Subprocessors

Effective: April 27, 2026 · Last updated: May 14, 2026

BellPlan engages the third parties below to deliver the service. Each is contractually bound to data-protection terms equivalent to our Data Processing Addendum and processes data only on BellPlan’s documented instructions. This page is the canonical, current list — the DPA and Privacy Policy both point here.

BellPlan subprocessors with the purpose, category of data processed, and region for each.
SubprocessorPurposeData processedRegion
SupabaseDatabase, authentication, and file storageSchool operational data, staff identity data, authentication metadataUnited States (East)
VercelWeb hosting and edge deliveryRequest metadata; no data at restGlobal edge, primary United States
ResendTransactional email (task assignments, reminders, alerts)Staff name and work email, message contentUnited States
StripeSubscription billing and customer portalBilling-contact data and payment method tokens only — no school operational dataUnited States
SentryError reporting and monitoringStack traces and request metadata; PII filtered before sendUnited States
PostHogProduct analyticsHashed user identifier only — no raw email or nameUnited States

BellPlan does not process student personally identifiable information, FERPA-covered education records, or COPPA-covered data, and none of the subprocessors above receive such data.

We will provide thirty (30) days’ notice before adding or materially changing this list. To receive change notices or object to a subprocessor, email privacy@bellplan.app.