Legal
Subprocessor Register
Every third party that touches Gigsup user data, what it does for us, and where it runs. Last updated August 20, 2026.
how we use subprocessors
A subprocessor is a vendor we use to deliver the service that may process personal information on our behalf. Every subprocessor is bound by contract to the same commitments we make to you: no sale of personal information, no advertising use, no profiling of students for non-educational purposes, and security obligations at least as protective as our own. We review each vendor before use and annually after that.
current subprocessors
| Subprocessor | What it does | Data it touches | Region |
|---|---|---|---|
| Cloud hosting provider Named in the signed DPA schedule and confirmed before each school deployment | Application hosting, database, and backups | All service data, encrypted in transit and at rest | |
| Resend | Transactional and consented lifecycle email delivery | Email address, name, message content. Nothing is sent without a consent record. | United States |
| Anthropic | AI processing for guidance features (career matching explanations, planning assistance) | Assessment and plan text processed transiently to generate results. Contractually excluded from model training: no student data is ever used to train AI models. | North America |
changes to this list
We add a subprocessor only after due diligence, and this page is updated before the change takes effect. Schools and districts with a signed agreement receive prior written notice of any new subprocessor and may object as their agreement provides. Anyone can ask questions about this register at hey@joingigsup.com with the subject line "Privacy Officer".
This document is a working draft prepared for review by qualified counsel in Canada and the United States before public launch. Hosting entries are confirmed at contract signing. Not legal advice.