Sub-processors
We use a small set of providers to run the service, each under a written agreement with appropriate safeguards. Most of them process personal information only on our instructions. Our payment provider is different: for parts of the payment process it acts on its own responsibility, and that is noted below.
1. Current providers
| Provider | Purpose | Data processed | Location |
|---|---|---|---|
| Cloudflare, Inc. | Hosting, content delivery, security and DDoS protection | Technical and usage data | Global edge network, US |
| Supabase, Inc. | Application database and authentication for the family service | Request details, contact details, messages | EU / US |
| Resend, Inc. | Transactional email, including email verification and school answers | Name, email address, message content | US |
| Stripe, Inc. | Payment processing for the personal school search. Stripe acts as our processor for some activities and on its own responsibility for others, such as fraud prevention and its own legal obligations, under its own privacy policy | Billing name, email address, amount, currency, transaction reference and card details you enter with Stripe | US / EU and other countries where Stripe operates |
| Google LLC | Analytics and advertising measurement (consent based) | Pseudonymous usage and consent data | US / EU |
| Sentry (Functional Software, Inc.) | Error monitoring and reliability | Technical diagnostic data | US |
2. Schools are not sub-processors
A school you share your details with is an independent controller, not a sub-processor. It receives your contact details because you chose to share them and handles that information under its own privacy notice.
3. Safeguards
Every provider is bound by a data processing agreement including confidentiality, security and deletion obligations. Where information leaves the UK or EEA, transfers rely on the UK International Data Transfer Agreement or the European Commission's standard contractual clauses.
4. Changes to this list
We update this page when a provider is added or removed. To be notified of changes, or to raise an objection, email privacy@internationalschools.org. For the wider picture, see our privacy policy.