Education vendors and their subprocessors

5 education vendors with a tracked subprocessor list, re-checked daily. Of the 5 whose trust page we track, 2 list ISO 27001.

Key DPA terms across education vendors

What each vendor's data processing agreement commits to. The vendor page quotes the sentence behind every answer.

Vendor	Breach notification	Notice of a new subprocessor	Transfers outside the EU
Brightspace	Without undue delay, with no set deadline	10 days ahead	Standard contractual clauses and adequacy decisions
Showpad	Within 48 hours	20 days ahead	Standard contractual clauses, the EU–US Data Privacy Framework, binding corporate rules, and adequacy decisions