Sub-Processors
Docent shares personal data with the third-party service providers listed below solely to operate the platform. Each provider operates under a Data Processing Agreement (DPA) or equivalent contractual commitment that prohibits use of data beyond the stated purpose. We notify active account holders at least 30 days before adding or removing a sub-processor that touches personal data.
Last updated: June 2026. Questions: dpo@docent.academy
| Provider | Service | Data Processed | Region | DPA / Privacy Policy |
|---|---|---|---|---|
| Anthropic | AI tutoring (Claude API) | Student utterances (processed in-flight), lesson content | US | https://www.anthropic.com/legal/privacy |
| Groq | Speech-to-text (Whisper) | Voice audio clips (transient, not stored) | US | https://groq.com/privacy-policy |
| xAI | Text-to-speech | Tutor text responses | US | https://x.ai/legal/privacy-policy |
| Cloudflare | Workers AI, CDN, DDoS | Edge processing, static assets | Global | https://www.cloudflare.com/privacypolicy |
| Neon / Postgres | Database | All tenant and student data | ap-southeast-2 (AU), eu-west-2 (UK) | https://neon.tech/privacy-policy |
| Redis / Upstash | Session cache | Session tokens (30-min TTL) | Same as Postgres | https://upstash.com/trust/privacy.pdf |
| Resend | Transactional email | Parent email address, digest content | US | https://resend.com/legal/privacy-policy |
| Stripe | Payment processing | Payment card data (PCI DSS Level 1) | US | https://stripe.com/privacy |
| PostHog | Product analytics (optional) | Usage events (anonymised, opt-in) | EU | https://posthog.com/privacy |
| Sentry | Error monitoring | Stack traces (DLP-redacted) | US | https://sentry.io/privacy |
| LiveKit | Realtime voice rooms | Audio streams (in-flight only) | Global | https://livekit.io/privacy |
| Voyage AI | Curriculum embeddings | Curriculum text (public ACARA data) | US | https://www.voyageai.com/privacy |
Changes to this list
We will notify active account holders by email at least 30 days before adding any new sub-processor that touches personal data, or before making a material change to how an existing sub-processor uses your data. The date at the top of this page is updated on every change. To request copies of signed DPAs or the full Data Protection Impact Assessment, email dpo@docent.academy.
Innovenses Pty Ltd · Melbourne, Australia · dpo@docent.academy · Privacy Policy · Terms of Service