Data Processing Agreements
Last updated July 20, 2026
ExamLive uses third-party service providers to operate our platform. These providers process personal data on our behalf under Data Processing Agreements (DPAs). Below is a list of our sub-processors, what data they process, and links to their respective DPAs.
All providers listed below are based in the United States. We rely on Standard Contractual Clauses (SCCs) and other approved transfer mechanisms to ensure your data is protected in accordance with applicable data protection laws when transferred internationally.
| Provider | Purpose | Data Processed | Transfer Mechanism | DPA |
|---|---|---|---|---|
| Clerk | Authentication and user management | User accounts, session data, authentication credentials | DPF (EU / UK / Swiss) + SCCs (fallback) | View DPA |
| Supabase | Database, storage, and edge functions | User profiles, exam data, grades, application data | SCCs + UK Addendum + Swiss Addendum | View DPA |
| Polar | Payment processing and subscriptions | Subscription and billing information | SCCs + UK IDTA | View DPA |
| PostHog | Product analytics | User identifiers (ID, email, name), organization data, usage events, feature flags, AI usage metadata | DPF (EU / UK / Swiss) + SCCs (fallback) | View DPA |
| Vercel | Hosting, deployment, and analytics | Request logs, performance metrics, visitor analytics | SCCs + UK IDTA | View DPA |
Changes to this list
We may update this list from time to time as we add or remove service providers. Material changes will be communicated via email or through our platform.
Contact
If you have any questions about our data processing agreements, please contact us at support@examlive.pk.