Sub-processors

Markable uses a small number of third-party services to operate the platform. This page lists every one that may process personal data on our behalf, what they do, and where they process it. It is the authoritative list referred to in our Data Processing Agreement. We give customers at least 30 days' written notice before adding or replacing any sub-processor that processes personal data.

Last updated: 30 July 2026

Sub-processor	Purpose	Data processed	Location
Supabase	Database, authentication and file storage	All account and script data, including uploaded student work	United Kingdom (London)
Anthropic	AI analysis of student work against mark schemes	Pseudonymised script content	United States
Vercel	Application hosting and delivery	Request data and technical logs	United States and global edge network
Resend	Sending account emails such as password resets and confirmations	Email addresses and message content	European Union (Ireland)
Sentry	Error monitoring and diagnostics	Technical error data, which may include IP addresses and account identifiers	European Union (Germany)
Stripe	Subscription payments	Billing details and payment records	United States and European Union
Inngest	Background job scheduling for script analysis	Job metadata and record identifiers	United States
HighLevel (LeadConnector)	Marketing, enquiries and demo bookings	Contact details provided by enquirers	United States
Microsoft 365	Business email (support@markable.uk)	Support correspondence	European Union and United Kingdom

Where your data is stored

Student work and all account data are stored in the United Kingdom. Script content is sent to Anthropic in the United States for analysis and is not retained by them for training. Other sub-processors handle limited operational data as described above.

Transfers outside the UK rely on UK adequacy regulations, the UK International Data Transfer Agreement, or EU Standard Contractual Clauses with the UK Addendum, as applicable. A transfer risk assessment is available on request.