Brightspace Subprocessors List (September 2026): Changes and History

Brightspace names 54 subprocessors on its published list. Read from the vendor's own page and re-checked daily.

Last checked September 28, 2026 Official source ↗

Brightspace subprocessors (September 2026)

# Subprocessor Purpose Location
1 Amazon Web Services, Inc. Cloud Hosting For Data storage: Customer Location Dependent AWS regions (including United States, Canada, Australia, Republic of Ireland, Singapore, India) For Data processing: Customer Location Dependent AWS regions, for certain AI inference services, global AWS infrastructure
2 Microsoft O365 Corporate Productivity & Business Operations Canada
3 Salesforce.com, Inc. (Steelbrick CPQ) Client Relationship Management Canada, United States
4 Atlassian Project Management Canada
5 Planhat AB Client Relationship Management and Global Support United States
6 Qualtrics, LLC Surveys Canada
7 Tableau Customer Data Analysis, Reporting and Business Intelligence Canada
8 Smartsheet Project Management, Product Development and Professional Services United States, European Union
9 Salesloft, Inc. Sales engagement and customer/prospect relationship management, including communication sequencing and meeting coordination United States, European Union
10 D2L Subsidiaries: Support and Professional Services Customer Location Dependent (United States, Canada, Mexico, Australia, Republic of Ireland, Singapore, India)
11 Salesforce.com, Inc. (ServiceCloud) Customer Support Canada, United States
12 Forethought Technologies Inc. Customer Support United States
13 Natterbox Customer Support, Telephony United Kingdom
14 ANSR Source Content US LLC, Implementation Services for Customers in India United States, India
15 Language IO Inc Customer Support Canada
16 Microsoft Azure IDP SSO for Brightspace Community & connected tools Canada
17 SupportNinja Customer Support Canada
18 The Results Companies, LLC dba Results CX Customer Support Canada, United States, Mexico
19 Vanilla Forums ULC Community Forums Canada
20 TollFreeForwarding.com Customer Support, Telephony United States
21 EPAM Systems, Inc, Software Development and Ancillary Services United States, India, European Union, LATAM
22 Agilisium Consulting LLC Data Migration India
23 Google Analytics Product Analytics United States
24 Hound Technology, Inc. (DBA Honeycomb) Insights & Performance Monitoring United States
25 BrightIdea Product Feedback United States, European Union
26 Ironwasp Security Inc. (Domdog) Security United States
27 Association Analytics Learning Analytics United States
28 Atomic Jolt, LLC Text Searching and Content Authoring United States, Australia, Ireland
29 ClassEDU, Inc (AKA Class Technologies) Third-Party Training and Learning Integration for Conferencing United States, Canada, United Kingdom, Germany, Japan, Singapore, Australia, New Zealand
30 Copyleaks Technologies Ltd. Plagiarism Detection United States, Europe
31 Credly, Inc. Digital Credential Management United States, Europe
32 Domo, Inc. Client Reporting Customer Location Dependent (United States, Republic of Ireland)
33 FeedbackFruits BV Pedagogy Tools United States, Canada, Australia, Europe
34 Fishtail Technologies SIS Integration Customer Location Dependent (United States, Canada, Mexico, Australia, Republic of Ireland, Singapore, India)
35 Genius SIS, Inc. Workflow Management Canada, United States
36 Go1 Training & Development United States, Australia, European Union
37 Integrity Advocate Inc. Plagiarism Detection & Proctoring Customer Location Dependent (Canada, United Kingdom, European Union)
38 Janison Solutions Pty Ltd Proctoring & Assessments Australia, Singapore, United Kingdom, Europe
39 K-16 Course Migration & Archiving Customer Location Dependent
40 OpenSesame, Inc. eLearning Marketplace United States, Europe
41 ReadSpeaker Accessibility Tools United States
42 Seesaw Learning, Inc Early & Primary Learning Platform United States, United Kingdom, Australia
43 ShuffleLabs, LLC Application Integration Customer Location Dependent (Canada, United States, Australia, Republic of Ireland, European Union, Singapore)
44 SchoolDay (Formerly Global Grid 4 Learning) Data Exchange Platform Canada, United States
45 Workato, Inc. Integration and Automation United States, Australia, Europe
46 YouSeeU, Inc. (DBA Bongo) Video Assessment, Virtual Classroom, & AI-Powered Simulations Customer Location Dependent (Canada, United States, South America, Europe, Australia, Asia)
47 YuJa, Inc. Content Accessibility & Proctoring Canada, United States, Europe, Australia, Singapore
48 LearnWise Software International B.V. AI Powered Tutoring, Feedback & Chat Support Internal Analytics AWS: EU (Dublin, Ireland), UK (London), US (Virginia), AUS (Sydney), CAN (Canada Central) Microsoft Azure: Frankfurt, Germany, Sweden, France
49 Honorlock, Inc. Proctoring United States
50 Qwickly Inc. Attendance, Engagement, and Reporting United States, United Kingdom, Australia
51 Drieam B.V. Student Information System (SIS) and Online Storefront EU (Netherlands)
52 Smiley Owl Tech S.L. Online Proctoring and Exam Integrity EU (Ireland)
53 Hurix Systems Private Limited Course Content Development & Migration Services India
54 AWS Lambda Personal Data Redaction & Automated Quality Assurance of Support Interactions Canada, United States

Get an email when Brightspace changes its subprocessors

ClauseTrail re-checks this list every day and tells you exactly who was added or removed — including when a vendor starts sending data to an AI provider. The first vendors are free.

Track Brightspace free

Key DPA terms at Brightspace

What Brightspace's data processing agreement commits to, with the sentence each answer comes from. SCCs or the Data Privacy Framework: what's the difference?

Breach notification

Without undue delay, with no set deadline

“D2L will (a) notify the Controller of a Security Incident without undue delay after becoming aware of it”
DPA, www.d2l.com ↗
Notice of a new subprocessor

10 days ahead

“Unless the Controller submits a written objection within ten (10) days of receiving such notice, the Processor may engage the new Sub‑Processor.”
DPA, www.d2l.com ↗
Transfers outside the EU

Standard contractual clauses and adequacy decisions

“The transfer is into a territory which is subject to a valid and current adequacy decision under the applicable Data Protection Laws”
“If any Personal Data transfers between the Controller and the Processor requires execution of SCCs in order to comply with the Data Protection Laws, the parties will complete all relevant details in, and execute the SCCs”
DPA, www.d2l.com ↗
Customer data after the contract ends

Deleted or returned when the contract ends

“On termination of the Agreement for any reason or expiry of its term, the Processor shall in accordance with applicable terms in the Agreement, securely delete or destroy and not retain, all or any of the Personal Data related to this DPA in its possession or control.”
DPA, www.d2l.com ↗
Audit rights

Through certifications and audit reports only

“Processor shall make available for Controller's review (i) copies of Processor's certifications; and/or (ii) upon Controller's request no more than once per calendar year, reports demonstrating Processor's compliance with prevailing data security standards applicable to the Processing of the Personal Data.”
DPA, www.d2l.com ↗

Documents we track for Brightspace

DPA
checked September 28, 2026 www.d2l.com ↗
Privacy policy
checked September 28, 2026 www.d2l.com ↗
Subprocessor list
checked September 28, 2026 www.d2l.com ↗
Terms of service
checked September 28, 2026 www.d2l.com ↗
Trust page
checked September 28, 2026 www.d2l.com ↗

Change history

Tracking since September 28, 2026. No change has been published since; additions, removals and document changes will appear here as they're published.

Brightspace subprocessors FAQ

How many subprocessors does Brightspace use?
Brightspace lists 54 subprocessors on its published list, including Amazon Web Services, Inc., Microsoft O365, Salesforce.com, Inc. (Steelbrick CPQ), Atlassian, and Planhat AB and 49 more.
Where does Brightspace process customer data?
The subprocessors named by Brightspace are located in United States, Canada, Australia, Europe, European Union, and Singapore and 32 other locations, as stated on its list.
How quickly does Brightspace report a personal data breach to customers?
According to its DPA, Brightspace reports a personal data breach to customers without undue delay, with no set deadline: “D2L will (a) notify the Controller of a Security Incident without undue delay after becoming aware of it”
How much notice does Brightspace give before adding a subprocessor?
Brightspace's DPA gives 10 days' notice of a new subprocessor, the time customers have to object: “Unless the Controller submits a written objection within ten (10) days of receiving such notice, the Processor may engage the new Sub‑Processor.”
How does Brightspace transfer personal data outside the EU?
Brightspace's DPA relies on standard contractual clauses and adequacy decisions: “The transfer is into a territory which is subject to a valid and current adequacy decision under the applicable Data Protection Laws”
When was Brightspace's subprocessor list last checked?
ClauseTrail last checked Brightspace's subprocessor list on September 28, 2026. Lists are re-checked daily.
How do I find out when Brightspace adds or removes a subprocessor?
ClauseTrail monitors Brightspace's subprocessor list, DPA, privacy policy and terms and emails you the exact change — who was added or removed and what the page said before and after. The first vendors are free.