Who else touches your data.
No software company runs on nothing. These are the companies we rely on to operate COMPASS, what each one does, and what actually reaches it. If a funder asks you for this list, this page is the answer and you can send them the link.
| Company | What it does for us | What reaches it |
|---|---|---|
| Supabase | Database and application functions | The system of record. Every record an organization keeps in COMPASS lives here, including client records. |
| Cloudflare | Hosting and content delivery | Serves the application and this website. Carries requests, not stored records. Also provides the cookieless analytics on this marketing site. |
| Resend | Transactional email | Sends account and service email. Carries recipient email addresses and the contents of the messages we send. |
| Daily.co | Video meetings and transcription | Used only where an organization turns on meeting features. Carries the audio, video and transcripts of sessions an organization chooses to run through it. |
| Anthropic | AI features | Runs Beacon, the assistant inside COMPASS, and its conversation scripts. Beacon carries a staff member's question and the records it looks up to answer it, which can include client records. A conversation script carries the words of a conversation with a client, and a meeting recorded on the Beacon device carries its transcript. Beacon is in use at one organization today and is not offered to new organizations. Anthropic also runs the smaller writing helpers: grant narratives, donor emails, schedule drafts, the report builder, and ideas for a goal a client is working on. Each is sent only what it needs, such as a count of clients served, a donor's giving history, staff names and availability, or a goal's title and status, and none of them is sent client records. Whatever a person types into one reaches Anthropic as typed. All of it runs on illumipath's own account with Anthropic. |
| Deepgram | Speech to text and text to speech | Turns speech into text when Beacon listens to a conversation with a client or records a meeting, so it carries that audio. That happens only at the one organization using Beacon. Also reads lesson text aloud, which carries the lesson text only and nothing a client wrote. Each request COMPASS makes asks Deepgram not to use the audio or text to train its models. It runs on illumipath's own account with Deepgram. |
| Fly.io | Hosting for the Beacon voice server | Used only by the Beacon device, at the one organization using Beacon. Carries the device's audio on its way to Deepgram and Anthropic, and the answers on their way back to COMPASS. |
Every record COMPASS keeps is stored in the United States, in Supabase's us-west-2 region, and the Beacon voice server runs in Fly.io's San Jose region. All seven are United States companies. Where Cloudflare, Anthropic and Deepgram handle a given request is decided by their own networks, so this page does not claim more than that about them. COMPASS is built for organizations in the United States.
Named, but not running.
And the requests a browser makes on its own.
These are not vendors we send records to. They are places a person's browser reaches while using COMPASS, and a list that quietly omitted them would be a worse list.
When this list changes.
This page is the current list. When a company is added or removed it is updated here, and organizations using COMPASS are notified. The commitments we make about these companies belong in an agreement rather than on a web page, which is where you should expect to find them.
Last changed October 2026: Anthropic, Deepgram and Fly.io added. Beacon has used them since October 6, 2026.
Or ask the question directly instead of reading three more pages. hello@illumipath.io