CohortLedger
Legal / Subprocessors

Subprocessors.

The third-party services we rely on. Detail and contractual terms live in the Data Processing Addendum; this page is the bookmarkable list.

Effective June 8, 2026

  • Vercel Inc.
    Frontend hosting, edge network, and serverless function execution for the marketing site and operator dashboard.
    United States (Vercel edge network, primary US-East)
    Active
  • Supabase Inc.
    Primary database (PostgreSQL), authentication, file storage, and edge functions for the operator dashboard.
    United States (Supabase US-East region)
    Active
  • Stripe, Inc.
    Subscription billing for CohortLedger subscriptions and processing of out-of-pocket family balances the operator collects through the dashboard.
    United States (Stripe US infrastructure)
    Active
  • Resend, Inc.
    Transactional email delivery (account confirmations, compliance reminders, audit-packet notifications) and the SMTP backend for Supabase Auth.
    United States (Resend US infrastructure)
    Active

Full purpose, data accessed, and contractual terms for each subprocessor are in the Data Processing Addendum. Schools entitled to advance notice receive at least 30 days before a Planned subprocessor activates against live data.

Questions or objections: privacy@cohortledger.com. Last reviewed June 8, 2026.