Subprocessors

Subprocessors and Data Locations

Known public-site vendors, expected processing purposes, and provider categories to confirm before customer deployments involving child or participant data.

Last updated: June 21, 2026

01

Overview

This page lists subprocessors and data locations currently known from the public Philomathia website and legal-site implementation. Product deployments may use additional AI, authentication, analytics, communications, support, payment, or infrastructure providers that should be confirmed in the customer order process before live child or participant data is stored.

Countries listed below are practical data-location indicators based on the provider type and common infrastructure locations. A customer agreement may include more specific commitments where required.

02

Current public-site subprocessors

  • Supabase: database and contact-form storage for interest submissions. Likely processing locations include Australia, the United States, and other infrastructure or support locations used by Supabase.
  • Netlify: website hosting, deployment, and fallback form handling. Likely processing locations include the United States and other global hosting, CDN, and support locations used by Netlify.
  • Google and YouTube: embedded media, YouTube API Services, optional readonly YouTube or Google account connection, cookies, local storage, device identifiers, and related media metadata. Likely processing locations include the United States and other Google infrastructure locations.

03

Product providers to confirm

Before customer deployments involving child or participant data, Philomathia should confirm whether the product uses additional AI, authentication, analytics, or communications providers. This includes model providers, identity providers, email providers, monitoring tools, payment systems, customer support tools, and file storage providers.

Those providers should be added to this page or to a customer-specific subprocessor schedule before identifiable child or participant data is stored.

04

Processing purposes

Subprocessors may process personal information for hosting, storage, security, authentication, service delivery, diagnostics, analytics, communications, embedded media, AI-assisted functionality, support, backup, logging, and compliance.

Philomathia does not authorise subprocessors to sell Customer Data or use Customer Data for third-party advertising.

05

Changes and notice

Philomathia may update subprocessors as products, vendors, infrastructure, and customer deployments change. Material changes that affect customer data protection should be posted here or communicated through reasonable customer channels.

Customers that require advance notice, objection rights, fixed provider lists, regional hosting, or additional vendor security review should include those requirements in the customer agreement or order process.

06

Contact

Questions about subprocessors, data locations, vendor review, or customer-specific security terms can be sent to [email protected].