Last updated: 26 March 2026
The following third-party service providers process data on behalf of EduMarkets in accordance with Art. 28 GDPR. Each provider has a Data Processing Agreement (DPA) in place.
| Provider | Purpose | Data processed | Location |
|---|---|---|---|
| DigitalOcean | Application hosting & database | All platform data (encrypted at rest) | EU (AMS3) / US |
| Postmark | Transactional email delivery | Email address, name, email content | US |
| Anthropic | AI-powered educational feedback | Exercise answers and module context only — no personal identifiers are sent | US |
We give institutional clients at least 30 days' prior notice before engaging a new sub-processor or replacing an existing one. The notice is sent by email to the institutional client's designated contact, and this public list is updated at the same time.
Institutional clients may object to a proposed new sub-processor on reasonable data-protection grounds within the 30-day notice period by writing to support@edu-markets.com. If the objection cannot be resolved, the institutional client may terminate the affected service in accordance with the Data Processing Agreement (DPA).
A copy of our standard DPA, including Annex II (technical and organisational measures) and the relevant EU Standard Contractual Clauses, is available on request to support@edu-markets.com.