← Trust Center

Service Providers & Subprocessors

Last updated September 14, 2026

CramLoop uses a limited number of infrastructure providers to operate the service. These providers process information only as needed to provide their contracted services.

Vercel

Purpose: application hosting, web delivery, server-side execution, deployment infrastructure, and related platform services.

Data involved: web requests, technical request metadata, application responses, and information processed by the application while serving users.

Supabase

Purpose: authentication, database services, session handling, and related backend infrastructure.

Data involved: account identifiers, authentication/session information, teacher and student profile data, assessments, assignments, attempts, scores, reports, and other application records stored by CramLoop.

Future providers

If CramLoop adds a provider that materially handles school or student information, this page should be updated before or when that provider is used in production. Optional tools that are not enabled for school/student data are not represented here as active subprocessors.

District review

Schools or districts that require additional provider-specific information may request it during their vendor review process. This public list is intended to provide a clear baseline and does not replace a district-specific agreement where one is required.

Also see Security, School & Student Privacy, and Data Retention & Deletion.