Security · Subprocessors · Data processing
Subprocessors
Last reviewed 3 June 2026
Learn the Music Industry relies on a small set of third-party providers (“subprocessors”) to deliver the service. We keep the list short on purpose. Each provider only ever processes the minimum data needed for its function.
| Subprocessor | Purpose | Region |
|---|---|---|
| Supabase | Postgres database and end-user authentication (account data, learning progress). | EU (London / Frankfurt region) |
| Vercel | Application hosting, edge delivery, and serverless functions. | Global edge; primary compute in the EU/US |
| Postmark | Transactional e-mail (seat invitations, verification decisions, programme nudges). | United States |
| Clerk | Authentication for the founder-only admin console (not end-user accounts). | United States |
The public site uses none of these for personal data
The free, public learning experience has no sign-in and stores no personal data (progress lives in your browser only). The subprocessors above come into play for account and firm-seat features.
Changes to this list
We give firm customers advance notice of any material change to this list, as set out in our Data Processing Agreement. Regions are indicative of the primary processing location and may evolve as providers change their infrastructure.
Questions about a specific provider, or need this list as part of a vendor review? Use our contact form.