Sub-Processors
Last Updated: November 12, 2025
GradeAssist, Inc. (operating as TypeOS) engages the following third-party sub-processors to help deliver the Service. These providers may process customer data, including personal information, on our behalf and under appropriate data protection agreements.
We will provide notice of material changes to this list as required by applicable data protection agreements.
AI/ML Providers
These providers power AI-enabled features within TypeOS. Where available, we configure these services to prevent use of customer content for training their models.
| Provider | Purpose | Data Processed | Location | Privacy Policy |
|---|---|---|---|---|
| Anthropic | AI/ML text generation (Claude models) | Customer prompts, content submissions | United States | anthropic.com/privacy |
| Microsoft Azure (OpenAI Service) | AI/ML text generation | Customer prompts, content submissions | United States | azure.microsoft.com/privacy |
| Google AI / Vertex AI | AI/ML text generation, document processing | Customer prompts, content submissions | United States | cloud.google.com/privacy |
| OpenAI | AI/ML text generation | Customer prompts, content submissions | United States | openai.com/privacy |
| Groq | AI/ML inference acceleration | Customer prompts, content submissions | United States | groq.com/privacy-policy |
| Cerebras | AI/ML inference | Customer prompts, content submissions | United States | cerebras.ai/privacy-policy |
| Perplexity AI | AI-powered search and analysis | Search queries, content context | United States | perplexity.ai/privacy |
| OpenRouter | AI model routing and access | Customer prompts, content submissions | United States | openrouter.ai/privacy |
Cloud Infrastructure & Storage
These providers host our application infrastructure and store customer data.
| Provider | Purpose | Data Processed | Location | Privacy Policy |
|---|---|---|---|---|
| Google Cloud Platform | Database (Firestore), file storage, authentication (Firebase Auth), hosting | Customer content, account data, files, metadata | United States (us-central1, us-east1) | cloud.google.com/privacy |
| Vercel | Application hosting, edge functions, CDN | Request metadata, usage logs | United States, Global CDN | vercel.com/legal/privacy-policy |
| Microsoft Azure | AI services, supplemental storage | Customer prompts, temporary processing data | United States | azure.microsoft.com/privacy |
| Amazon Web Services (AWS) | File storage (S3), AI services (Bedrock) | Customer files, backups | United States | aws.amazon.com/privacy |
Authentication & Identity
These providers enable secure authentication and single sign-on (SSO).
| Provider | Purpose | Data Processed | Location | Privacy Policy |
|---|---|---|---|---|
| OAuth authentication (Sign in with Google) | Email, name, profile picture | United States | policies.google.com/privacy |
Communication & Support
These providers help us communicate with users and provide customer support.
| Provider | Purpose | Data Processed | Location | Privacy Policy |
|---|---|---|---|---|
| Resend | Transactional email delivery | Email addresses, message content, delivery logs | United States | resend.com/legal/privacy-policy |
| Intercom | Customer support chat, product messaging | Name, email, usage data, support conversations | United States | intercom.com/legal/privacy |
Analytics & Monitoring
These providers help us understand product usage, debug issues, and improve the Service.
| Provider | Purpose | Data Processed | Location | Privacy Policy |
|---|---|---|---|---|
| PostHog | Product analytics, feature usage tracking | Usage events, page views, anonymized user behavior | United States / EU (cloud) | posthog.com/privacy |
| Mixpanel | Product analytics, user behavior tracking | Usage events, feature interactions, device data | United States | mixpanel.com/legal/privacy-policy |
Data Protection & Compliance
All sub-processors are contractually required to:
- Process customer data only as instructed by GradeAssist
- Implement appropriate technical and organizational security measures
- Maintain confidentiality of customer data
- Comply with applicable data protection laws (GDPR, CCPA, FERPA, PIPEDA)
- Provide appropriate safeguards for international data transfers (e.g., Standard Contractual Clauses)
- Notify us of any data security incidents
Changes to This List
We may add, remove, or change sub-processors from time to time to improve the Service or as necessary for business operations. Material changes will be communicated to organizational customers as required by applicable Data Protection Addenda.
How to receive updates:
- Enterprise customers with a Data Protection Addendum (DPA) will receive email notifications of material changes
- This page will always reflect our current list of sub-processors
- Check the "Last Updated" date at the top of this page
Questions?
If you have questions about our sub-processors or data processing practices, please contact us:
Email: daniel@typeos.com
GradeAssist, Inc. 2261 Market Street, STE 86458 San Francisco, CA, United States
For more information about how we protect your data, see our Privacy Policy and Security pages.
