Sub-processors
Last updated: 29 April 2026
LearningBro uses the following third-party service providers to deliver the platform. Each is contracted as a data processor under UK GDPR Article 28. Where personal data is transferred outside the UK, the safeguard column lists the legal mechanism. We update this page when a sub-processor is added or removed and notify existing customers by email.
Stripe Payments UK Ltd
stripe.com- Role
- Payment processing
- Data received
- Name, email, billing address, card details (handled directly by Stripe — never reach our servers).
- Location
- UK / EEA / United States
- Transfer safeguard
- Standard Contractual Clauses + UK Addendum
Anthropic, PBC
www.anthropic.com- Role
- AI inference for lesson chat, hints, wrong-answer explanations, essay marking, and weekly class reports
- Data received
- User-authored text submitted to AI features (chat messages, essay text, quiz answers being explained). Does not include name, email, or account identifiers.
- Location
- United States
- Transfer safeguard
- Standard Contractual Clauses + UK Addendum. Zero Data Retention requested where the API supports it; inputs are not used to train Anthropic models.
Resend Inc.
resend.com- Role
- Transactional and marketing email delivery
- Data received
- Recipient name, email address, message subject and body.
- Location
- United States
- Transfer safeguard
- Standard Contractual Clauses + UK Addendum
Hetzner Online GmbH (VPS hosting)
www.hetzner.com- Role
- Application hosting and database
- Data received
- All platform data at rest and in transit on the application server and database.
- Location
- Germany / Finland (EEA)
- Transfer safeguard
- Within the EEA — UK GDPR adequacy decision applies. Encrypted backups; restricted operator access.
Cloudflare, Inc.
www.cloudflare.com- Role
- Edge caching, DDoS protection, DNS
- Data received
- Request metadata (IP address, user-agent, URL). No application data stored at the edge.
- Location
- Global, with UK and EEA presence
- Transfer safeguard
- Standard Contractual Clauses + UK Addendum
Questions or notifications
Schools and other customers acting as data controllers can contact privacy@learningbro.com to request a copy of the relevant Data Processing Agreement, to be added to the sub-processor change notification list, or to raise any concern about a sub-processor.