Legal
Subprocessor register
Last updated 23 August 2026
iScholarX LLC uses the providers below to deliver ScodyX. Each one processes personal data only on our instructions and under written terms that include confidentiality and security obligations. Where a provider processes data outside the UK or EEA, transfers rely on that provider's standard contractual clauses (and the UK addendum where applicable), together with encryption in transit and at rest.
We describe providers by function rather than naming every commercial entity in every category, because the specific vendor in a category can change. If you need the named entity list for a vendor assessment, ask support@ischolarx.com and we will provide the current list in writing.
Register
| Provider category | Purpose | Data processed | Region |
|---|---|---|---|
| Managed hosting and edge delivery provider | Serves the application and its server functions, terminates TLS, delivers static assets. | Request metadata, IP address, request identifiers. | Global edge network with regional processing. |
| Managed database and authentication provider | Stores accounts, workspaces, projects, messages, credit ledger and audit records; handles credential storage and email verification. | Account identifiers, email address, workspace and project content, prompts, generated files, billing ledger entries. | Primary region selected for the platform, with encrypted backups. |
| AI model providers (Anthropic, OpenAI, Google) and the managed model gateway | Executes generation, review and repair requests for the engine you select, including the fallback engine. | Prompt text, relevant project files, and the model output returned to you. | Provider-operated regions, typically United States and European Union. |
| Paddle (reseller and Merchant of Record) | Operates checkout, subscriptions, tax handling, invoices and refunds for plans and credit packs. | Billing name and address, email address, transaction and tax data. Card data is handled by Paddle and never reaches us. | United Kingdom, European Union and United States. |
| Transactional email provider | Delivers verification, password reset, receipt and alert email. | Email address and message contents of the notification. | European Union and United States. |
| Repository and hosting integrations you connect (for example GitHub, Netlify) | Only active when you connect them: receives the code and build output you choose to push or deploy. | Generated project files, commit metadata, deployment logs. | Provider-operated regions. |
Changes to this register
We update this page when we add or replace a provider that processes personal data. If your organisation needs advance notice of a change, tell us at support@ischolarx.com and we will add you to the notification list for the register; we do not otherwise email every customer about a vendor change.
Related documents
See the data processing terms for the controller and processor roles, the compliance register for the control mapping, and the privacy notice for what we collect and why.