Last updated October 4, 2026
Score — Subprocessors
BellieBub LLC ("we") uses the vetted third-party service providers ("subprocessors") below to operate the Score platform and Score Assistant feature. Each is bound by contract to protect data, use it only to provide its service to us, and maintain appropriate security. We provide advance notice of material changes to this list that affect the processing of student data (see our Data Processing Agreement, §9), and this page is the public, maintained list referenced by the Privacy Policy, by the master Data Processing Agreement, and by its companion state riders — all available to schools on request at contact@schoolmusic.services.
Operator: BellieBub LLC · Effective date: October 4, 2026 · Last updated: October 4, 2026
Current subprocessors
| Subprocessor | Purpose / service | Data categories processed | Processing location | Notes |
|---|---|---|---|---|
| Anthropic, PBC | AI model provider — powers Score Assistant (Claude API) via the LLM gateway | Prompt text after PII scrub (no student PII by design); AI outputs. Not used to train Anthropic's models. | United States | Commercial terms; no training on inputs/outputs by default; Zero Data Retention (ZDR) being pursued for the student-facing pipeline |
| Portkey | LLM gateway — routing, health fallback, cost attribution/telemetry for AI requests | Request metadata (app/agent/task/cost tags); transits prompt/response payloads to route them | United States | Gateway in front of Anthropic; metadata used for cost bill-back, not marketing |
| Microsoft Azure (Microsoft Corporation) | Cloud hosting, storage, database, Key Vault (secrets), identity, telemetry (App Insights) | All platform data at rest and in transit; secrets; logs/telemetry | United States | Primary infrastructure; encryption at rest and in transit; managed-identity auth |
| Stripe, Inc. | Payment processing (Stripe-hosted checkout) | Payment card data (held by Stripe — we do not store full card numbers), billing contact, transaction metadata | United States | PCI DSS Level 1 provider; SAQ-A posture for us |
| Twilio SendGrid (Twilio Inc.) | Transactional and (with consent) marketing email delivery | Recipient email, name, message content, delivery/engagement metadata | United States | Separate transactional vs. marketing streams; CAN-SPAM compliant |
| Twilio Inc. | SMS messaging (future — GA phase; A2P 10DLC registered) | Recipient phone number, message content, delivery metadata | United States | Not active in current freemium posture; 10DLC brand/campaign registration required before launch |
Notes on scope
- Current posture (adults-only, freemium): the active AI/data path is Anthropic + Portkey + Microsoft Azure, with Stripe for any paid upgrade and SendGrid for email. Twilio SMS is future (GA). No student data flows through any subprocessor in this posture by design.
- No sale, no ads, no training: no subprocessor is authorized to sell data, use it for advertising, or train models on it.
- Student data (Mode B): when school features launch, any subprocessor processing student data will be bound by flow-down terms at least as protective as our DPA, and this list will identify which subprocessors touch student data.
- Roster connectors (future): Clever and/or ClassLink are anticipated Mode B subprocessors for roster sync and will be added to this list before that feature ships, under SDPC NDPA v2 terms.
How we notify of changes
Material additions or replacements of subprocessors that process personal or student data are posted here with reasonable advance notice; school customers under a DPA receive notice and an opportunity to object per DPA §9.
Approved for publication by Ray Everitt, 2026-10-04.