Subprocessors
Bright Path relies on a small number of third-party services to run. This page describes the category of each one, what it processes, and where that sits in the product.
Draft pending owner review. This list is a draft prepared from how the product is built. Vendor names, contract terms, and processing locations must be verified and filled in by the Bright Path operator before it is relied on for a district procurement review.
ServicePurposeData processedProcessing location
Application hosting & CDN
Serves the Bright Path web application and its API endpoints.
Request metadata (IP address, user agent), and any record data in transit while a page or request is served.
To be confirmed by the operator
Managed database, authentication & file storage
Stores student records, goals, session data, services, attendance, meetings, communications, and account credentials.
All application data you enter, plus account email addresses and authentication metadata.
To be confirmed by the operator
AI model gateway
Powers optional AI drafting features (goal drafts, PLAAFP drafts, progress narratives, note summaries).
Only the text you submit for a specific draft, plus the model's response. Used to return your draft, not to publish or post anything on your behalf.
To be confirmed by the operator
Transactional email delivery
Sends account emails: sign-up confirmation, password reset, team invitations, and digest notifications you opt into.
Recipient email address, name where supplied, and the contents of the message being sent.
To be confirmed by the operator
Payments (merchant of record)
Processes subscription checkout, billing, invoicing and tax for paid plans.
Billing contact details and payment information, handled by the provider. Bright Path does not store card numbers.
To be confirmed by the operator
Changes to this list
When a subprocessor is added or replaced, this page is updated with a new effective date. Customers with a signed data agreement that requires advance notice will be notified at the account owner's email address before the change takes effect.
To request notification of future changes, or to raise an objection to a specific subprocessor, contact Bright Path using the address on the data agreement page.