SPEDScribe.ai Subprocessors
Voice-to-IEP documentation for special education teams. Governed by FERPA. Built to give providers their time back.
- Subprocessors
- 12
- Locations
- 11
- Categories
- 9
- Last scanned
| Name | Category | Purpose | Location | Data processed |
|---|---|---|---|---|
| Anthropic | AI | Drafts clinical documentation under Anthropic's commercial terms; no training on customer data; SPEDScribe does not hold a Zero Data Retention enterprise agreement | United States only (stored data model processing) | The provider's notes after server-side redaction, with the details sent with them: discipline, session type, the student's home language, any goals the provider entered, the session's length and voice-command counts when there are any, and the session's earlier documents the new one builds on; for a PLAAFP or annual goals, also the student's grade level and the session's date, which those documents then carry. |
| AssemblyAI | AI | Audio transcription; built-in PII redaction applied to the returned transcript |
 United States
|
Dictation audio and the transcript made from it. |
| Supabase | Database | Encrypted storage of the service's data (AES-256 at rest) | United States (US West region) | Account data, student records, session details, notes and observations providers type, and generated documents |
| Vercel | Cloud Infrastructure | Runs the web application, and counts page visits and measures page speed without cookies | United States (San Francisco region) with a global edge network | Every request to the application, including dictation audio and notes on their way to our servers; request logs; and page addresses, some of which contain a record ID |
| Clerk | Authentication | Sign-in and account security: Google or Microsoft sign-in, or email and password |
United States
other countries where Clerk operates
|
Provider name, email address, sign-in credentials, session tokens, IP address and browser details |
| Sentry | Error Tracking | Production error tracking and stack-trace collection. Session replays are disabled. |
United States
|
Error reports with user details, cookies, request bodies and query strings removed, and email addresses, Social Security numbers and phone numbers in their common forms replaced, before sending. All Sentry events are stripped of user context before send. A name that appears inside an error message is not removed, and Sentry sees the network address each report is sent from. |
| Stripe | Payment Processing | Subscription billing. Stripe also acts on its own account for fraud prevention. |
United States
other countries where Stripe operates
|
The name, email address and payment details of the person who subscribes, entered on Stripe's own checkout page, and their SPEDScribe account ID. No student data. |
| Resend | Sends account and billing email, such as the subscription acknowledgment |
United States
|
The recipient's name and email address and the content of the email. No student data. | |
| Upstash | Database | Short-lived counters that limit abuse and enforce plan limits, and a marker that lasts a few minutes while a document is being written | United States (N. California) | Account IDs, organization IDs and IP addresses held in short-lived counters, and a session's record ID while one of its documents is being written. No student data. |
| Google Workspace | Productivity | Receives and stores email sent to our addresses at spedscribe.ai |
United States
other countries where Google operates
|
Whatever you send us by email |
| GoHighLevel | CRM | Our CRM for demo requests, reached from our server | Not verified | What prospects enter in our demo request form: name, email address, school or district, and role or discipline |
| Cloudflare Turnstile | Cloud Infrastructure | Captcha at sign-up, run through Clerk | Not verified | The visitor's IP address and browser and connection details, which Turnstile uses to tell people from bots |
No subprocessors match your filters.
No changes recorded yet. Changes will appear here after the next scan detects updates.