Sub-processors
A list of the third-party services we use to operate the platform, and how your data is protected with each.
We use a small number of service providers and sub-processors to operate Extended Essay Dashboard. Student data is shared only where necessary to provide a requested service feature. Current contractual, location, transfer and provider information is maintained for school due diligence and updated as our provider chain changes.
Base44
Purpose
Core application hosting, database storage, authentication, functions, file storage and managed platform services
Data types shared
All platform data including student records, project data and audit logs
Location
Provider-managed; storage and processing locations depend on our Base44 service configuration and current provider arrangements
Safeguards
Base44 states that it is SOC 2 Type II and ISO 27001 certified. Current contractual, transfer and sub-processor information is maintained for school due diligence.
Stripe
Purpose
Payment card processing and subscription billing
Data types shared
Billing contact name, email address, payment method tokens. No student data is shared with Stripe.
Location
USA / EU (PCI-DSS compliant)
Safeguards
Stripe is PCI-DSS Level 1 certified. We do not store card details ourselves.
Transactional email provider
Purpose
Sending configured service emails and notifications where enabled
Data types shared
Recipient email addresses and necessary transactional email content
Location
Provider location depends on the current Base44/email-service configuration
Safeguards
Used only for configured service communications. The specific provider and transfer details are reconciled against current Base44/provider documentation before being represented as fixed.
Base44 AI / disclosed model providers
Purpose
Providing optional AI-assisted meeting-summary and formative-feedback features when an authorised user invokes them
Data types shared
Relevant prompt/input content and generated output. Depending on the feature, this can include identifiable meeting transcript text, project context, proposed formative marks or supervisor notes.
Location
See current Base44 provider and sub-processor documentation; international processing may occur
Safeguards
AI is used only for the requested assistive feature and outputs remain subject to human review. Provider-side data-use, retention and transfer terms are governed by the applicable Base44/provider arrangements and are available for school due diligence.
We will notify schools of any changes to our sub-processor list that may affect the processing of their data, giving schools adequate notice to raise any objections. If you have questions about a specific sub-processor, please contact us at hello@extended-essay.com.