Subprocessors

The third parties that process data on AusGrader's behalf

To run the platform, AusGrader relies on a small number of trusted service providers (known as subprocessors) that handle data on our behalf. This page is the current authoritative list. It supplements our Privacy Policy and School Terms.

1. Current Subprocessors

Supabase (hosted on AWS)

Australia

Database, authentication and file storage

Data processed
All account and academic data, including uploaded exam PDFs and answer scans.
Location
Sydney, Australia (ap-southeast-2)

Fly.io

Australia

API backend and background worker hosting

Data processed
All platform data while it is in transit and being processed. Nothing is stored long term on this service.
Location
Sydney, Australia (syd)

OpenAI

AI-powered grading and feedback

Data processed
Exam questions and student response text. No personal identifying information (name, email or school) is included. Responses are not used for model training and are processed under a zero data retention agreement.
Location
United States

Amazon Web Services (SES)

Australia

Transactional email delivery, such as account verification and password resets

Data processed
Email addresses only. No student academic data is included in transactional emails.
Location
Sydney, Australia (ap-southeast-2)

Stripe

Payment processing for individual paid accounts

Data processed
Payment and billing details, handled directly by Stripe under its own PCI-DSS standards. AusGrader never receives or stores card numbers.
Location
United States
Applies to
Individual accounts only. Schools are invoiced directly and no school or student data is sent to Stripe.

Vercel

Static hosting for the AusGrader website

Data processed
Serves the website files (HTML, JavaScript, images) to your browser. As with any web server, requests include your IP address and browser type. No account, academic or payment data passes through this service, because your browser sends that data directly to our own servers.
Location
Global edge network

2. Where Your Data Is Stored

All account data, academic data and uploaded files are stored on AWS servers in Sydney, Australia, and our API backend and worker also run in Sydney. Data is encrypted in transit using TLS and encrypted at rest.

The only data that leaves Australia in the course of normal use is exam question content and student response text, which is sent to OpenAI so that grading and feedback can be generated. No personal identifying information such as name, email or school is included in those requests, the content is not used to train AI models, and it is not retained on OpenAI's servers once feedback has been generated.

If you buy an individual subscription, your payment details are handled directly by Stripe. Schools are invoiced directly, so no school or student data is sent to Stripe at any point.

For more detail, see Section 7 of our Privacy Policy.

3. Subprocessor Obligations

AusGrader ensures that every subprocessor listed above:

  • Is bound by a written agreement imposing data protection obligations no less protective than our own commitments to you.
  • Processes data only to the extent necessary to provide its specific service.
  • Maintains appropriate technical and organisational security measures.

AusGrader does not sell, rent or trade user data to any third party, and no data is used for advertising or for training AI models.

4. Changes to This List

This list is kept up to date as our infrastructure changes. The "last updated" date at the bottom of this page reflects the most recent change.

For schools on an institutional arrangement, AusGrader will give at least 30 days written notice before engaging any new subprocessor that will process School User Data. The School may object by giving written notice within 14 days of being notified. If the School objects and AusGrader cannot reasonably accommodate the objection, either party may terminate the School's subscription on 30 days written notice.

5. Contact Us

If you have questions about any of the providers listed here, or about how your data is handled, contact us at info@ausgrader.com.

Last updated: 25th August 2026

AusGrader is operated by Fortuna Strategy Pty Ltd (ABN 15 674 170 971)