Sub-processors
Sub-processors
Last updated: 4 September 2026
These are the companies that personal information reaches when you use The Maktab App, what each of them does, and where they process it. Nothing goes anywhere else.
We keep this page current. If we add a company to this list, or change what one of them does, we will tell the Maktabs using the platform.
Company
Neon
What it does
The database. Every record in the platform lives here.
Where
United Kingdom — London (AWS eu-west-2)
What reaches it
All student, guardian and staff records, including medical and additional-needs information.
Company
Cloudflare
What it does
Hosting, content delivery, and the code that runs the app.
Where
Global — requests are handled at the data centre nearest the visitor
What reaches it
All traffic in transit. Short-lived caching of dashboard and list views.
Company
Stripe
What it does
Card payments and, where a Maktab enables it, Direct Debit.
Where
United States and globally
What reaches it
Payer name and email address, the amount, and references identifying the Maktab and the payment. Card and bank details are entered directly with Stripe and never reach us.
Company
Resend
What it does
Sending transactional email — sign-in links, confirmations, notifications.
Where
United States
What reaches it
Recipient email address and the content of the message being sent.
Company
What it does
Sign in with Google, for staff and parents who choose it.
Where
Global
What reaches it
Email address, name, and the Google account identifier.
Company
postcodes.io
What it does
Turning a postcode into map coordinates, so leaders can see where families travel from.
Where
United Kingdom
What reaches it
Student home postcodes only. No names are sent.
Company
Apple, Google and Mozilla push services
What it does
Delivering push notifications to a device that has opted in.
Where
Global
What reaches it
An encrypted notification payload and the address of the subscribed device.
Company
Google Drive, Microsoft Azure or Amazon S3 (optional)
What it does
Optional. Only where a Maktab connects its own storage for homework attachments.
Where
Whichever region that Maktab chooses
What reaches it
Photographs and voice recordings that parents and teachers attach to homework.
| Company | What it does | Where | What reaches it |
|---|---|---|---|
| Neon | The database. Every record in the platform lives here. | United Kingdom — London (AWS eu-west-2) | All student, guardian and staff records, including medical and additional-needs information. |
| Cloudflare | Hosting, content delivery, and the code that runs the app. | Global — requests are handled at the data centre nearest the visitor | All traffic in transit. Short-lived caching of dashboard and list views. |
| Stripe | Card payments and, where a Maktab enables it, Direct Debit. | United States and globally | Payer name and email address, the amount, and references identifying the Maktab and the payment. Card and bank details are entered directly with Stripe and never reach us. |
| Resend | Sending transactional email — sign-in links, confirmations, notifications. | United States | Recipient email address and the content of the message being sent. |
| Sign in with Google, for staff and parents who choose it. | Global | Email address, name, and the Google account identifier. | |
| postcodes.io | Turning a postcode into map coordinates, so leaders can see where families travel from. | United Kingdom | Student home postcodes only. No names are sent. |
| Apple, Google and Mozilla push services | Delivering push notifications to a device that has opted in. | Global | An encrypted notification payload and the address of the subscribed device. |
| Google Drive, Microsoft Azure or Amazon S3 (optional) | Optional. Only where a Maktab connects its own storage for homework attachments. | Whichever region that Maktab chooses | Photographs and voice recordings that parents and teachers attach to homework. |