Sub-processors
A list of the third-party services we use to operate the platform, and how your data is protected with each.
We use a small number of carefully selected sub-processors to operate Extended Essay Dashboard. We have appropriate data processing agreements in place with each. We do not share student data with any sub-processor unless it is strictly necessary to provide the platform service.
Cloud hosting provider
Purpose
Infrastructure hosting, database storage and compute services
Data types shared
All platform data including student records, project data and audit logs
Location
United Kingdom (our Base44 apps have been migrated to the UK data region)
Safeguards
Data processing agreement in place. Base44 is SOC 2 Type II and ISO 27001 certified.
Stripe
Purpose
Payment card processing and subscription billing
Data types shared
Billing contact name, email address, payment method tokens. No student data is shared with Stripe.
Location
USA / EU (PCI-DSS compliant)
Safeguards
Stripe is PCI-DSS Level 1 certified. We do not store card details ourselves.
Resend
Purpose
Sending transactional emails (notifications, confirmations, approval pack emails)
Data types shared
Recipient email addresses and email content
Location
USA
Safeguards
Data processing agreement in place.
We will notify schools of any changes to our sub-processor list that may affect the processing of their data, giving schools adequate notice to raise any objections. If you have questions about a specific sub-processor, please contact us at hello@extended-essay.com.