Sub-processors
Last updated 12 October 2026.
These are the third parties that process personal data on behalf of schools using BenchMark. After Hours Education Limited remains responsible for all of them.
Under our Data Processing Agreement we engage sub-processors only from this list, give 30 days’ notice before adding or changing one, and remain fully liable for their acts and omissions. A school that objects to a change may terminate and have its content returned or deleted.
If you use only the free BenchMark self-evaluation
Only the first three below apply to you: Supabase, Vercel and Resend. All three are in the United Kingdom or Ireland, so no personal data leaves the area covered by UK adequacy regulations.
Stripe is engaged only if you buy the Enrichment Mark, and Anthropic only if you apply for it and upload evidence. Neither is engaged by the self-evaluation, and evidence upload stays locked until a school opts in.
The current list
Supabase
London, United Kingdom (eu-west-2)Database, uploaded file storage, and account authentication
- Engaged:
- Whenever the Service is used
- Personal data involved:
- Account holder name, job title, work email and password hash; school details; everything the school writes or uploads.
Vercel
London, United Kingdom (lhr1)Application hosting and request processing
- Engaged:
- Whenever the Service is used
- Personal data involved:
- Processes data in transit between the school and the database. Does not store it.
Resend
Ireland (eu-west-1)Transactional email, such as account activation and reminders
- Engaged:
- Whenever the Service is used
- Personal data involved:
- Recipient name and email address, and the content of the message sent.
Stripe
United Kingdom and European UnionCard payment
- Engaged:
- Only if a school pays for the Enrichment Mark
- Personal data involved:
- Billing contact and payment details, entered directly with Stripe. We never see or hold card numbers.
Anthropic
United StatesAI-assisted first read of uploaded evidence, producing a draft judgement that a human reviewer then checks and may overrule
- Engaged:
- Only if a school applies for the Enrichment Mark and uploads evidence
- Personal data involved:
- The content of the evidence documents a school chooses to upload, which could include personal data about staff or pupils if the school includes it.
Where your data is held
Your database, your uploaded files and your login credentials are held in the United Kingdom. The application that reads and writes them also runs in the United Kingdom. Transactional email is sent from Ireland, which is covered by UK adequacy regulations.
The one sub-processor outside that is Anthropic, in the United States, and it is engaged only in the circumstance described below.
About the AI-assisted evidence read
This is the part most relevant to a data protection impact assessment, so it is worth stating plainly.
The free BenchMark self-evaluation does not use it, and does not engage Anthropic at all. It applies only when a school applies for the paid Enrichment Mark and uploads supporting evidence. In that case an AI model reads those documents and proposes a met or not-met judgement for each benchmark. That proposal is advisory: a human reviewer reads the same evidence and decides, and must give a reason where they disagree.
If the evidence a school uploads contains personal data about staff or pupils, that content is processed in the United States under the ICO’s International Data Transfer Addendum. A school can avoid this entirely by not uploading evidence, or by using only the free self-evaluation, which is fully usable without it.
Using BenchMark without pupil data
The self-evaluation can be completed in full without processing any pupil personal data. It asks a school to choose one of four levels against each of the eight DfE enrichment benchmarks, and asks for no information about individual pupils at any point. The only personal data required is the account holder’s name, job title and work email.
Personal data about pupils enters only if a school chooses to type it into the optional free-text notes, or to upload a document containing it. Evidence upload stays locked unless a school opts into the Enrichment Mark.
Questions or objections
Email privacy@rounded.education or write to After Hours Education Limited, Wellesley House, Duke of Wellington Avenue, London, England, SE18 6SS.
See also our Privacy Notice and Terms of use.