Sub-processor List
Payments by iAntz · IANTZ LIMITED · Last updated: July 2026
This list covers third-party processors engaged by IANTZ LIMITED to deliver the Payments by iAntz platform. All subprocessors are bound by data processing agreements. Schools are notified of material changes in accordance with our Data Processing Agreement.
Cloud infrastructure
| Processor | Purpose | Data processed | Primary location |
|---|
| Amazon Web Services (AWS) |
API, database, storage, email (SES), managed AI services, backend services |
Application data, logs, backups |
UK (London) |
| Cloudflare |
Website and app delivery, CDN, DDoS protection, WAF, bot protection |
Web traffic, access logs |
UK/EU (contractual safeguards) |
Authentication and identity
| Processor | Purpose | Data processed | Primary location |
|---|
| Google, Apple, Microsoft, Facebook |
Social sign-in (OAuth) where users choose these providers |
User identifiers, email, basic profile |
Provider-dependent; DPAs in place |
| Google (Firebase) |
Push notifications only (FCM) |
Device tokens |
Provider-dependent; DPAs in place |
Payments
| Processor | Purpose | Data processed | Primary location |
|---|
| Stripe |
Card payments, wallet top-ups, refunds |
Payment metadata, transaction records (card data handled by Stripe; PCI-DSS Level 1) |
UK/EU |
Communications
| Processor | Purpose | Data processed | Primary location |
|---|
| Amazon SES |
Transactional and service-related email |
Email addresses, message content |
UK/EU |
| Twilio |
SMS and WhatsApp messaging (where enabled by schools) |
Phone numbers, message content |
UK/EU (contractual safeguards) |
School integrations
| Processor | Purpose | Data processed | Primary location |
|---|
| Wonde |
MIS integration and pupil data synchronisation (as authorised by the school) |
Pupil identifiers, names, class memberships |
UK |
Sales, marketing, and customer service
| Processor | Purpose | Data processed | Primary location |
|---|
| HubSpot |
CRM, customer support, marketing (with consent where required) |
Contact information, communication history |
EU hosting |
Monitoring
| Processor | Purpose | Data processed | Primary location |
|---|
| Sentry |
Error monitoring and platform stability |
Technical logs; personal data minimised |
EU |
AI-assisted features use contracted cloud AI services delivered through our AWS infrastructure, covered under the AWS data processing agreement.
Further sub-processors
Major processors above may use their own sub-processors (for example, AWS, Stripe, and Cloudflare publish sub-processor lists). iAntz reviews processor changes periodically.
For the latest list or to object to a sub-processor change on reasonable grounds: [email protected]
Also published at iantz.com/security