Service Providers & Subprocessors
The provider categories used for hosting, AI, billing, app-platform functions and communications.
Effective 13 September 2026. Contact InstructorLane support or email [email protected].
How this list works
The providers below support the current service. Some process personal data on our instructions; app stores and payment providers may also act as independent controllers for their own platform, payment, fraud-prevention and legal duties. Processing locations can vary by service and support operation. Where UK personal data is transferred outside the UK without adequacy regulations, we use the provider's applicable UK transfer mechanism and assess the transfer where required.
Current providers
| Provider | Purpose | Typical data scope | Role |
|---|---|---|---|
| Cloudflare | Hosting, database, file storage, network security and content delivery | Account, workspace, learner, file and technical service data | Processor and infrastructure provider |
| OpenAI | Optional instructor-requested AI drafting | Minimised lesson text selected for the requested task and the returned draft | Processor/service provider for the optional feature |
| Stripe | Web subscription billing, invoices, payment administration and refunds | Customer, subscription, invoice and transaction references; card details are handled by Stripe | Payment provider; role depends on the activity |
| Google Play distribution and billing, Android platform services and push delivery where enabled | Store transaction, app, device and delivery data | Independent platform provider and service provider as applicable | |
| Apple | App Store distribution, TestFlight, StoreKit subscription billing, server transaction verification and Apple Push Notification service | Store transaction, subscription, tester, app, device and delivery data; payment credentials remain with Apple | Independent platform provider and service provider as applicable |
| Resend | Password recovery, transactional, support and safety-report email delivery | Email address, delivery metadata and the content of the relevant service or safety message | Email delivery service provider |
Current contract records reviewed for this register include the Cloudflare Customer DPA v6.4 (3 April 2026), OpenAI Data Processing Addendum (1 January 2026), Stripe Data Processing Agreement (18 November 2025) and Resend DPA (27 August 2026). The exact contracting entity can depend on the production account and service region; those account records are retained privately with the customer DPA schedule.
Change notice
Material changes affecting customer-controlled pupil data will be communicated through an appropriate service channel before the provider begins processing where the contract requires it. Questions or objections can be sent to [email protected].