How Novana protects your data, ensures compliance, and earns the trust schools place in us.

Subprocessors

The companies that help us run Novana.

Novana runs on a small set of providers we trust to host, power, and support the product. Each one is vetted for security and compliance before onboarding, and we'll notify you before adding new ones.

Get notified of changes

Email security@novana.io with the subject “Subscribe to New Subprocessors.”

Infrastructure

These providers host and run Novana. Your uploaded files, evidence data, and AI-generated analysis flow through this infrastructure.

Google Cloud Platform

Primary hosting, file storage, and compute

Japan

PlanetScale

Managed database

Japan

Vercel

Application hosting and serverless functions

Japan

Platform

When you upload evidence, these services analyze and process it. Your content is scrubbed for PII before reaching AI providers, processed in the moment during a single request, and never retained afterward.

OpenAI

LLM for evidence analysis, requirements matching, and content generation.
Processed in the moment, never stored or used for training.

USA

Google AI

LLM for evidence analysis and content generation.
Processed in the moment, never stored or used for training.

Global

Inngest

Background job orchestration. Data processed in transit, not retained beyond job completion.

USA

Google Drive

File import integration. Read-only access; files transfer directly to Japan-based infrastructure.

Global

Supporting services

Authentication and analytics. These services support Novana's operation but never see or store your evidence, files, or student data.

Clerk

Authentication, identity management, and session handling

USA

PostHog

Product analytics and observability

USA

Last updated: March 15, 2026

Talk to us

Questions? Concerns?
Ask us anything.

Whether it's a security question, a compliance requirement, or something that doesn't fit neatly into a category, we're here to help. No question is too small.