Sub-processors
Effective date: April 2026. We update this list before any new sub-processor goes live.
LectraScan AI engages the third-party services below to operate the product. Each is bound by a written agreement that prohibits use of customer data for any purpose other than delivering the service to LectraScan, and each is required to maintain technical and organizational security measures appropriate to the data they process. If you would like to receive notifications when this list changes, email privacy@cienrios.com with the subject line Sub-processor notifications.
| Provider | Purpose | Data types | Region |
|---|---|---|---|
| Supabase | Authentication, Postgres database, private object storage, edge functions. | Account email, hashed password, organization metadata, scanned document images, OCR/AI text, audit logs, billing entitlements. | United States (project `fjhilfsnaqbxsbzgubms`). |
| Google Cloud — Vision API | Server-side OCR (handwriting recognition) on uploaded document images. | Document images submitted for transcription. Images are sent server-to-server from a Supabase edge function; Google does not retain inputs for model training under the standard Vision API terms. | Global (Google Cloud regional routing). |
| Cien Rios AI Proxy | Centralized, HMAC-signed gateway in front of LLM providers (OpenAI, Anthropic) for clarity rewrites and translations. | OCR text, clarified text, translation source/target text. Forwarded to downstream providers without retention by the proxy itself. | United States — operated by Cien Rios LLC (parent company). |
| OpenAI | LLM provider for the AI clarity rewrite step (accessed only via the Cien Rios AI proxy). | OCR text passed through the proxy. OpenAI’s API terms apply zero-retention for API traffic. | United States. |
| Anthropic | LLM provider for translation (planned, accessed only via the Cien Rios AI proxy). | Verified source text passed through the proxy. Anthropic’s API terms apply zero-retention for API traffic. | United States. |
| RevenueCat | Subscription entitlement and receipt verification for App Store and Play Store purchases. | App user ID (UUID), subscription product identifiers, purchase events. | United States. |
| Vercel | Hosting and edge runtime for the web marketing site and admin panel. | HTTP request metadata (IP, user agent, country) for routing and Web Analytics aggregate metrics. | Global (US/EU edge nodes). |
| Cloudflare | DNS, Turnstile captcha verification, downstream AI Gateway (within the Cien Rios AI Proxy). | Request metadata, captcha tokens. | Global. |
| Resend | Transactional email (sign-up confirmation, password reset). | Recipient email address, message metadata. | United States. |
| Apple App Store | iOS subscription billing and receipt issuance. | Apple ID (not received by us), purchase confirmation events forwarded via RevenueCat. | Per Apple regional policy. |
| Google Play | Android subscription billing and receipt issuance. | Google account (not received by us), purchase confirmation events forwarded via RevenueCat. | Per Google regional policy. |
Data residency
The primary Postgres database and object storage that hold student-uploaded documents are hosted on Supabase in the United States. EU and UK customers requiring data residency in their region should contact institutions@cienrios.com before signing up; we evaluate region-specific deployments case-by-case for institution customers.
Standard Contractual Clauses
Where personal data of EEA, UK, or Swiss data subjects is transferred to sub-processors outside their jurisdiction, the transfer is governed by the relevant Standard Contractual Clauses (EU 2021/914 module, UK IDTA addendum, or Swiss FDPIC equivalent). A copy of our Data Processing Addendum, including SCCs, is available on request from privacy@cienrios.com.
Contact
Questions about data processing? privacy@cienrios.com.
See also: Privacy Policy · Terms of Service.