Subprocessors — Fairgrade LLC
Last updated: 1 October 2026
A subprocessor is a company that handles personal data on our behalf so that we can run Fairgrade. Each one is bound by a written agreement with data-protection obligations at least as strict as our own, and we remain responsible for what it does with your data. We tell customers 30 days before we add or replace one, by email to every account owner and administrator and on this page, and customers may object under the Data Processing Addendum.
Current subprocessors
| Company | What it does for us | What it sees | Where |
|---|---|---|---|
| Amazon Web Services, Inc. | Hosting: servers, database, file storage, queues, email delivery, logs; and the AI models (Anthropic's Claude, run through Amazon Bedrock inside Fairgrade's own AWS account, so Anthropic never receives the data) | All data in the Service. For AI features: submission content, rubric, brief and reference material, peer feedback text, and instructor-uploaded assignment or rubric documents for the readiness check; never a name, email or identifier; not retained, not used for training | United States (N. Virginia) |
| Okta, Inc. (Auth0) | Sign-in, single sign-on, multi-factor authentication | Name, email, password or your institution's identity assertion, role, sign-in times and addresses | United States |
| Stripe, Inc. | Billing and invoices | Account owner's name and email, plan and invoices. Card details are entered on Stripe's own form and never reach Fairgrade | United States |
| Mixpanel, Inc. | Product analytics and, during our beta, masked session replay | An internal identifier, which features are used, and page layout with all text and inputs masked. An approximate location (country, region, city) derived from the IP address, which is not kept. For staff, a profile with name, email, role, plan and institution domain. Never content or scores, and never a student's name or email | United States |
| Crisp IM SAS | Support chat | Your name, email, login identifier and analytics identifier, shared when the chat widget loads so a conversation can be matched to your account, and what you type. For staff, also your role, plan and institution name | European Union (France) |
| Google LLC (Google Workspace) | Our email and documents: privacy@fairgrade.com, info@fairgrade.com and correspondence about requests | What you put in an email to us: your name, address and the content of your request. Nothing from inside the Service is exported to it | United States |
Not subprocessors, and why
- Better Stack monitors whether our public endpoints respond and runs status.fairgrade.com. It receives no personal data.
- GitHub holds our source code, and AI coding tools help us write it. Neither receives data from the Service: production data is never exported to development tools, and our test environments hold fabricated data only.
- Your learning management system (Canvas, Brightspace, Moodle, Blackboard) and your single sign-on provider are your institution's systems, under its own agreements. We exchange data with them only as your institution configures.
Changes
| Date | Change |
|---|---|
| 1 October 2026 | First published list. |