# WiseBoard Subprocessor List

**Version 1.1 — April 20, 2026**

WiseBoard (operated by Chaz Landry, "Operator") engages the following subprocessors
to deliver the Service. Each subprocessor is contractually bound to data-protection
obligations no less protective than those WiseBoard owes its customers, and each
processes only the categories of data necessary for the function listed.

We commit to **30 days' advance notice** to subscribed districts before adding or
materially changing a subprocessor that processes Covered Information. To receive
change notices, email **info@mywiseboardclassroom.com** with subject `subprocessor-notify`.

| # | Subprocessor | Function | Data categories | Region | Transfer mechanism |
|---|---|---|---|---|---|
| 1 | **OpenAI, L.L.C.** (USA) | AI inference for lesson plans, quiz authoring, report cards, progress reports, recommendation letters, parent newsletters, AI feedback on student work, and the Pip assistant. | Teacher-authored prompts that have first been processed by WiseBoard's server-side **3-tier data-minimization layer**: (1) regex scrubbing of email / phone / SSN / street address / MRN / DOB patterns, (2) per-request pseudonymization of known student / parent / school names to opaque tokens (e.g. `STUDENT_1`), (3) restoration of originals in the response before display. **No** payment data, **no** account credentials, **no** photos/avatars, **no** IEP/504/health-plan freeform text. Zero-retention enterprise API tier. | USA | Direct API. DPA on file. |
| 2 | **Stripe, Inc.** (USA) | Subscription billing, payment processing, invoicing, tax. | Teacher name, email, billing address, last-4 of card. Card numbers never touch WiseBoard servers. | USA | Direct API. DPA on file (Stripe Services Agreement). |
| 3 | **Google LLC** — Identity Platform / OAuth | Sign-in with Google (optional). | Google account name, email, profile picture (only when teacher elects Google sign-in). | USA / Global | OAuth 2.0 / OIDC. |
| 4 | **Google LLC** — Cloud Storage (via Replit Object Storage) | File uploads (lesson attachments, avatars, classroom artifacts). | Files uploaded by teachers; presigned URLs scoped per-object. | USA (multi-region) | DPA via Replit. |
| 5 | **Replit, Inc.** (USA) | Application hosting, PostgreSQL, object storage proxy, Deployments, Reserved VM compute. | All Service data at rest. AES-256 encryption at rest, TLS 1.2+ in transit. | USA | Replit DPA / SCCs as applicable. |
| 6 | **Resend, Inc.** (USA) | Transactional + drip email (trial, billing, invitations, parent-portal links). | Recipient email + email body. No bulk marketing of student/parent lists. | USA | DPA on file. |
| 7 | **Schoology / PowerSchool Group LLC** (USA) | LMS export integration (optional, teacher-initiated). | OAuth tokens, course/section IDs, lesson exports. Only when teacher connects an account. | USA | Schoology partner API terms. |
| 8 | **Rediker Software / Plus Portals** (USA) | Roster import (optional, teacher-initiated). | Roster fields (per privacy mode), teacher API credentials. Only when teacher connects an account. | USA | Vendor partner API terms. |
| 9 | **YouTube (Google LLC)** | YouTube Data API for the video-suggestions feature; embedded video playback in lesson pages (privacy-enhanced `youtube-nocookie.com` mode where supported). | Teacher-typed search query strings. **No** student PII; embedded player receives only video IDs. | USA / Global | YouTube API ToS. |
| 10 | **Cloudflare, Inc. — Turnstile** | Bot-protection challenge on signup and high-risk public forms (rate-limit / abuse mitigation). | Session token, browser fingerprint metadata for the challenge only. **No** account or student data. | USA / Global | Cloudflare DPA (publicly available). |

## Categories not used

WiseBoard does **not** use:
- Advertising or analytics SDKs that profile users (no Google Analytics, no Meta Pixel, no Segment, no Mixpanel, no FullStory).
- Third-party tracking cookies.
- Any subprocessor outside the United States for storage of Covered Information.

## Data residency & retention

- **Primary storage:** US-based PostgreSQL (Replit-managed) and US-multi-region object storage.
- **Retention:** Account data retained while account is active + 30 days. On account deletion or written request, all Covered Information is deleted within 30 days, except where required by law for tax/financial recordkeeping (Stripe-side records up to 7 years per US tax requirements).
- **Backups:** Encrypted daily snapshots retained 30 days, then cryptographically destroyed.

## Contact

`info@mywiseboardclassroom.com` for subprocessor notifications, audit requests, or to receive the most recent version of this list.