Sub-processor list
As of 10 June 2026.
The following list identifies the Sub-processors engaged by andBeyond.digital Ltd, which operates C3NTR, to process School Personal Data on behalf of customer schools. The list forms Annex III of the C3NTR Data Processing Agreement.
| Sub-processor | Role | Location of processing | Engaged since |
|---|---|---|---|
| Google LLC / Google Cloud (Firebase) | Authentication (Firebase Auth), database (Cloud Firestore), object storage (Cloud Storage), serverless compute (Cloud Functions), push notifications (Firebase Cloud Messaging), error reporting (Crashlytics), web hosting (Firebase App Hosting). | UK (europe-west2, London) for compute and database; EU (europe-west4, Netherlands) for App Hosting. |
Launch |
| Stripe Payments Europe Ltd | Payment processing for school subscriptions. C3NTR never stores card details — Stripe is PCI-DSS Level 1 certified and is the controller for card data it receives. | Ireland (EEA). | Launch |
| Pexels GmbH | Stock-image and stock-video search results returned via the C3NTR media picker. Pexels receives the search query string; no user identifier is forwarded. | Germany (EEA). | Launch |
| Cloudflare, Inc. | Bot protection on the marketing site's early-access form (Cloudflare Turnstile). | United States, with EU-region edge handling per Cloudflare's data-protection statement. | Launch |
Change notification
We give 30 days’ prior written notice before adding or replacing a Sub-processor. To receive change notifications by email, enter your address below.
Objection process
If you object to a proposed Sub-processor change on reasonable data-protection grounds within the 30-day notice window and the parties cannot resolve the objection, you may terminate the affected portion of the Services without penalty, as set out in clause 5.3 of the DPA.