What Subprocessors Are
Subprocessors are the third-party vendors Blueprint uses to run the service, and that may process personal data on our behalf as part of that work. This page is the current register of every subprocessor we use.
This register was last updated on July 11, 2026.
Current Subprocessors
| Vendor | Purpose | Data processed | Location |
|---|---|---|---|
| Vercel | Application hosting and AI Gateway routing | Application traffic; AI prompts and responses in transit | United States |
| Supabase | Primary database and file storage | Account and student data stored in Blueprint | United States |
| Anthropic | AI text processing | AI prompts that may include student-written content, and generated responses | United States |
| AI text processing | AI prompts that may include student profile data, and generated responses | United States | |
| PostHog | Product analytics and session replay | Pseudonymized usage events and device metadata | United States |
| Sentry | Error tracking | Error reports and request metadata | United States |
| Resend | Transactional email | Recipient email address and email content | United States |
| Stripe | Payment processing | Billing and payment details (Blueprint never stores card numbers) | United States |
| Upstash | Rate limiting and abuse prevention | Client IP addresses and request counters | United States |
AI Providers and Data Retention
Every Blueprint AI request to Anthropic and Google goes through the Vercel AI Gateway with zero data retention. Student content sent for AI processing is not retained by those providers beyond the request, and it is never used to train models.
Changes to This List
We give schools at least 30 days’ notice before adding or replacing a subprocessor. This page always reflects the current register.
Questions
If you have questions about our subprocessors, or if your school or district needs our FERPA Data Processing Agreement (DPA) template, contact us at support@applywithblueprint.com.