Sub-processors
Nine Pebbles relies on the third-party services listed below to deliver the platform. Each is bound by a Data Processing Agreement (DPA) and processes personal data only on Nine Pebbles' documented instructions.
We notify centre admins by email at least 30 days before adding a new sub-processor or changing an existing one's scope. Centres may object; if we can't accommodate the objection we'll terminate the contract on reasonable notice.
| Provider | Role | Jurisdiction | Data categories | DPA |
|---|---|---|---|---|
| Supabase Inc. | Database, authentication, file storage | United States (database hosted in London, UK: eu-west-2) | All operational and personal data — tenant rows, files, auth. | Link |
| Vercel Inc. | Application hosting and edge functions | United States | Application server logs, request metadata. No persisted personal data. | Link |
| Stripe Inc. | Card payments, customer storage, refunds, payouts | United States (UK + EU regional processing) | Payment instruments, billing addresses, transaction history. | Link |
| GoCardless Ltd | UK Direct Debit (BACS) collection | United Kingdom | Payer name + address, sort code + account number, mandate state. | Link |
| Resend Inc. | Transactional email delivery; receiving enquiry emails forwarded by centres that use the enquiry assistant | United States | Recipient email + name, subject + body, delivery + open events. For forwarded enquiries: the sender's address, name and message. | Link |
| Sentry (Functional Software, Inc.) | Error monitoring and performance tracking | United States (EU region available) | Error stack traces, request paths, user IDs. Names, emails and other PII scrubbed before transit. | Link |
| Anthropic PBC | AI inference for opt-in features (lesson note drafting, anomaly scans, safeguarding triage, and the Pebble AI staff assistant) | United States | Text content of artefacts processed by enabled AI features. Card numbers, NHS numbers and other high-sensitivity PII scrubbed before transit. Outputs are returned to staff for human review and never auto-applied. | Link |
| ElevenLabs | Speech-to-text and text-to-speech for the optional voice mode of the staff assistant (Pebble AI); the AI phone receptionist and voicemail transcription of the optional enquiry assistant — only at centres that switch these on | United States | Short staff voice recordings and their transcripts; first names of students and staff sent as recognition hints; short spoken versions of answers with contact details removed. For enquiry calls: the caller's voice, phone number and the call transcript, and voicemail audio for transcription. Audio is not stored by Nine Pebbles. | Link |
| Twilio Inc. | Text messages (SMS) to parents and, where Nine Pebbles provides the number, WhatsApp messages; plus phone numbers and call routing for the optional enquiry assistant phone line. Only at centres that use these features. | United States | Parent mobile numbers and message content (lesson reminders, cancellations, announcements, replies); caller phone numbers, call metadata and voicemail recordings, which are deleted from Twilio once transcribed. | Link |
| GitHub (Microsoft) | Source code hosting | United States | Source code only; no production personal data. | Link |
Services a centre connects itself
Some integrations send data to an account the centre owns, not to Nine Pebbles. They are the centre’s own processors, chosen and contracted by the centre, and only receive data once the centre connects them: Xero, Intuit QuickBooks, Mailchimp, Zapier (and Make or n8n), Zoom, Microsoft Teams, Lessonspace, Google Calendar (each staff member’s own Google account), Square, the centre’s own Stripe or GoCardless account, the centre’s own Twilio account when it uses one for WhatsApp, and outbound webhooks to the centre’s own systems.
Cross-border transfers
Where a sub-processor is in the United States, transfers rely on the EU-US Data Privacy Framework where applicable, plus Standard Contractual Clauses (SCCs) under UK and EU GDPR. We monitor the regulatory position and switch to regional alternatives where they're available and cost-comparable.
How to be notified of changes
Sub-processor additions are announced via your registered org-admin email and posted in the changelog at /changelog. To object, email [email protected] within 14 days of the notice.