Subprocessor List
Last updated: 2026-02-01
MOSAIC uses a limited number of third-party service providers ("subprocessors") to operate the platform. Each subprocessor has signed a Data Processing Agreement (DPA) with Lerno Co. ensuring equivalent data privacy and security protections. This list is maintained in compliance with NYCPS ERMA requirements and NYS Education Law § 2-d.
OpenAI
DPA SignedPurpose
Speech-to-Text (Whisper) and Text-to-Speech for Listening/Speaking modalities
Data Processed
Audio recordings of student speech responses; generated audio for listening prompts
Location
United States
MongoDB Atlas
DPA SignedPurpose
Primary database — stores all platform data
Data Processed
Student PII, assessment results, teacher records, school/district data
Location
United States (AWS us-east-1)
SendGrid (Twilio)
DPA SignedPurpose
Transactional email delivery (parent invitations, PO reminders)
Data Processed
Email addresses, names
Location
United States
Notification of Changes
Lerno Co. will notify contracted schools/districts at least 30 days before adding a new subprocessor. Schools may object to a new subprocessor within 15 days of notification. Contact privacy@mosaicassessmentco.com for questions.
Related: Privacy Policy · Terms of Service