Subprocessors

Version 1.0Status: Published (draft)· Effective 2026-06-01· Last reviewed 2026-06-01· Next review 2027-06-01

About this register

This is the current list of third parties that process information on our behalf. Where a detail has not yet been independently verified we show ‘Verification required’ rather than a guess.

ProviderPurposeDataStorage regionProcessing regionRetentionTraining useVerified
OpenAIAI writing feedback, curriculum analysis, revision analysis, handwriting transcription and text-to-speechStudent writing (identifiers redacted before sending), year-level curriculum documentsVerification requiredUnited States / overseasResponse objects sent with store=false (not retained). Curriculum reference documents are stored in an OpenAI vector store to support file search.Not used for model training under OpenAI's API data policy (verification of contractual ZDR pending)2026-06-01
Emergent (application platform)Application hosting (frontend + backend) and object storage for uploaded images and generated reportsAll application data in transit; handwriting images and generated report files at rest in object storageVerification requiredVerification requiredFor the life of the account unless deleted; see Retention and DeletionNot used for model training2026-06-01
MongoDB (application database)Primary database for accounts, classes, writing, assessments, audit recordsAll structured application dataVerification requiredVerification requiredFor the life of the account unless deleted; encrypted backups up to a further 90 daysNot used for model training2026-06-01
ResendTransactional email (invitations, password resets)Recipient email address and message content (no student writing)Verification requiredUnited States / overseasAs per Resend's retention policyNot used for model training2026-06-01