Subprocessors
The service providers that process data for Campus Voices.
Draft, awaiting attorney review
This document is a working draft published so you can see how Campus Voices works. It has not been reviewed by our attorney yet and may change. Items in [brackets] are still to be filled in.
4. Subprocessor List
Subprocessors that may process personal information on behalf of Campus Voices or a university customer. We give universities notice before adding or replacing one (DPA Section 6).
| Subprocessor | Purpose | Data processed | Location | Status |
|---|---|---|---|---|
| Railway Corporation | Application hosting, PostgreSQL database, scheduled jobs, persistent file storage volume | All platform data, including uploaded videos | United States [verify region] | Active |
| Resend (Plus Five Five, Inc. [verify legal entity]) | Transactional email | Recipient name and email, message content | United States [verify] | Active |
| Zoom Video Communications, Inc. | Video calls with prospective university customers | Participant name and email, call content as shared | United States | Active (sales calls only; no program data) |
| [Contractor payment provider: Trolley / Tipalti / Gusto] | Creator onboarding, W-9 (U.S. persons) and W-8BEN (nonresident aliens) collection, withholding where the provider determines it applies, 1099-NEC and 1042-S forms, payouts | Creator name, email, tax and bank details (collected by provider), payment amounts | [ ] | Planned |
| [Object storage provider] | Storage for uploaded videos and screenshots | Uploaded files | [ ] | Planned |
Notes: Railway and Resend publish their own subprocessor lists and data processing terms; Resend commits to 14 days advance notice of its own subprocessor changes (https://resend.com/legal/dpa, per search result, not opened). [Obtain and file signed or accepted DPAs with Railway and Resend.]