- Published version: 2026-07-21 · Effective since: 2026-06-03 · Next review: 2027-07-21 (at least annually + event-driven on any sub-processor change).
- Total: 37 sub-processors (11 receive personal information; the remainder receive no student PII).
- Residency: all sub-processors operate from facilities in the United States (Microsoft Azure pins an EU region for EU-located tenants).
- No sale: none of our sub-processors may sell personal information or use it for advertising; each is bound to a no-less-protective written agreement (flow-down, B.8.1).
- Key: PII means personally identifiable information (personal or student data); a DPA is the Data Privacy Agreement that contractually binds each sub-processor that receives it.
Server-side (backend service)
| Sub-processor | Function | Residency | Receives personal information? |
|---|---|---|---|
| Google Cloud Platform | Hosting (Cloud Run/SQL/GCS/Secret Manager/IAM/Logging) | us-central1 (Iowa); GCS US multi-region | Yes — under DPA |
| Google Gemini API | Primary LLM — lesson plans/quizzes/individualization/TTS; child-voice fallback transcription | USA | Yes — under DPA |
| OpenAI | Content moderation + supplementary generation | USA | Yes — under DPA |
| Microsoft Azure Cognitive Services — Speech | Pronunciation scoring + STT fallback (transient child voice) | eastus (USA); EU-region pin for EU tenants | Yes — under DPA |
| ElevenLabs | TTS — DECOMMISSIONED (integration removed 2026-07-13: shim + SDK + dead code deleted; Gemini is the TTS path); text only, no child voice | USA | No PII |
| Stripe, Inc. | Administrative customer-record deletion (admin Customer.delete); no card capture / no payment surface | USA | Yes — under DPA |
| SendGrid (Twilio, Inc.) | Transactional email + event webhook | USA | Yes — under DPA |
| Clever, Inc. | SSO + roster sync | USA | Yes — under DPA |
| ClassLink, Inc. | SSO + OneRoster | USA | Yes — under DPA |
| Google OAuth 2.0 / OIDC | Teacher/admin SSO | USA | Yes — under DPA |
| Google Classroom API | Optional teacher-initiated roster import | USA | Yes — under DPA |
| Google Drive / Docs / Slides APIs | Optional teacher-initiated document export | USA | Yes — under DPA |
| Unsplash | Stock imagery (search query strings only) | USA | No PII |
| Serper.dev | Web image-search proxy (query strings only) | USA | No PII |
| JASON Learning | Curriculum lookup (query strings only) | USA | No PII |
| Texas Instruments | TI resource lookup (query strings + downloads) | USA | No PII |
| U.S. Dept. of Education — College Scorecard | Public college data — DECOMMISSIONED (integration removed 2026-07-14 with Experience Details / college profile field; /search_colleges + COLLEGE_API_KEY deleted; no live calls) | USA (Federal) | No PII |
| Library of Congress | Primary-source search (no PII) | USA (Federal) | No PII |
| randomuser.me | Synthetic profile generation (no outbound data) | USA | No PII |
| Microsoft Office Online viewer | PPTX preview (signed GCS URLs, no student PII) | USA | No PII |
| Have I Been Pwned (Pwned Passwords range API) | Breached-password screening on password set/reset (k-anonymized SHA-1 5-char prefix; Cloudflare-fronted; fail-open — availability is not a data-path dependency) | USA (Cloudflare) | No PII |
Browser-side (consent-gated; no student PII)
| Sub-processor | Function | Residency | Receives personal information? |
|---|---|---|---|
| Google Tag Manager | REMOVED 2026-07-08 — container deleted (was firing console-side ad tags); replaced by direct GA4 (B23) | USA | No PII |
| Google Analytics | Anonymized analytics — direct gtag.js, no tag manager (GA4; Signals OFF, ad-personalization OFF) | USA | No PII |
| CallRail | Call attribution — public pre-login pages only (suppressed on PII pages) | USA | No PII |
| YouTube embed | Video iframe (video URLs only) | USA | No PII |
| Imgur | Static logo asset (no data outbound) | USA | No PII |
| Google Fonts | Font CDN (request metadata) | USA | No PII |
| jsDelivr CDN | JS/CSS library CDN (SRI-pinned) | USA | No PII |
| Cloudflare cdnjs | JS library CDN (request metadata) | USA | No PII |
| MathJax CDN | LaTeX rendering (request metadata) | USA | No PII |
| Plotly CDN | Chart rendering — admin pages (request metadata) | USA | No PII |
| Brandfolder embed | Bluebonnet preview (embed token only) | USA | No PII |
Offline data-pipeline (not in production runtime; no PII)
| Sub-processor | Function | Residency | Receives personal information? |
|---|---|---|---|
| Brandfolder API | TEA Bluebonnet PPTX acquisition (offline) | USA | No PII |
| TEA Canvas LMS | TEA Bluebonnet course scrape (offline) | USA | No PII |
| BC Government curriculum | BC provincial standards (offline) | USA/Canada (public) | No PII |
| Minnesota Dept. of Education / MN Library Assoc. | MN state standards (offline) | USA (public) | No PII |
| WIDA | ELL standards (offline) | USA (public) | No PII |
Notice of new sub-processors & your right to object
Before a new or replacement sub-processor begins processing student data, RevolutionEd gives the educational agency at least 30 days' advance notice (to the data-protection contact on file, plus an in-product notice and an update to this page). Within that window you may object on reasonable data-protection grounds (GDPR Art. 28(2); 8 NYCRR § 121.3; NDPA; your DPA § 6.3). If you object and we cannot offer a commercially reasonable alternative or work-around, you may terminate the affected service without penalty and we will return or destroy the affected data.
Object to a sub-processor
You can also object at any time by emailing our Privacy Officer, Arsenios Scrivens (Chief Privacy & Compliance Officer), at registration@revolutioned.ai.
See also our Privacy Policy and Parents' Bill of Rights. The summary above lists who each sub-processor is; the full contractual detail for every PII-receiving sub-processor — contract type, DPA status, no-sale and no-AI-training commitments, breach-notice timeline, residency, and downstream (fourth-party) posture — is set out in Exhibit A, the sub-processor exhibit to our Data Privacy Agreement (the same source that generates this page). Current and prospective customers can request the full Exhibit A from our Privacy Officer at registration@revolutioned.ai.