Last updated September 29, 2026
Service Providers and Subprocessors
This ledger lists only providers that currently process Service data for SCAI LLC, together with their purpose and the data involved.
Current providers
This ledger is updated before a new provider receives Service data.
Supabase
Purpose
Database, file storage, and passwordless authentication.
Data involved
Account emails, organization and portal records, purchase and subscription records, Reports, evidence, and access metadata.
Stripe
Purpose
Hosted checkout, payment processing, subscription management, and billing portal.
Data involved
Billing contact, payment method, purchase, subscription, invoice, refund, and fraud-prevention data. Full card details go directly to Stripe.
Vercel
Purpose
Application hosting, request delivery, and operational logs.
Data involved
Page and API requests, IP address, browser and device metadata, security signals, and application responses.
LogRocket
Purpose
Session replay, error investigation, and application diagnostics.
Data involved
Page interactions and interaction metadata; ordinary page text and screen context may be captured for debugging; password fields and elements explicitly marked sensitive are masked; network request and response headers and bodies are excluded; images and screen content; console and error information; network request metadata and performance diagnostics; IP address; and browser and device metadata.
Google Analytics
Purpose
Measurement of visits to public marketing pages.
Data involved
Pages viewed on the public site, referring source and campaign parameters, approximate location derived from IP address, browser and device metadata, and a first-party cookie identifier.
User-selected connected service
Google sign-in
A user may choose Google as an identity provider. Google then authenticates that user and may provide identity information permitted by the user’s Google settings and the requested scopes. This user-selected connection is described in the Privacy Notice.
Changes and questions
We will give any notice required by an Order or Data Processing Addendum. Questions may be sent to [email protected].