Instructional Partner subprocessor list

Purpose: Core hosting, compute, storage, secrets handling, and application logging.

Data involved: Application data, uploaded instructional files, generated artifacts, logs, and operational metadata depending on the service path in use.

Security responsibility: Instructional Partner manages application configuration, access controls, monitoring, and service-level protections; AWS provides managed cloud infrastructure under the shared responsibility model.

Purpose: Managed PostgreSQL hosting for application database workloads.

Data involved: Tenant, user, membership, uploaded-resource metadata, generated-artifact metadata, and other application database records for environments using Neon-hosted Postgres.

Security responsibility: Instructional Partner manages schema design, authorization, credential handling, and service configuration; Neon provides the managed database platform.

Purpose: AI-powered generation and revision for instructional workflows such as units, assignments, and assessments.

Data involved: Teacher-entered prompts, structured instructional context, selected uploaded excerpts, Transfer Block summaries, attribution metadata when relevant, and generated-material context necessary for requested workflows.

Security responsibility: Instructional Partner is responsible for data minimization and workflow design; OpenAI provides managed model-serving infrastructure for API processing.