Sub-processors
Effective date: August 2026. We update this list before any new sub-processor goes live.
LectraScan AI engages the third-party services below to operate the product. Each is engaged under its published data-processing terms, which restrict use of customer data to delivering the service, and each is required to maintain technical and organizational security measures appropriate to the data they process. The app stores (Apple, Google) are listed for transparency; our relationship with them is governed by their platform agreements rather than by a data-processing agreement we negotiate. If you would like to receive notifications when this list changes, email privacy@cienrios.com with the subject line Sub-processor notifications.
| Provider | Purpose | Data types | Region |
|---|---|---|---|
| Supabase | Authentication, Postgres database, private object storage, edge functions. | Account email, hashed password, organization metadata, scanned document images, OCR/AI text, audit logs, billing entitlements. | United States (dedicated Supabase project). |
| Google Cloud — Vision API | Server-side OCR (handwriting recognition) on uploaded document images. | Document images submitted for transcription. Images are sent server-to-server from a Supabase edge function; Google does not retain inputs for model training under the standard Vision API terms. | Global (Google Cloud regional routing). |
| Apple Vision (on-device) | Optional on-device OCR for single-page scans on supported iPhones and iPads. Not a sub-processor: no third party receives the image for this step. | Text recognition runs locally, so the image is never sent to an OCR provider. The page image is still uploaded to your private Supabase storage, as it is on every scan. | On your device. |
| Cien Rios AI Proxy | Centralized, HMAC-signed gateway in front of LLM providers for clarity rewrites and translations. Routes requests through Cloudflare AI Gateway and OpenRouter. | OCR text, clarified text, translation source/target text. Forwarded to downstream providers; request logs hold metadata (app id, model, token counts), not document content. | United States — operated by Cien Rios LLC (parent company). |
| OpenRouter | Model-routing API used by the Cien Rios AI proxy to reach LLM providers with automatic fallback. | Prompt text passed through the proxy (OCR text, translation source text). OpenRouter is configured not to retain prompts. | United States. |
| OpenAI | Primary LLM provider for AI clarity rewrites and translation (accessed only via the Cien Rios AI proxy / OpenRouter). | OCR text passed through the proxy. OpenAI’s API terms do not use API inputs for model training. | United States. |
| Anthropic | Fallback LLM provider for AI clarity rewrites when the primary model is unavailable (via the Cien Rios AI proxy / OpenRouter). | OCR text passed through the proxy. Anthropic’s API terms do not use API inputs for model training. | United States. |
| Google (Gemini API) | Fallback LLM provider for translation when the primary model is unavailable (via the Cien Rios AI proxy / OpenRouter). | Verified source text passed through the proxy. Google’s paid API terms do not use inputs for model training. | United States. |
| Stripe | Payment processing and billing portal for subscriptions purchased on the web. | Email, payment method (held by Stripe, never by us), subscription and invoice events. | United States. |
| RevenueCat | Subscription entitlement and receipt verification for App Store and Play Store purchases. | App user ID (UUID), subscription product identifiers, purchase events. | United States. |
| Vercel | Hosting and edge runtime for the web marketing site and admin panel. | HTTP request metadata (IP, user agent, country) for routing, plus aggregate Vercel Web Analytics and Speed Insights performance metrics. | Global (US/EU edge nodes). |
| Expo (Expo Application Services) | Over-the-air delivery of app updates to the installed mobile app. | Device and runtime metadata (platform, app/runtime version) and IP address, sent when the app checks for an update. | United States. |
| Cloudflare | DNS, Turnstile captcha verification, downstream AI Gateway (within the Cien Rios AI Proxy). | Request metadata, captcha tokens. | Global. |
| Resend | Transactional email (sign-up confirmation, password reset). | Recipient email address, message metadata. | United States. |
| Apple App Store | iOS subscription billing and receipt issuance. | Apple ID (not received by us), purchase confirmation events forwarded via RevenueCat. | Per Apple regional policy. |
| Google Play | Android subscription billing and receipt issuance. | Google account (not received by us), purchase confirmation events forwarded via RevenueCat. | Per Google regional policy. |
Data residency
The primary Postgres database and object storage that hold student-uploaded documents are hosted on Supabase in the United States. EU and UK customers requiring data residency in their region should contact institutions@cienrios.com before signing up; we evaluate region-specific deployments case-by-case for institution customers.
Standard Contractual Clauses
Where personal data of EEA, UK, or Swiss data subjects is transferred to sub-processors outside their jurisdiction, the transfer is governed by the relevant Standard Contractual Clauses (EU 2021/914 module, UK IDTA addendum, or Swiss FDPIC equivalent). A copy of our Data Processing Addendum, including SCCs, is available on request from privacy@cienrios.com.
Contact
Questions about data processing? privacy@cienrios.com.
See also: Privacy Policy · Terms of Service.