ReadTheory — List of Subprocessors
ReadTheory may update this list from time to time as our use of subprocessors changes. Some subprocessors
listed below process only educator or administrative data and do not receive access to student data, as
indicated in the descriptions.
| Subprocessor | Website URL | Purpose of Processing | Data Types Disclosed | Countries Where Data May Be Processed or Stored |
|---|---|---|---|---|
| Amazon Web Services, Inc. | https://aws.amazon.com/security/ | Cloud hosting, infrastructure, storage, and processing for ReadTheory’s platform. | Student account data, educator account data, reading activity, assessment responses, usage data, technical logs. |
United States — AWS US East 2 / Ohio |
| Google Workspace | https://cloud.google.com/security/compliance | Internal communication, email, video conferencing, voice calls, and customer support. | Educator contact information, support communications, administrative communications. | United States |
| Google Analytics | https://support.google.com/analytics/answer/9019185 | Website analytics and usage measurement. | Website usage data, device/browser information, IP-derived location, cookie or similar identifiers; educator or non-personal usage data only. |
United States |
| Microsoft Clarity | https://clarity.microsoft.com/privacy | Website analytics, session insights, and user experience improvement. | Website usage data, device/browser information, interaction data, cookie or similar identifiers; educator or non-personal usage data only. |
United States |
| Pipedrive | https://www.pipedrive.com/en/trust-center | Customer relationship management (CRM). | School/district contact information, educator name, email address, organization, sales communications. |
United States |
| HubSpot | https://legal.hubspot.com/security | CRM, chat, marketing, and customer communications, including through an AI support chatbot. | Educator or school contact information, email address, organization, marketing interactions, chat messages, prospect contact data. |
United States |
| Stripe | https://stripe.com/docs/security | Payment processing and subscription billing. | Educator/school/district billing contact information, payment metadata, transaction details; payment card data handled by Stripe. |
Primarily United States; authentication data is global. |
| Slack | https://slack.com/trust/security | Internal team communication and collaboration. | Educator and student contact information shared internally for support and operations. | United States |
| Asana | https://asana.com/trust | Project management and internal task coordination. | Educator business contact information and support-related operational information where needed. | United States |
| Contrast | https://contrastapp.io/security | Webinar hosting, registration, trainings, and product demonstrations. | Educator name, email address, organization, webinar registration details, attendance information. | Ireland |
| Notion | https://www.notion.so/security | Internal documentation, knowledge management, operational collaboration. | Educator business contact information. | United States |
| Anthropic | https://www.anthropic.com/security | Internal AI productivity tools (customer support, product improvement, data analysis); AI-assisted generation of reading worksheets and comprehension questions based on ReadTheory-defined prompts and teacher-selected inputs (topic, grade level); insights derived from de-identified service reports. |
Educator business contact information; de-identified user data. No student personally identifiable information is shared. |
United States |
| OpenAI | https://openai.com/security | Internal AI productivity tools (customer support, product improvement, data analysis); AI-assisted generation of reading worksheets and comprehension questions based on ReadTheory-defined prompts and teacher-selected inputs (topic, grade level); insights derived from de-identified service reports. |
Educator business contact information; de-identified user data; teacher-selected content inputs (topic, grade level) for worksheet generation. No student personally identifiable information is shared. |
United States |
| SendGrid (Twilio) | https://www.twilio.com/en-us/legal/security | Transactional and system email delivery — sending account, notification, and communication emails to users on ReadTheory’s behalf. |
Recipient email addresses (educator/user), email content and delivery metadata. | United States |
Last updated: July 14, 2026
