Flint Inc (uk.flintk12.com)8 sub-processors
Flint Sub-processor list
About this list
This page lists the third parties Flint engages to process personal data on behalf of its customers through Flint in the UK, at uk.flintk12.com. For each one, it says where that company stores the data. Vendors that only handle Flint’s own corporate data — sales, marketing, CRM, finance and internal tooling — are not sub-processors of customer data and are not listed here, nor are tools that are disabled for Pioneers or removed from the UK data flow.
Amazon Web Services (AWS)
- Description of processing
Cloud infrastructure, including hosting the AI models that power Flint's features.
- Data categories used
Prompts and AI-generated responses (may contain personal data the pupil includes in a prompt), and content that pupils and school users create in Flint.
- Categories of data subjects
Pupils and school users
- Where data is stored
United Kingdom (London, eu-west-2). AI model requests are processed in AWS's European regions, and AWS does not store them.
- How to contact privacy
ConvertAPI
- Description of processing
Document file conversion.
- Data categories used
Pupil document content.
- Categories of data subjects
Pupils
- Where data is stored
United Kingdom (London).
- How to contact privacy
Datalab.to
- Description of processing
Document text extraction.
- Data categories used
Pupil document content.
- Categories of data subjects
Pupils
- Where data is stored
European Union. Flint uses Datalab's EU data residency setting.
- How to contact privacy
Edlink
- Description of processing
Roster synchronisation with school information systems.
- Data categories used
Pupil roster data, including ethnicity — special category data under UK GDPR Art. 9.
SPECIAL CATEGORY — ART. 9
- Categories of data subjects
Pupils
- Where data is stored
Germany. Each school chooses where Edlink stores its data when it connects Edlink, and Flint asks UK schools to choose Germany.
- How to contact privacy
OpenAI
- Description of processing
AI model provider.
- Data categories used
Prompts and AI-generated responses (may contain personal data the pupil includes in a prompt), including uploaded files, images and audio.
- Categories of data subjects
Pupils and school users
- Where data is stored
European Economic Area and Switzerland, through OpenAI's Europe data residency region.
- How to contact privacy
PostHog
- Description of processing
Product analytics.
- Data categories used
Product-usage events and user identifiers (person profiles disabled on the UK domain).
- Categories of data subjects
Pupils and school users
- Where data is stored
United States. On uk.flintk12.com, Flint strips IP addresses, names and content before events reach PostHog, and creates no user profiles.
- How to contact privacy
Sentry
- Description of processing
Application error monitoring.
- Data categories used
Error and diagnostic data (PII collection disabled on the UK domain via data scrubbing).
- Categories of data subjects
Pupils and school users (incidental)
- Where data is stored
United States. On uk.flintk12.com, Flint turns off collection of IP addresses, user identity, request bodies and AI prompts before error reports reach Sentry.
- How to contact privacy
Supabase
- Description of processing
Database hosting.
- Data categories used
Pupil and user account, profile and content data.
- Categories of data subjects
Pupils and school users
- Where data is stored
United Kingdom (London, eu-west-2).
- How to contact privacy
Notification of changes. Flint will update this list before engaging a new or replacement sub-processor that processes customer personal data. Sign up to receive notifications on changes here.
