Sub-Processors
Last updated: 2 May 2026
We engage the following organisations to help us deliver the Services. Each is bound by a written processing agreement that obliges them to protect your personal data, use it only on our documented instructions, and apply appropriate security.
Where data is transferred outside the United Kingdom we apply one of the safeguards described in our Privacy Policy — typically the UK-US Data Bridge (for certified US providers) or the UK International Data Transfer Addendum (IDTA) layered onto EU Standard Contractual Clauses.
We will update this page when sub-processors are added, removed, or when their role materially changes.
| Sub-processor | Purpose | Country of processing | Transfer mechanism |
|---|---|---|---|
| Vercel Inc. | Web and serverless hosting | USA (with EU edge regions) | UK-US Data Bridge (US adequacy) / SCCs + IDTA |
| Neon, Inc. | PostgreSQL database hosting | EU (Ireland) / USA | UK-EEA adequacy / SCCs + IDTA for US regions |
| Clerk, Inc. | User authentication and account management | USA | UK-US Data Bridge / SCCs + IDTA |
| Stripe Payments Europe, Ltd. | Payment processing, billing and fraud detection | Ireland (with US affiliates) | UK-EEA adequacy / SCCs + IDTA |
| Twilio Inc. | WhatsApp and SMS transactional messaging | USA (with EU regions) | UK-US Data Bridge / SCCs + IDTA |
| Resend, Inc. | Transactional email delivery | USA | UK-US Data Bridge / SCCs + IDTA |
| Anthropic, PBC | AI processing for reports, practice content and message triage | USA | UK-US Data Bridge / SCCs + IDTA. Configured to disable training on customer data. |
| OpenAI, L.L.C. | Audio transcription of selected lesson recordings | USA | UK-US Data Bridge / SCCs + IDTA. Configured to disable training on customer data. |
| Sanity, Inc. | Content management for marketing pages | EU (Netherlands) | UK-EEA adequacy |
| Upstash, Inc. | Rate limiting and ephemeral caching | EU / USA | UK-EEA adequacy / SCCs + IDTA for US regions |
| Google LLC (Workspace, Drive, Meet) | Email, video lessons (Meet), file storage for transcripts, notes and safeguarding lesson recordings | USA / EU regions | UK-US Data Bridge / SCCs + IDTA |
| Slack Technologies, LLC | Internal operations, safeguarding alerts, and inbound parent message content forwarded for triage | USA | UK-US Data Bridge / SCCs + IDTA |
Questions or objections to a particular sub-processor? privacy@redrobinlearning.com.