Flint Inc (uk.flintk12.com)14 sub-processors
Flint Sub-processor list
UK
About this list
This page lists the third parties Flint engages to process personal data on behalf of its customers through Flint in the UK, at uk.flintk12.com. For each one, it says where that company stores the data. Vendors that only handle Flint’s own corporate data — sales, marketing, CRM, finance and internal tooling — are not sub-processors of customer data and are not listed here, nor are tools that are disabled for Pioneers or removed from the UK data flow.
This list covers only Flint in the UK at uk.flintk12.com.
Amazon Web Services (AWS)
- Description of processing
Cloud infrastructure, including hosting the AI models that power Flint's features.
- Data categories used
Prompts and AI-generated responses (may contain personal data the pupil includes in a prompt), and content that pupils and school users create in Flint.
- Categories of data subjects
Pupils and school users
- Where data is stored
United Kingdom (London, eu-west-2). AI model requests are processed in AWS's European regions, and AWS does not store them.
- How to contact privacy
ConvertAPI
- Description of processing
Document file conversion.
- Data categories used
Pupil document content.
- Categories of data subjects
Pupils
- Where data is stored
United Kingdom (London).
- How to contact privacy
CookieYes
- Description of processing
Cookie consent banner in the Flint app.
- Data categories used
Each visitor’s cookie choices, a random consent ID and a masked IP address.
- Categories of data subjects
Pupils and school users
- Where data is stored
Amazon Web Services data centres used by CookieYes, a UK company.
- How to contact privacy
Datalab.to
- Description of processing
Document text extraction.
- Data categories used
Pupil document content.
- Categories of data subjects
Pupils
- Where data is stored
European Union. Flint uses Datalab's EU data residency setting.
- How to contact privacy
Edlink
- Description of processing
Roster synchronisation with school information systems.
- Data categories used
Roster data the school chooses to share through Edlink, such as pupil names, email addresses, year groups and class enrolments.
- Categories of data subjects
Pupils
- Where data is stored
Germany. Each school chooses where Edlink stores its data when it connects Edlink, and Flint asks UK schools to choose Germany.
- How to contact privacy
Exa
- Description of processing
Web search for Sparky, Flint’s AI assistant.
- Data categories used
Search queries Sparky writes from the conversation, which may contain personal data the pupil includes in a prompt, and links pasted into the chat.
- Categories of data subjects
Pupils and school users
- Where data is stored
Transfers of personal data outside the European Economic Area (“EEA”) will be governed by the Standard Contractual Clauses adopted by the European Commission on June 4, 2021.
- How to contact privacy
Google Analytics
- Description of processing
Usage analytics for the Flint app.
- Data categories used
Pages visited and buttons used, device and browser information, and IP address. Google Analytics sets no analytics cookies unless the user accepts them.
- Categories of data subjects
Pupils and school users
- Where data is stored
Transfers of personal data outside the European Economic Area (“EEA”) will be governed by the Standard Contractual Clauses adopted by the European Commission on June 4, 2021.
- How to contact privacy
OpenAI
- Description of processing
AI model provider.
- Data categories used
Prompts and AI-generated responses (may contain personal data the pupil includes in a prompt), including uploaded files, images and audio.
- Categories of data subjects
Pupils and school users
- Where data is stored
European Economic Area and Switzerland, through OpenAI's Europe data residency region.
- How to contact privacy
PostHog
- Description of processing
Product analytics.
- Data categories used
Product-usage events and user identifiers (person profiles disabled on the UK domain).
- Categories of data subjects
Pupils and school users
- Where data is stored
Transfers of personal data outside the European Economic Area (“EEA”) will be governed by the Standard Contractual Clauses adopted by the European Commission on June 4, 2021.
- How to contact privacy
Sentry
- Description of processing
Application error monitoring.
- Data categories used
Error and diagnostic data (PII collection disabled on the UK domain via data scrubbing).
- Categories of data subjects
Pupils and school users (incidental)
- Where data is stored
Transfers of personal data outside the European Economic Area (“EEA”) will be governed by the Standard Contractual Clauses adopted by the European Commission on June 4, 2021.
- How to contact privacy
Slack
- Description of processing
Receives feedback that users send through Sparky, so Flint’s team can act on it.
- Data categories used
The user’s name, email address and school, the feedback text, and links to their profile and chat.
- Categories of data subjects
Pupils and school users
- Where data is stored
Transfers of personal data outside the European Economic Area (“EEA”) will be governed by the Standard Contractual Clauses adopted by the European Commission on June 4, 2021.
- How to contact privacy
Supabase
- Description of processing
Database hosting.
- Data categories used
Pupil and user account, profile and content data.
- Categories of data subjects
Pupils and school users
- Where data is stored
United Kingdom (London, eu-west-2).
- How to contact privacy
Twilio SendGrid
- Description of processing
Email delivery.
- Data categories used
Names, email addresses and email content: account emails, class announcements, AI Literacy course emails, and safeguarding alerts to teachers that name the pupil and what was flagged.
- Categories of data subjects
Pupils and school users
- Where data is stored
Transfers of personal data outside the European Economic Area (“EEA”) will be governed by the Standard Contractual Clauses adopted by the European Commission on June 4, 2021.
- How to contact privacy
Vercel
- Description of processing
Runs the Flint app’s web servers.
- Data categories used
Everything sent to and from the Flint app passes through Vercel’s servers, including prompts, AI responses, names and pupil work.
- Categories of data subjects
Pupils and school users
- Where data is stored
Transfers of personal data outside the European Economic Area (“EEA”) will be governed by the Standard Contractual Clauses adopted by the European Commission on June 4, 2021.
- How to contact privacy
Notification of changes. Flint will update this list before engaging a new or replacement sub-processor that processes customer personal data. Sign up to receive notifications on changes here.
