/ Legal
Sub-processors
Last updated October 14, 2026
NIX Development LLC uses the third-party service providers below to operate the NIX service. Each is bound by terms requiring it to process data only as needed to provide its service to NIX, to maintain confidentiality and security, and (where applicable) to comply with FERPA and COPPA.
NIX gives customers at least 14 days' notice before adding or replacing a sub-processor that processes student personal data; districts may object on reasonable data-protection grounds per their data privacy agreement.
| Sub-processor | Function | Data it touches | Location |
|---|---|---|---|
| Anthropic | AI model provider for the NIX Assistant (staff-facing, in the admin console on the web and in the app) | Admin conversations with the assistant, plus the school-level event details and aggregate metrics the assistant looks up. NIX never sends it individual student records; an admin's own messages contain whatever the admin types. Not used to train Anthropic's models. | United States |
| Neon | Primary database (Postgres) hosting | All service data at rest (encrypted) | United States |
| Vercel | Web app + API hosting / compute, and web analytics | Service data in transit during requests; website page visits (Vercel Web Analytics) | United States |
| Apple (APNs) | Push-notification delivery (iOS) | Device push token + notification payload | United States |
| Google (Firebase Cloud Messaging) | Push-notification delivery (Android) | Device push token + notification payload. No Firebase Analytics; no advertising identifiers. | United States |
| Resend | Transactional email | School-staff name + email (admin invites); student recovery email (password reset + account notices only). | United States |
| Stripe | Payment processing | School billing contact + payment method. No student payment data. | United States |
| Upstash | Rate-limit counters (sign-in and abuse protection) | Short-lived request counters under one-way hashed keys, expiring within 24 hours. No names, emails, student IDs, or IP addresses are sent. | United States |
| OpenStreetMap (Overpass) | Building-footprint lookup for geofence authoring | Map coordinates only; no personal data | EU/global (public map data) |
Notes
- No advertising, attribution, or tracking sub-processors are used. The NIX app has no advertising or analytics tools. Our website, including the admin console, uses Vercel Web Analytics to count page visits.
- No sub-processor receives student location history; only the derived signals NIX itself computes are stored, in Neon.
- The NIX Assistant is staff-facing only. Per-student records are excluded from AI prompts by design; the assistant reads aggregates and event details, and every change it drafts requires an admin's explicit confirmation. NIX keeps each admin's assistant conversations in its own database, hosted by Neon, for 7 days from each message, visible only to that admin, then deletes them.
- Guest accounts at events use the providers above, and no new provider. The only thing from an ID card that reaches NIX is the scrambled code the phone makes, which passes through Vercel and is stored in Neon after NIX scrambles it again. The card is read on the phone. On iPhone the app uses Apple's built-in camera framework. On Android it uses Google's ML Kit and Google's code scanner, which run on the phone. By Google's published disclosure these send Google metadata only (device, app, performance, and the size of the input and output), never the image or the barcode's content, and the version bundled in the app sends per-installation identifiers only, with no device identifier. They are closed source, so for this we rely on Google's statement.
- Questions about this list: contact@nix.management. See also our Privacy Policy and Children's Privacy Notice.