location | Notes |
|---|---|---|---|---|
| Clerk | Authentication & organization management | Institution admin and instructor accounts only (no student accounts) | United States | Students are never authenticated; Clerk handles only institutional (admin/instructor) identity. |
| Neon | Database (PostgreSQL) | Simulation definitions + display-name-only conversation transcripts (no verified student identity) | United States | Data encrypted at rest (platform-level); TLS in transit. |
| Vercel | Hosting & edge delivery | Request/response data in transit (transient only, no persistence) | United States | TLS enforced; no student data at rest on Vercel. |
| Stripe | Billing & subscription management | Institution billing data (payment methods, invoices); no student billing data | United States | Only institution-level billing contact; no student billing data. |
| Upstash | Rate limiting (Redis) | Request counters keyed by IP address; no names, no message content, no account data | United States | Keys hold an IP address and a request count for the length of the rate-limit window (60 seconds), then expire automatically. Used to protect the student chat and report endpoints from abuse. |
| Configured AI Provider (Anthropic / OpenAI / Google) | AI conversation processing | Conversation content (student messages + AI responses), via institution's own API key | Per the institution's own provider account | Content is processed through the institution's own provider account and key — not a vendor-managed key. |
No student email, student ID, demographic data, or grade is stored in any sub-processor system. IP addresses are processed transiently for rate limiting and expire within 60 seconds. Conversation content is routed through each institution’s own AI provider relationship (bring-your-own-key).
This list is updated if sub-processors change. Institutions are notified of material changes.