Subprocessors

Pearl Education uses a limited set of subprocessors to help deliver the Products. This page explains how we govern them and where to find the current list.

Our Approach

Pearl may use subprocessors to provide the Services. Each subprocessor that processes Customer Content is bound by confidentiality and data-protection obligations no less protective than our agreements, and Pearl remains responsible for their performance (MSA §4.4; DPA §2.5). For subprocessors that process Student Data, Pearl enters into written agreements with protections no less stringent than the DPA (DPA §2.5).

Subprocessor List

Pearl publishes its current list of subprocessors that process Customer Content below and updates it as subprocessors change (see the Change Log). Customers may also request the current list directly at privacy@poweredbypearl.com (MSA §4.4; DPA §2.5).

Hosting

Pearl hosts all data in Amazon Web Services (AWS) US regions only (us-east-1 primary; us-west-1 disaster recovery). See the Data Hosting and Residency page for details.

Change Notification

Pearl updates the published subprocessor list below as subprocessors change and records each change in the Change Log. Separately, Pearl will notify customers before materially changing the categories of Student Data the Services collect, and a customer may object in writing within thirty (30) days (DPA §1.2).

Current Subprocessors

The following subprocessors process Customer Content to help deliver the Products. This list is published here and kept current as described above; customers may also request it directly.

Subprocessor Purpose Data Categories Location
Amazon Web Services (AWS) Cloud hosting and infrastructure All Customer Content stored or processed by the Products, including Student Data United States
Amazon Bedrock (AWS) AI model inference for in-product AI (Sparks); Anthropic Claude models accessed within Pearl’s AWS environment Prompts/inputs derived from Customer Content — zero data retention (not stored, logged, or used for training) United States
Clever Rostering and single sign-on (SSO) Roster and account identifiers for authorized users United States
EdLink Student information system (SIS) integration and single sign-on (SSO) Roster and account identifiers for authorized users United States
LessonSpace Online classroom and session recordings Session content and recordings for participating users United States
HiLink Online classroom and session recordings Session content and recordings for participating users United States
Twilio In-app messaging and conversations and real-time notifications (not audio/video) Message content and delivery metadata for participating users United States
Google Cloud Platform (GCP) Google authentication for platform sign-in; Firebase services supporting the Android mobile app Account/authentication identifiers (for example, email address) for authorized users signing in with Google United States
Pendo In-product engagement analytics, feature-usage tracking, and user guides for authorized users Account/organization identifiers and in-app usage/engagement metadata for authorized users of the Products United States
Elastic Centralized logging and monitoring for production systems System and application logs, which may include IP addresses and user/session identifiers United States

LessonSpace is operated by SkillUp (Pty) Ltd DBA Lessonspace (Cape Town, South Africa) and Lessonspace, Inc. (Newark, Delaware, United States); the service is AWS-hosted in a United States region.

Payment Processing (Out of Scope for Customer/Student Data)

Stripe is Pearl’s payment processor for the legacy self-serve Storefront (B2C) offering, which is not available to MSA/DPA customers and is being phased out. Stripe processes billing-contact information (such as name, email, and payment details) only, does not receive Customer Content or Student Data, and is therefore not a Customer Content subprocessor under the MSA/DPA. HubSpot is used for marketing purposes only and likewise does not process Customer Content.

Subprocessor Change Log

Pearl began versioning changes to this list on 2026-08-08; prior changes were not individually logged.

Date Change Vendor(s)
2026-08-08 Added new confirmed subprocessor. Amazon Bedrock (AWS)
2026-08-08 Reclassified from Candidate Subprocessors (Under Review) to confirmed current subprocessors, based on confirmed production use. Google Cloud Platform (GCP), Pendo, Elastic