PointProven uses the companies below to run the service. Each processes data only to provide its part of PointProven, under their published data processing terms. We list them so you can see who touches your material.
| Subprocessor | What it does for PointProven | What it processes | Where |
|---|---|---|---|
| Supabase | Database, sign-in and file storage | Your account (email, name), your clients, decks, notes, uploaded material and its search index | United States (AWS us-east-2, Ohio) |
| Vercel | Hosts the PointProven app and runs its server code | Every request you make to the app, in transit; short-lived logs | United States (Washington, D.C.) |
| Amazon Web Services | Runs PointProven's own AI gateway, which passes AI requests to Anthropic and OpenAI | The text of each AI request and response, in transit only. The gateway keeps a record of each call (model, tokens, cost, timing, status) for 30 days, and none of its content, with one exception: when a call fails, it keeps the provider's error message, which can occasionally quote part of the request, for up to 30 days | United States (us-east-2, Ohio) |
| Cloudflare | Protects access to the AI gateway; stores course downloads | Requests to the AI gateway, in transit; course files (no customer material) | Global network |
| Anthropic | The language models that draft and check your work | The text of your notes, decks and material that a step needs. Anthropic does not train on it and may keep it for up to 30 days for abuse monitoring | United States |
| OpenAI | Makes your uploaded material searchable | The text of the material you upload, and search queries. OpenAI does not train on it and may keep it for up to 30 days for abuse monitoring | United States |
| TypeSafe | Independently checks your claims and figures | The text a check or an offer reads: your claims and figures, slide lines, your deck's context and catalyst, and passages of your material. Sent to TypeSafe directly, not through our AI gateway. Zero data retention: TypeSafe keeps none of the text it checks | United States |
| Loops | Sends PointProven's email (sign-up, sign-in links, codes, and replies to Help and Contact) | Your email address, first name and account id, and the messages you send us through Help or Contact | United States |
| PostHog | Product analytics | How you use the app (pages, actions), with your account id; never the text of your work | European Union |
| Langfuse | Monitors the AI calls for cost and reliability | A record of each AI call (which step, model, tokens, timing, account id); never the text of your work | European Union |
| Stripe | Payments and subscriptions | Your billing email, plan and payment details (card details stay with Stripe) | United States |
| PDF.co | Makes course certificates | Your full name, to print on the certificate | United States |
| Bunny.net | Streams the course's lesson videos | When you play a lesson video: your IP address, your browser's details and what you watch. Never your decks or material | European Union (Slovenia) |
| YouTube (Google) | Streams some of the course's lesson videos | When you open a lesson with a YouTube video: your IP address, your browser's details and what you watch; YouTube may set its own cookies. Never your decks or material | United States |
When you delete your account, we delete your data from our own systems and ask Supabase, Langfuse, PostHog and Loops to delete what they hold about you.
We'll update this page before we add a subprocessor that processes your material.
Last updated: 28 October 2026