Legal
Subprocessors
Last updated · 12 May 2026
AI Essay Grader Europe engages the following subprocessors to provide the Service. Each is bound by a Data Processing Agreement that flows down our obligations under the GDPR. We will give at least 30 days’ notice before adding or replacing any subprocessor.
Current subprocessors
| Subprocessor | Purpose | Location | Transfer mechanism |
|---|---|---|---|
| Supabase (Lovable Cloud) | Managed database, authentication and edge functions | EU (Frankfurt, eu-central-1) | EU only |
| Cloudflare | CDN, DDoS protection, edge runtime | Global edge with EU regions preferred | SCCs (2021/914), EU data localisation enabled |
| Google (Gemini API) | AI model inference for grading, OCR and rubric generation | EU regions where available | SCCs (2021/914), zero-retention agreement |
| OpenAI Ireland Ltd. | Fallback AI model inference | EU (Ireland) with US failover | SCCs (2021/914), zero-retention API |
| Stripe Payments Europe Ltd. | Subscription billing and tax | EU (Ireland) | EU only |
| Resend | Transactional email delivery | EU regions | SCCs (2021/914) |
| Sentry GmbH | Error monitoring (PII scrubbed) | EU (Frankfurt) | EU only |
| Plausible Insights OÜ | Privacy-friendly product analytics | EU (Germany) | EU only |
Subscribe to changes
Email dpo@classx.eu with the subject line “Subprocessor notifications” to receive advance notice of additions or replacements. You may object on reasonable data-protection grounds; if we cannot accommodate the objection, you may terminate the affected service.
Onward subprocessors
Each subprocessor maintains its own list of onward processors, accessible via its trust or compliance pages. We review these as part of our annual vendor assessment.
This document is provided as a starting template adapted for European education providers. It does not constitute legal advice. Have qualified counsel review and tailor it to your jurisdiction and processing activities before relying on it.