Trust and security
Sub-processors
The third parties that process personal data on our behalf so the service can run, what each one does, and where. Nothing on this list sees pupil data for any purpose other than providing the service.
Last reviewed 10 October 2026
| Provider | Purpose | Personal data involved | Region |
|---|---|---|---|
| Supabase | Database (PostgreSQL), authentication and private file storage for all school data. | All personal data entered into the service, including special category data about pupils. | United Kingdom (London, AWS eu-west-2) |
| Vercel | Hosting of the web application and API routes. | Personal data in transit while a page or API request is served. No pupil data is written to application logs. | United Kingdom (London) for server functions; static files are cached on Vercel’s global edge network |
| Anthropic | AI drafting of the school’s contribution to an EHC plan, only for pupils where the school has recorded consent. | Pseudonymised evidence and pupil information: names, dates of birth, school name and named adults are replaced with placeholders before transmission. Prompts and outputs are not used to train models. | United States (Anthropic does not currently offer UK or EU data storage) |
| Resend | Transactional email: deadline reminders, contribution form links, invitations, contact confirmations and local authority chase emails the school opts into. | Recipient email address and message content. Subjects never contain a pupil’s name. | Emails leave from the sending region set for our domain; account data, email metadata and logs are stored in the United States |
| Wonde | Optional MIS sync, only for schools that connect it and approve access in Wonde: reads pupils and their main parent contact from the school’s MIS (Arbor, SIMS, Bromcom and others). Sendiphany never writes to the MIS. | Pupil names, dates of birth, year and registration groups, UPNs, SEN status, and the main contact’s name and email address. | Wonde Ltd, United Kingdom. The school also has its own agreement with Wonde, which sets where Wonde stores data. |
| Stripe | Subscription payments and invoicing for Starter and Pro plans. | School billing contact and payment details. Card numbers are entered on Stripe’s pages and never reach Sendiphany. | Contracted through Stripe Payments Europe Ltd (Ireland), with regulated UK services from Stripe Payments UK Ltd; data may also be processed in the United States |
About the regions
Changes to this list
We tell account owners in writing at least 30 days before adding or replacing a sub-processor and allow objections on reasonable data protection grounds, as section 6 of the data processing agreement sets out. The review date at the top of this page changes whenever the list does. To be notified by email of changes, or to ask about a provider, write to privacy@sendiphany.co.uk.
What is not on this list
No advertising networks, no third-party analytics on the public site, no data brokers and no AI providers other than the one named above. If a tool we use does not process personal data, it is not a sub-processor and is not listed.