Flint Inc (flintk12.com)11 sub-processors
Flint Sub-processor list
About this list
This page lists the third parties Flint engages to process personal data on behalf of its customers through the Flint product. Vendors that only handle Flint’s own corporate data — sales, marketing, CRM, finance and internal tooling — are not sub-processors of customer data and are not listed here, nor are tools that are disabled for Pioneers or removed from the UK data flow.
Anthropic
- Description of processing
Powers the Sparky chat and reasoning features. Pupil prompts are sent to Anthropic and responses returned.
- Data categories used
Pupil prompt content and AI-generated responses (may contain personal data the pupil includes in a prompt).
- Categories of data subjects
Pupils
- Location & transfers
Routing under review (Anthropic US direct, or AWS Bedrock / Vertex AI in the EU). EU SCCs (Module 2) + UK IDTA operative in all cases.
- How to contact privacy
ConvertAPI
- Description of processing
Converts pupil documents between file formats (PDF, DOCX, etc.).
- Data categories used
Pupil document content.
- Categories of data subjects
Pupils
- Location & transfers
EU (Lithuania); UK endpoint for Pioneers.
- How to contact privacy
Datalab.to
- Description of processing
Transcribes pupil documents from PDF to text.
- Data categories used
Pupil document content.
- Categories of data subjects
Pupils
- Location & transfers
EU (Netherlands), processed per request.
- How to contact privacy
Edlink
- Description of processing
MIS/LMS integration and pupil roster synchronisation.
- Data categories used
Pupil roster data, including ethnicity — special category data under UK GDPR Art. 9.
SPECIAL CATEGORY — ART. 9
- Categories of data subjects
Pupils
- Location & transfers
Dependent on selection - United States, Canada, Germany or Australia.
- How to contact privacy
Intercom
- Description of processing
Powers the in-product customer-support widget
- Data categories used
Support contact details.
- Categories of data subjects
School staff / administrators (pupils have no access by design).
- Location & transfers
Not specified.
- How to contact privacy
OpenAI
- Description of processing
Image generation, text-to-speech and audio transcription for pupils.
- Data categories used
Pupil images, audio and transcription content.
- Categories of data subjects
Pupils
- Location & transfers
European Union (confirmed for Pioneers traffic).
- How to contact privacy
PostHog
- Description of processing
Product analytics and feature-flag delivery.
- Data categories used
Product-usage events and user identifiers (person profiles disabled on the UK domain).
- Categories of data subjects
Pupils and school users
- Location & transfers
UK domain; EU cloud available.
- How to contact privacy
Sentry
- Description of processing
Application error monitoring.
- Data categories used
Error and diagnostic data (PII collection disabled on the UK domain via data scrubbing).
- Categories of data subjects
Pupils and school users (incidental)
- Location & transfers
UK domain.
- How to contact privacy
Supabase
- Description of processing
Primary database storing pupil and user data.
- Data categories used
Pupil and user account, profile and content data.
- Categories of data subjects
Pupils and school users
- Location & transfers
eu-west-2 (London) for the Pioneers tenant.
- How to contact privacy
Twilio / SendGrid
- Description of processing
Delivery of transactional and notification emails.
- Data categories used
Recipient email addresses.
- Categories of data subjects
School users (staff / account holders)
- Location & transfers
EU regional sending available.
- How to contact privacy
Vercel
- Description of processing
Hosts the frontend application; pupil data passes through the hosting layer but is not stored there.
- Data categories used
Pupil / user data in transit (transient).
- Categories of data subjects
Pupils and school users
- Location & transfers
Hosting layer — data transits, not stored.
- How to contact privacy
Notification of changes. Flint will update this list before engaging a new or replacement sub-processor that processes customer personal data. Sign up to receive notifications on changes here.
