Minsa

Sub-processors

Our sub-processors

Draft document. This page reflects the providers actually used by the service. It must be reviewed and validated (signed data processing agreements, transfer safeguards) before final publication.

To deliver the service, Minsa relies on a small number of sub-processors, each governed by a data processing agreement (DPA) under Article 28 of the GDPR. No other recipient receives your data.

Sub-processorRoleData concernedLocationSafeguards
SupabaseDatabase, authentication and file storageAccount data, student records, photos and documentsEuropean Union (AWS, Ireland region)Data processing agreement (DPA) — EU hosting
StripePayment of school subscriptionsSchool billing data only — no child or parent dataUnited States / EUStripe DPA + transfer safeguards (DPF / standard clauses)
Google (Firebase Cloud Messaging)Push notifications to the appsDevice tokens and notification contentUnited StatesFirebase Data Processing Terms + transfer safeguards
Nager.DatePublic holidays calendarNo personal data (country code and year only)European UnionNo personal data transmitted

This list may change. Any substantial change will be reflected here and, where applicable, communicated to client schools.

See also: Privacy policy.