Sub-processors
Last updated: 29 April 2026
LearningBro uses the following third-party service providers to deliver the platform. Each is contracted as a data processor under UK GDPR Article 28. Where personal data is transferred outside the UK, the safeguard column lists the legal mechanism. We update this page when a sub-processor is added or removed and notify existing customers by email.
Stripe Payments UK Ltd
stripe.com- Role
- Payment processing
- Data received
- Name, email, billing address, card details (handled directly by Stripe — never reach our servers).
- Location
- UK / EEA / United States
- Transfer safeguard
- Standard Contractual Clauses + UK Addendum
Anthropic, PBC
www.anthropic.com- Role
- AI inference for lesson chat, hints, wrong-answer explanations, essay marking, and weekly class reports
- Data received
- User-authored text submitted to AI features (chat messages, essay text, quiz answers being explained). Does not include name, email, or account identifiers.
- Location
- United States
- Transfer safeguard
- Anthropic's published Data Processing Addendum applies, incorporating Standard Contractual Clauses and the UK Addendum (https://www.anthropic.com/legal/data-processing-addendum). Anthropic confirms in writing that retained data is never used for model training without express permission. Zero Data Retention enablement is being pursued separately via Anthropic's sales process.
Resend Inc.
resend.com- Role
- Transactional and marketing email delivery
- Data received
- Recipient name, email address, message subject and body.
- Location
- United States
- Transfer safeguard
- Standard Contractual Clauses + UK Addendum
Contabo GmbH (VPS hosting)
contabo.com- Role
- Application hosting and database
- Data received
- All platform data at rest and in transit on the application server and database.
- Location
- Germany (EEA)
- Transfer safeguard
- Within the EEA — UK GDPR adequacy decision applies. Encrypted backups; restricted operator access.
Questions or notifications
Schools and other customers acting as data controllers can contact privacy@learningbro.com to request a copy of the relevant Data Processing Agreement, to be added to the sub-processor change notification list, or to raise any concern about a sub-processor.