Subprocessors
Day One Education engages the third parties listed below to deliver the Platform. All subprocessors are contractually bound to equivalent privacy and security obligations. This list is updated when subprocessors change.
Last updated: 2026-05-01
| Entity | Role | Location | Data shared |
|---|---|---|---|
| Supabase Pty Ltd | Database, authentication, file storage | Australia (ap-southeast-2) | Account data, user-generated content, payment metadata (not card numbers) |
| Paddle.com Market Limited | Merchant of record — payment processing, tax collection and remittance, refund and chargeback handling, currency conversion, regional payment methods | United Kingdom / United States | Billing details (name, address, payment method), transaction history, tax residency information |
| RevenueCat, Inc. | Subscription state and paywall orchestration | United States | Subscription metadata, entitlement state |
| Railway Corp. | Application hosting (backend and frontend) | Singapore | All data in transit through backend |
| Resend, Inc. | Transactional email delivery | United States | Email address, name, email content |
| OpenAI, Inc. | AI inference | United States | User content submitted to AI features (essay text, tutor messages) |
| Anthropic PBC | AI inference | United States | User content submitted to AI features (essay text, tutor messages) |
| Google LLC | AI inference and Google Analytics 4 measurement | United States | AI inference — user content submitted to AI features. GA4 — pseudonymous device and usage data. |
| GrowthBook (self-hosted on Railway) | Feature flag evaluation | Singapore (via Railway) | Feature flag evaluation attributes (user ID, role, subscription tier) |
| Dialpad, Inc. | Business phone system, call recording, call transcription (via Dialpad AI) | United States | Phone numbers, call audio, call transcripts, voicemail, caller metadata |
For institutional customers with a Data Processing Addendum, a 30-day advance notice is provided for any change to this list.