Brightspace Subprocessors List (September 2026): Changes and History
Brightspace names 54 subprocessors on its published list. Read from the vendor's own page and re-checked daily.
Brightspace subprocessors (September 2026)
| # | Subprocessor | Purpose | Location |
|---|---|---|---|
| 1 | Amazon Web Services, Inc. | Cloud Hosting | For Data storage: Customer Location Dependent AWS regions (including United States, Canada, Australia, Republic of Ireland, Singapore, India) For Data processing: Customer Location Dependent AWS regions, for certain AI inference services, global AWS infrastructure |
| 2 | Microsoft O365 | Corporate Productivity & Business Operations | Canada |
| 3 | Salesforce.com, Inc. (Steelbrick CPQ) | Client Relationship Management | Canada, United States |
| 4 | Atlassian | Project Management | Canada |
| 5 | Planhat AB | Client Relationship Management and Global Support | United States |
| 6 | Qualtrics, LLC | Surveys | Canada |
| 7 | Tableau | Customer Data Analysis, Reporting and Business Intelligence | Canada |
| 8 | Smartsheet | Project Management, Product Development and Professional Services | United States, European Union |
| 9 | Salesloft, Inc. | Sales engagement and customer/prospect relationship management, including communication sequencing and meeting coordination | United States, European Union |
| 10 | D2L Subsidiaries: | Support and Professional Services | Customer Location Dependent (United States, Canada, Mexico, Australia, Republic of Ireland, Singapore, India) |
| 11 | Salesforce.com, Inc. (ServiceCloud) | Customer Support | Canada, United States |
| 12 | Forethought Technologies Inc. | Customer Support | United States |
| 13 | Natterbox | Customer Support, Telephony | United Kingdom |
| 14 | ANSR Source Content US LLC, | Implementation Services for Customers in India | United States, India |
| 15 | Language IO Inc | Customer Support | Canada |
| 16 | Microsoft Azure IDP | SSO for Brightspace Community & connected tools | Canada |
| 17 | SupportNinja | Customer Support | Canada |
| 18 | The Results Companies, LLC dba Results CX | Customer Support | Canada, United States, Mexico |
| 19 | Vanilla Forums ULC | Community Forums | Canada |
| 20 | TollFreeForwarding.com | Customer Support, Telephony | United States |
| 21 | EPAM Systems, Inc, | Software Development and Ancillary Services | United States, India, European Union, LATAM |
| 22 | Agilisium Consulting LLC | Data Migration | India |
| 23 | Google Analytics | Product Analytics | United States |
| 24 | Hound Technology, Inc. (DBA Honeycomb) | Insights & Performance Monitoring | United States |
| 25 | BrightIdea | Product Feedback | United States, European Union |
| 26 | Ironwasp Security Inc. (Domdog) | Security | United States |
| 27 | Association Analytics | Learning Analytics | United States |
| 28 | Atomic Jolt, LLC | Text Searching and Content Authoring | United States, Australia, Ireland |
| 29 | ClassEDU, Inc (AKA Class Technologies) | Third-Party Training and Learning Integration for Conferencing | United States, Canada, United Kingdom, Germany, Japan, Singapore, Australia, New Zealand |
| 30 | Copyleaks Technologies Ltd. | Plagiarism Detection | United States, Europe |
| 31 | Credly, Inc. | Digital Credential Management | United States, Europe |
| 32 | Domo, Inc. | Client Reporting | Customer Location Dependent (United States, Republic of Ireland) |
| 33 | FeedbackFruits BV | Pedagogy Tools | United States, Canada, Australia, Europe |
| 34 | Fishtail Technologies | SIS Integration | Customer Location Dependent (United States, Canada, Mexico, Australia, Republic of Ireland, Singapore, India) |
| 35 | Genius SIS, Inc. | Workflow Management | Canada, United States |
| 36 | Go1 | Training & Development | United States, Australia, European Union |
| 37 | Integrity Advocate Inc. | Plagiarism Detection & Proctoring | Customer Location Dependent (Canada, United Kingdom, European Union) |
| 38 | Janison Solutions Pty Ltd | Proctoring & Assessments | Australia, Singapore, United Kingdom, Europe |
| 39 | K-16 | Course Migration & Archiving | Customer Location Dependent |
| 40 | OpenSesame, Inc. | eLearning Marketplace | United States, Europe |
| 41 | ReadSpeaker | Accessibility Tools | United States |
| 42 | Seesaw Learning, Inc | Early & Primary Learning Platform | United States, United Kingdom, Australia |
| 43 | ShuffleLabs, LLC | Application Integration | Customer Location Dependent (Canada, United States, Australia, Republic of Ireland, European Union, Singapore) |
| 44 | SchoolDay (Formerly Global Grid 4 Learning) | Data Exchange Platform | Canada, United States |
| 45 | Workato, Inc. | Integration and Automation | United States, Australia, Europe |
| 46 | YouSeeU, Inc. (DBA Bongo) | Video Assessment, Virtual Classroom, & AI-Powered Simulations | Customer Location Dependent (Canada, United States, South America, Europe, Australia, Asia) |
| 47 | YuJa, Inc. | Content Accessibility & Proctoring | Canada, United States, Europe, Australia, Singapore |
| 48 | LearnWise Software International B.V. | AI Powered Tutoring, Feedback & Chat Support Internal Analytics | AWS: EU (Dublin, Ireland), UK (London), US (Virginia), AUS (Sydney), CAN (Canada Central) Microsoft Azure: Frankfurt, Germany, Sweden, France |
| 49 | Honorlock, Inc. | Proctoring | United States |
| 50 | Qwickly Inc. | Attendance, Engagement, and Reporting | United States, United Kingdom, Australia |
| 51 | Drieam B.V. | Student Information System (SIS) and Online Storefront | EU (Netherlands) |
| 52 | Smiley Owl Tech S.L. | Online Proctoring and Exam Integrity | EU (Ireland) |
| 53 | Hurix Systems Private Limited | Course Content Development & Migration Services | India |
| 54 | AWS Lambda | Personal Data Redaction & Automated Quality Assurance of Support Interactions | Canada, United States |
Get an email when Brightspace changes its subprocessors
ClauseTrail re-checks this list every day and tells you exactly who was added or removed — including when a vendor starts sending data to an AI provider. The first vendors are free.
Key DPA terms at Brightspace
What Brightspace's data processing agreement commits to, with the sentence each answer comes from. SCCs or the Data Privacy Framework: what's the difference?
- Breach notification
-
Without undue delay, with no set deadline
“D2L will (a) notify the Controller of a Security Incident without undue delay after becoming aware of it”
DPA, www.d2l.com ↗ - Notice of a new subprocessor
-
10 days ahead
“Unless the Controller submits a written objection within ten (10) days of receiving such notice, the Processor may engage the new Sub‑Processor.”
DPA, www.d2l.com ↗ - Transfers outside the EU
-
Standard contractual clauses and adequacy decisions
“The transfer is into a territory which is subject to a valid and current adequacy decision under the applicable Data Protection Laws”
“If any Personal Data transfers between the Controller and the Processor requires execution of SCCs in order to comply with the Data Protection Laws, the parties will complete all relevant details in, and execute the SCCs”
DPA, www.d2l.com ↗ - Customer data after the contract ends
-
Deleted or returned when the contract ends
“On termination of the Agreement for any reason or expiry of its term, the Processor shall in accordance with applicable terms in the Agreement, securely delete or destroy and not retain, all or any of the Personal Data related to this DPA in its possession or control.”
DPA, www.d2l.com ↗ - Audit rights
-
Through certifications and audit reports only
“Processor shall make available for Controller's review (i) copies of Processor's certifications; and/or (ii) upon Controller's request no more than once per calendar year, reports demonstrating Processor's compliance with prevailing data security standards applicable to the Processing of the Personal Data.”
DPA, www.d2l.com ↗
Documents we track for Brightspace
- DPA
- checked September 28, 2026 www.d2l.com ↗
- Privacy policy
- checked September 28, 2026 www.d2l.com ↗
- Subprocessor list
- checked September 28, 2026 www.d2l.com ↗
- Terms of service
- checked September 28, 2026 www.d2l.com ↗
- Trust page
- checked September 28, 2026 www.d2l.com ↗
Change history
Tracking since September 28, 2026. No change has been published since; additions, removals and document changes will appear here as they're published.
Brightspace subprocessors FAQ
- How many subprocessors does Brightspace use?
- Brightspace lists 54 subprocessors on its published list, including Amazon Web Services, Inc., Microsoft O365, Salesforce.com, Inc. (Steelbrick CPQ), Atlassian, and Planhat AB and 49 more.
- Where does Brightspace process customer data?
- The subprocessors named by Brightspace are located in United States, Canada, Australia, Europe, European Union, and Singapore and 32 other locations, as stated on its list.
- How quickly does Brightspace report a personal data breach to customers?
- According to its DPA, Brightspace reports a personal data breach to customers without undue delay, with no set deadline: “D2L will (a) notify the Controller of a Security Incident without undue delay after becoming aware of it”
- How much notice does Brightspace give before adding a subprocessor?
- Brightspace's DPA gives 10 days' notice of a new subprocessor, the time customers have to object: “Unless the Controller submits a written objection within ten (10) days of receiving such notice, the Processor may engage the new Sub‑Processor.”
- How does Brightspace transfer personal data outside the EU?
- Brightspace's DPA relies on standard contractual clauses and adequacy decisions: “The transfer is into a territory which is subject to a valid and current adequacy decision under the applicable Data Protection Laws”
- When was Brightspace's subprocessor list last checked?
- ClauseTrail last checked Brightspace's subprocessor list on September 28, 2026. Lists are re-checked daily.
- How do I find out when Brightspace adds or removes a subprocessor?
- ClauseTrail monitors Brightspace's subprocessor list, DPA, privacy policy and terms and emails you the exact change — who was added or removed and what the page said before and after. The first vendors are free.