WAIA Subprocessor List
Third-party providers used to host, operate, support, secure and improve WAIA where they may process customer personal data.
Nineteen Point Two uses selected third-party providers to provide, host, secure, support and operate WAIA.
Where these providers process Customer Personal Data on behalf of Nineteen Point Two, they are treated as subprocessors.
The providers below process Customer Personal Data for WAIA. The processing location describes the relevant service, and does not exclude limited support access from other locations where lawful.
WAIA subprocessors
- Lovable: managed application hosting, backend infrastructure, database service and authentication emails. The production database is hosted in Europe (Stockholm). Lovable manages the underlying Supabase infrastructure and its own supplier chain.
- Cloudflare: hosting and edge infrastructure supporting WAIA, including delivery and security of application traffic. Processing locations may vary with network routing.
- Resend: delivery of invitations, learner nudges and administrator digests. Its primary processing location is the United States. Applicable EU standard contractual clauses and UK transfer provisions are included in its data processing agreement.
Supabase operates beneath Lovable Cloud and is not listed as a separate direct Nineteen Point Two subprocessor.
Website and business services
Cloudflare also provides public website analytics. Tally hosts the Contact Us and Visibility Check forms. The Visibility Check form sends submissions to a Google Apps Script webhook for the existing Google-based access process. These are public website and enquiry services, rather than WAIA learner-data subprocessors.
WAIA does not currently send Customer Personal Data to an AI model provider as part of the application.
Subprocessor updates
Nineteen Point Two may update this list as providers are added, removed or replaced.
Where required by the Data Processing Agreement, customers will be given notice of material subprocessor changes and the opportunity to object on reasonable data protection grounds.
Contact
For subprocessor questions, contact ben@nineteenpointtwo.com.