SUBPROCESSORS

Last updated April 24, 2026

Groves Holdings LLC d/b/a GradePath uses the following third-party service providers ("Subprocessors") to operate the Services. Each provider processes personal data on our behalf and is bound by its own terms and security practices.

This list is provided for transparency and for compliance with data protection laws. If you represent an institution procuring GradePath and require advance notice of changes, include that in your agreement with us.

Current subprocessors


SubprocessorPurposeData processedLocation
Anthropic, PBC AI inference for syllabus parsing, tutor chat, agent tasks User prompts, assembled context (course names, grade summaries), uploaded syllabus and document content United States
Supabase Inc. Database, authentication, file storage Account credentials, course and grade data, uploaded course materials, vector embeddings United States (primary region)
Vercel Inc. Website and application hosting, serverless function execution, CDN All request and response data for users of the Services, including IP addresses and usage logs United States and global CDN edges
Stripe, Inc. Payment processing, subscription management Name, billing address, payment method details (handled by Stripe, not stored by us), subscription state United States
Google LLC Google Sign-In and Google Calendar synchronization (only for users who connect) Email, profile info, calendar events, OAuth tokens United States
PostHog, Inc. Product analytics Anonymized event data, page views, feature interactions, IP address United States
Functional Software, Inc. (Sentry) Error tracking and performance monitoring Error stack traces, browser info, anonymized user identifiers, request metadata United States
Cloudflare, Inc. Email routing ([email protected] and related aliases), DNS Email metadata for messages routed through our domain United States and global edges
GitHub, Inc. (Microsoft) Source code repository hosting Product source code (does not include user data) United States

Learning Management Systems (user-initiated only)

When a user connects a Learning Management System account, GradePath exchanges data with that LMS under the user's own account. These are not subprocessors of GradePath in the traditional sense; the user is authorizing a direct connection between their LMS account and GradePath on their behalf. Supported LMSes include Canvas and, where enabled, Blackboard, Brightspace, and Moodle. Tokens are encrypted at rest using AES-256-GCM.

Changes

We may add or change subprocessors as the Services evolve. The date at the top of this page reflects the most recent update. For institutional customers, we provide at least thirty (30) days' advance notice of new subprocessors that process student personal data, as described in our Privacy Policy and in any applicable Data Processing Addendum.

Questions

Email [email protected] with the subject line "Subprocessors".