Legal
Every agreement and policy nOS publishes, in one place, and the companies that process data for us.
Last reviewed October 4, 2026 · nOS LLC · Governing law: North Carolina
Agreements a school signs
These are the same texts a school signs inside nOS. A signed copy, with the date, the signer and a fingerprint of the exact text, is kept in the app under Settings › Agreements.
- Terms of Service: how a school may use nOS.
- Master Services Agreement and Order Form: what a school buys, the price, the term, renewal and cancellation.
- Data Processing Agreement: what nOS may do with student records, and what happens to them when a school leaves.
Policies
- Privacy Policy: what we collect, why, and for how long.
- Security: how we protect a school's data, stated with its limits.
- Accessibility: what we conform to, what we know is not yet right, and how to report a barrier.
- Email policy: the rules we follow when we email a school that has not written to us first.
Subprocessors
A subprocessor is a company that handles data on nOS's behalf to run the service. nOS does not sell data and does not let any of these companies use it for their own purposes. If we add a company that handles student data, schools get advance notice as set out in the Data Processing Agreement.
| Company | What it does for nOS | Data it handles | Where |
|---|---|---|---|
| Vercel | Hosting, application functions, file storage at rest (original uploaded files, school-deletion recovery copies) and background workflows | Everything a school puts into nOS, in transit and in stored files | United States |
| Neon | The database | Everything a school puts into nOS, at rest, plus provider point-in-time backups | United States |
| Anthropic | The language model behind nOS AI | What a person types to nOS AI and the school data needed to answer it, including student names and schedules. Not used to train its models. | United States |
| Ably | Live collaboration: who is online, shared cursors, follow mode, shared nOS AI chat | Messages are encrypted in the browser with a key unique to each school before they leave it, so Ably carries ciphertext. Ably is a UK company and may route that ciphertext outside the United States. | United Kingdom, with global edge routing |
| Upstash | Rate limiting, to slow down abuse | Short-lived counters keyed by hashed identifiers. No student data. | United States |
| SMTP email provider (Google Workspace) | Sends invitations, password resets, notices, and the course-request and schedule emails a school asks nOS to send | Recipient addresses and the message a school asked us to send, which can include a student's or family's address and a personal link | United States |
| Resend | Fallback email sender, used only when the primary email provider is not available | The same as the row above | United States |
| Stripe | Billing and payment | Billing contact, school name and payment details. No student data. | United States |
| Optional sign-in with a Google account | The account email and name of the person signing in. Nothing else. | United States | |
| Sentry | Error monitoring, so we can find and fix bugs | Technical error reports with request details, query strings and user information stripped. May incidentally contain identifiers. | United States |
Student information systems that a school connects to nOS (PowerSchool, Aeries and others) are not our subprocessors. The school chooses them and holds the account; nOS only reads from or writes to them when the school tells it to.
Notices
Legal and privacy notices to nOS LLC: bennettmiller@nosplanner.com.
Postal address: available on request at bennettmiller@nosplanner.com.