Last updated: April 28, 2026 · ← Back to Privacy Policy
To run Gradeport, we rely on a small number of trusted external services. This page lists every vendor that may handle data on our behalf — including uploaded graded papers and extracted grade information — so that schools and institutions can review them as part of their own privacy or vendor assessments.
We keep this list short on purpose. We do not use advertising networks, analytics platforms that track individuals, or data brokers. Every vendor listed here is needed to operate the core product.
| Vendor | Location | Role | Data processed |
|---|---|---|---|
| Vercel | USA (global CDN) | Frontend hosting | Serves the application UI. Does not process uploaded papers or grade data. |
| Railway | USA (us-west2) | Backend API hosting | Runs the Gradeport API server. Processes API requests including scan and grade confirm requests. |
| Vendor | Location | Role | Data processed |
|---|---|---|---|
| Supabase | USA (us-east-1, AWS) | Database, authentication, file storage | Stores all structured data including classes, students, assignments, grade entries, and scan records. Stores uploaded paper images and exported gradebooks in private storage buckets. Handles user authentication via Google OAuth. |
| Vendor | Location | Role | Data processed |
|---|---|---|---|
| Google Gemini API (Google LLC) |
USA / Google infrastructure | OCR and grade extraction | Uploaded paper images are sent to the Gemini API to extract student names, scores, and question-level marks. Gradeport uses a paid API configuration. Under Google's paid-tier terms, submitted data is not used to train or improve general-purpose models. Images are not retained by Google beyond the API call. |
| Vendor | Location | Role | Data processed |
|---|---|---|---|
| Resend | USA | Transactional email | Sends confirmation emails for waitlist signups and beta invitations. Processes name and email address only. Does not process uploaded papers or grade data. |
| Vendor | Location | Role | Data processed |
|---|---|---|---|
| Google OAuth (Google LLC) |
USA / Google infrastructure | Sign-in provider | Used for Google Sign-In. Gradeport receives a name, email address, and authentication token from Google. No grade or paper data is shared with Google via this flow. |
This list is updated when vendors are added, removed, or changed. For institutional privacy review or a formal subprocessor disclosure, contact privacy@gradeport.org.