DRAFT — requires legal review before production use. WASL does not claim to be “fully GDPR compliant”. Some details are pending controller/legal input.
Subprocessors
WASL uses the following service providers. Hosting regions and DPA/transfer status are being confirmed and are shown as unverified until then.
| Provider | Purpose | Data | Region |
|---|---|---|---|
| Supabase | Auth, database, storage, realtime | All tenant data; homework audio | UNVERIFIED |
| Vercel | Hosting & logs | Request metadata; redacted logs | UNVERIFIED |
| LiveKit | Live audio/video/screen-share | Media; pseudonymous id; display name | UNVERIFIED |
| Resend (optional) | Transactional email | Recipient email; sender/academy name | UNVERIFIED |
| Sentry (optional) | Error monitoring | Redacted error context | UNVERIFIED |
| Upstash (optional) | Rate limiting | Rate-limit keys with a user id | UNVERIFIED |
A billing provider is not currently integrated; no payment data is processed today.