Skip to main content
QUESTIVALEARNING
Trust: Sub-processors

Sub-processors

The companies that process personal data on our behalf, what each receives, and where.

Last updated
2026-10-08
Questions
[email protected]

Each provider gets only what it needs to do its job. None of them may use the data for their own purposes. Institutions with a data protection agreement are told before we add a provider that handles student data. See also the security overview and the privacy policy.

ProviderWhat forData it receivesLocation
Amazon Web ServicesApplication hosting, database, file storage and backupsAll account, course and classroom dataUnited States (us-west-1, N. California)
CloudflareHTTPS, content delivery, bot and attack protection, and cookie-free page-load counts (Web Analytics, not in the EU)Web traffic in transit, IP addressesGlobal edge network
Authorize.netCard paymentsCard details (entered in their hosted form, never on our servers), billing name and addressUnited States
MailgunSign-in codes, receipts and other emailName, email address, message contentUnited States
AnthropicAI tutor and support chatThe question asked, the textbook passage it concerns, a summary of reading progress. Not used to train models.United States
Voyage AIBook search and tutor retrievalTextbook passages and search queriesUnited States
SentryError monitoringTechnical error reports, which can include an account identifierUnited States
SlackInternal staff alerts (form submissions, unanswered support questions)Form contents, support-chat questionsUnited States
GoogleSite analytics (Google Analytics). On by default with an opt-out in Cookie settings; in the EEA, the UK and Switzerland, only after a visitor accepts the bannerPages visited, device and browser detailsUnited States
FedExShipping rates and address checks for printed booksDelivery addressUnited States
AccuTrackPrinted book fulfillmentName, delivery address, email, order contentsUnited States