Subprocessors and International Transfers

1. About This Notice

This notice describes the main third-party suppliers used by OurClass, available at ourclass.cloud and operated by Sizorax Ltd (Company No. 16955799). For core school-service processing, Sizorax Ltd acts as processor for the relevant school, academy, or trust unless stated otherwise in the applicable agreement or notice.

2. Current Supplier List

• Vercel: Application hosting and delivery. Primary regional deployment is in AWS eu-west-1 for the service infrastructure described by OurClass.
• Supabase: Authentication, database, and realtime infrastructure. Primary regional deployment is in eu-west-1.
• OpenAI: AI generation and assistance features for lesson drafting, support, and approved learner or teacher workflows.
• Resend: Transactional email delivery, including consent-related and operational notifications where configured.
• Stripe: Billing, invoicing, payments, and related financial administration where paid services are used.
• Sentry: Optional browser error monitoring and diagnostics where enabled for the environment and accepted through the relevant consent flow.

3. Data Categories and Purposes

The data shared with a supplier depends on the feature being used. Relevant categories may include account identifiers, school affiliation, lesson and AI request content, support or consent email details, billing contact information, technical diagnostics, and security or reliability metadata. Sizorax Ltd seeks to limit supplier access to the data needed for the specific service purpose.

4. Regions and International Transfers

Core hosting and database infrastructure for OurClass is configured in eu-west-1. Some suppliers may process data outside the UK or EEA depending on their service architecture, support operations, or global infrastructure. Where that happens, Sizorax Ltd relies on the applicable contractual safeguards and transfer mechanisms offered for the relevant service, such as the UK Addendum, International Data Transfer Agreement terms, or equivalent approved commitments incorporated into supplier contracts.

5. Supplier Roles

For school-controlled personal data, these suppliers are generally used as sub-processors appointed by Sizorax Ltd so OurClass can provide hosting, authentication, AI functionality, email delivery, billing support, and operational monitoring. For limited Sizorax Ltd controller activities, such as website enquiries or support handling, a supplier may support Sizorax Ltd directly in that controller capacity.

6. Contractual Safeguards

Supplier use is governed through contractual terms, including data processing obligations, confidentiality commitments, security expectations, and transfer protections relevant to the service. The school-facing processor framework is supported by the OurClass DPA template and related compliance materials.

7. Change Management

Sizorax Ltd may update this notice as suppliers change or service architecture evolves. The current list should be reviewed alongside customer contracts, the privacy policy, and any school-facing compliance pack provided for procurement or onboarding.