Skip to content
AiLycée

Trust

Subprocessors

Last updated: September 2026

The third parties that can touch data when you use AiLycée as a cloud tenant, what each one is for, and what it actually receives. We update this page before adding anyone, not after.

  • Hetzner Online GmbH

    What it is used for
    Hosting for the application, database, object storage and backups
    What it receives
    All tenant data, encrypted at rest
    Where
    Germany (EU)
    When it applies
    Cloud plans

  • Cloudflare, Inc.

    What it is used for
    DNS, TLS termination, protection against attacks, and caching for this website
    What it receives
    Request metadata (IP address, URL, user agent). No school records.
    Where
    Global edge, EU-first routing
    When it applies
    Cloud plans

  • Anthropic PBC

    What it is used for
    Drafting report-card comments and the weekly parent digest
    What it receives
    A child's first name and academic facts only. Never family names, contacts, IDs, photos or financial data.
    Where
    United States
    When it applies
    School plan and above, when the school enables AI

  • Meta Platforms (WhatsApp Business Cloud API)

    What it is used for
    Sending absence alerts, digests and receipt notices to parents on WhatsApp
    What it receives
    The recipient's phone number and the message text the school sends
    Where
    Global
    When it applies
    School plan and above, when the school enables WhatsApp

  • Google (Firebase Cloud Messaging)

    What it is used for
    Push notifications to the mobile apps
    What it receives
    A device token and the notification title and body
    Where
    Global
    When it applies
    All plans that use the mobile apps

  • Postmark

    What it is used for
    Transactional email: receipts by email, invitations, password resets
    What it receives
    Recipient name and email address, and the message content
    Where
    United States / EU region
    When it applies
    All cloud plans

  • Local SMS aggregator

    What it is used for
    SMS fallback for parents without a smartphone
    What it receives
    The recipient's phone number and the message text
    Where
    Lebanon
    When it applies
    Named in your contract before it is switched on

On-prem changes this list

If your school runs on the Institution plan with the system inside your building, hosting and backups leave this list entirely, there is no Hetzner and no cloud database, because there is no cloud copy. What remains is only what you switch on: WhatsApp sending, push notifications, email delivery, and the AI drafting calls. Turn those off and the school talks to nobody outside its own walls.

How we handle changes

  • Every provider here is bound by a written agreement covering confidentiality, security and deletion.
  • We publish an addition on this page before it starts processing anything, so a school always has time to object.
  • A school on the Institution plan may require that a given provider is never enabled for its tenant.
  • Questions: privacy@ailycee.com.