Subprocessors
Every third party Classroom relies on, what it does, and what it can reach.
Draft pending review. This page is maintained by the operator of Classroom by Baja Labs and has not yet been reviewed by counsel. It describes how the service is actually run today.
Last updated 2026-09-08
Always in the path
These providers are involved in running the service for every workspace.
| Provider | What it does | What it can reach | Where |
|---|---|---|---|
| Hetzner | The servers holding the database and file storage | All workspace content, at rest | Helsinki, Finland (EU) |
| Cloudflare | DNS, the private tunnel to the database, access control | Traffic in transit; connection metadata | Global edge |
| Vercel | Hosting for the web application | Content in transit while a page or action is served | United States / global edge |
| Railway | Hosting for the background services and workers | Content in transit while a job runs | United States |
| Resend | Transactional email — invitations, notifications, resets | Recipient email addresses and message contents | United States |
| Sentry | Error and performance reporting | Stack traces, request metadata, user id; not intended to carry content | United States |
Only when a feature is used
These see content only where a workspace has turned the matching feature on. A workspace that uses none of them sends them nothing.
| Provider | What it does | What it can reach | Where | Only when |
|---|---|---|---|---|
| LLM vendors, reached through the operator's Bifrost gateway | The AI features — drafting, analysis, extraction, chat | The text and files sent to the feature | Per vendor; predominantly United States | A workspace enables an AI feature and someone invokes it |
| Composio | Connections to outside tools (Slack, GitHub, Gmail and friends) | The data exchanged with the tool you connect | United States | A workspace connects an integration |
| Firecrawl | Fetching and reading web pages you ask Classroom to capture | The URLs you submit and the pages fetched | United States | Someone captures or parses a URL |
| Tavily | Web search behind research features | The search queries sent | United States | Someone runs a research query |
| Replicate | Image generation | The prompts sent and the images produced | United States | Someone generates an image |
| ElevenLabs | Speech generation | The text sent for narration and the audio produced | United States | Someone generates audio |
| Stripe | Payments and subscriptions | Billing contact and payment details, taken by Stripe directly; the operator never holds a card number | United States / Ireland | Billing is enabled and a workspace is on a paid plan |
Changes to this list
Workspace admins are notified before a new subprocessor that can reach workspace content is added, and may object. The obligations these providers are held to, and the transfer basis for the ones outside the EU, are described in the data processing addendum.
Questions about this page? Contact your workspace owner — they hold the operator relationship for your workspace.