Sub-processors
Every third party that can process personal data on behalf of our customers, what reaches each one, and where it is processed.
- Last updated
- 26 July 2026
- Effective from
- 26 July 2026
Draft — not yet reviewed by legal counsel
This document describes how the product actually works, but it has not been reviewed by a qualified lawyer and some company details are still outstanding. It is published for transparency and is not yet a binding legal document. Anything marked ▲ to be supplied is a known gap.
Our commitment
The data processing agreement requires us to keep this list current and to give notice before we add to it. If a new provider is introduced into the service and it can touch personal data, it appears here — in the same change that introduces it.
- Notice before addition. We give at least 30 days’ notice before a new sub-processor starts processing customer data.
- A right to object. A customer that reasonably objects on data-protection grounds can raise it with us, and if we cannot resolve it, terminate the affected part of the service without penalty.
- Flow-down obligations. Each sub-processor is bound by written terms no less protective than those we owe our customers. We remain responsible to the customer for their performance.
This list was last reviewed on 26 July 2026.
In use today
Cloudflare, Inc.
| Purpose | Application hosting, database, object storage, CDN and DDoS protection |
|---|---|
| Data processed | All customer data stored in Classbell — pupil, guardian and staff records, attendance, assessment, finance and audit data, plus request logs |
| Location | Primary database region: Western Europe (WEUR). Edge compute runs in the Cloudflare location nearest the visitor. |
| Note | Classbell runs entirely on Cloudflare Workers, D1 and R2. This is the core infrastructure provider, not an add-on. |
Postmark (ActiveCampaign, LLC)
| Purpose | Transactional email delivery |
|---|---|
| Data processed | Recipient name and email address, and the content of invitation, password-reset and notification emails |
| Location | United States |
| Note | Used only for transactional mail — invitations, password resets and notices. Classbell sends no marketing email to school users. |
Planned, not yet active
Stripe, Inc. — planned
| Purpose | Subscription billing and card payment processing |
|---|---|
| Data it would process | Billing contact name, email, billing address and payment-card details. Card details are collected by Stripe directly and are never transmitted to or stored by Classbell. |
| Location | United States and Ireland |
| Note | Handles the school's own subscription to Classbell. It does not process pupil, guardian or staff records. Not yet enabled on the current deployment. |
What is deliberately absent
It is as useful to know what is not on this list. We use no analytics provider, no advertising or marketing platform, no customer data platform, no session-recording tool, and no third-party AI or machine-learning service. Customer data is not sent to any of these, because none of them are part of the product.
Getting notified of changes
To be told when this list changes, email Privacy contact address — to be supplied and ask to be added to sub-processor notifications. Notice goes to the administrative contact on each account by default.