Sub-processor Register
Porta PE uses the following sub-processors to deliver its service. This register is updated whenever a sub-processor is added, changed, or removed. Schools are notified at least 30 days before any change.
| Sub-processor | Purpose | Location | Safeguards | Data access |
|---|---|---|---|---|
| [CLOUD PROVIDER TBD] | Infrastructure hosting (compute, database, file storage) | Frankfurt, Germany (EU) | DPA with provider, ISO 27001 certified | Encrypted data at rest. No access to content. |
| [AI PROVIDER TBD] | Document extraction, classification, and validation (OCR, NLP, AI inference) | [LOCATION TBD] | DPA with provider. Data not retained beyond processing session. Not used for model training. | Document content during processing only. |
| [PAYMENT PROVIDER TBD] | Payment processing (reservation fee, application fee) | [LOCATION TBD] | PCI DSS Level 1 compliant. DPA in place. | Payment amount, transaction reference. No access to application documents. |
| [EMAIL PROVIDER TBD] | Transactional email (notifications, consent reminders, deletion confirmations) | [LOCATION TBD] | DPA with provider. TLS in transit. | Recipient email, name, email content. |
Last updated: [TBD]. For questions about our sub-processors, contact [DPO EMAIL].