| Sub-Processor | Location of Processing | Service Type | Nature of Processing | DPA in Place | Last Reviewed |
Amplitude, Inc. | USA DPF (UK
Extension) + SCCs / DPA | Product analytics and user activity tracking tool;
event data analysis. | This is how we recognise
you as a user and understand how you use our services. Does not process pupil data. | Yes | July 2026 |
Appcues, Inc. | USA DPF (UK Extension) + SCCs / DPA | In product user onboarding, tooltips and in product messaging. |
| Yes | July 2026 |
Big Marker | USA UK IDTA (SCCs Version B1.0) | Webinar management tool. |
Does not
process pupil data. | Yes | July 2026 |
Built by Geeks | UK | Website development, hosting management and maintenance/support (alps.education only) | Access to website visitor server log data. Does not process pupil data. | Yes | July 2026 |
Cloudflare, Inc. | UK | Web infrastructure and
security.
| This is our website content delivery network. Dealing with security filtering of web traffic, IP addresses and metadata traffic. | Yes | July 2026 |
Cloudways Limited | UK/EEA | Website hosting infrastructure | Yes | July 2026 | |
DigitalOcean, LLC | UK | Cloud infrastructure; virtual servers; managed databases; storage tool | This is the provider we use for platform hosting and network traffic for our services. | Yes | July 2026 |
Elastic N.V. (Elasticsearch) | UK | Monitoring and search platform. Search and log
analytics; application performance monitoring; data indexing
| This monitors our application activity data and helps
us to understand the performance of our applications.
| Yes | July 2026 |
Hetzner Online GmbH | EEA | Dedicated and cloud server hosting; data centre infrastructure | This is our cloud hosting, backup and data storage provider. | Yes | July 2026 |
Mailchimp / Mandrill (Intuit Inc.) |
| Email Software | The provider we use for in-app email messages. Does not process pupil data. | Yes | July 2026 |
Microsoft 365 / Azure Active Directory | UK / EEA
| Productivity suite of apps (email, Word, Excel, PowerPoint, SharePoint); identity and access management tool | Internal system used by Alps staff to organise
company information, including user account data; email and document content
and authentication logs.
| Yes | July 2026 |
Microsoft Azure | UK / EEA | Cloud Infrastructure | Hosting, storage and processing of application data in Ascent, Connect and Summit. | Yes | July 2026 |
Stripe Connect | Ireland (EEA) | Payment Processing | Processing of payment information for subscription and service fees. Does not process pupil data. | Yes | July 2026 |
Vultr (The Constant) | UK | Website hosting infrastructure | Does not process pupil data. | Yes | July 2026 |
Zapier, Inc. |
DPF (UK-US Data Bridge) + UK IDTA / SCCs | Workflow automation and app integration platform;
data routing between connected services. | This facilitates automated workflows between Alps’
systems. Does not process pupil data. | Yes | July 2026 |
Zoho Corporation | UK/EEA
| Alps’ CRM system.
| Customer relationship management. Enables business productivity, project management and support desk functions. | Yes | July 2026 |
| Data Controller | Alkemygold Limited (Alps) | Last Reviewed | July 2026 |
Next Review Date | July 2027 (or upon material change) | Maintained by | Alps DPO |