Subprocessors — Production Draft

This list must be updated to match the real production deployment before student data is used.

Expected/current providers

• Supabase: authentication/database/storage. Use a dedicated Australia-region MathsExpress project for production.
• Hosting provider: choose and document Vercel, Netlify or Cloudflare rather than listing unused providers.
• AI provider (optional): Groq is supported in the current server endpoints; review and document actual production API terms, data location/retention and training settings before school AI use.
• Email provider: select and document a trusted provider for production authentication/notifications.
• Monitoring: add any provider actually used for availability/error monitoring.
• School integrations: Canvas, Clever, Google/Microsoft or others only when a school enables/configures them.

Full working register: LEGAL-COMPLIANCE/SUBPROCESSOR-REGISTER.md.