Subprocessors
Last updated: 6 August 2026
Examrix Ltd. uses a small number of carefully selected third-party providers ("subprocessors") to operate the platform. Each provider is engaged under a written data processing agreement, is permitted to process personal data only on our documented instructions, and is bound by confidentiality and appropriate security obligations.
This page is provided in support of our Privacy Policy and is kept up to date as our providers change.
Current subprocessors
| Provider | Purpose | Data processed | Processing location | Transfer safeguard |
|---|---|---|---|---|
| Lovable (Lovable Labs Incorporated) | Application hosting, managed database, authentication, file storage and backend infrastructure | Account details, authentication data, educational progress and usage data, support records, technical logs | EU / United States | Data Processing Agreement; EU Standard Contractual Clauses for any transfer outside the EEA/UK |
| Cloudflare, Inc. | Content delivery, edge compute, DDoS protection and network security | IP address, request metadata, technical logs | Global edge network | Data Processing Addendum; EU Standard Contractual Clauses |
| Stripe Payments Europe, Ltd. / Stripe, Inc. | Merchant of record, payment processing, subscription billing, invoicing, tax/VAT handling, refunds and chargebacks | Name, email address, billing address, payment method details (held by Stripe), transaction and subscription records | United Kingdom / EU | Stripe processes payments and, for eligible transactions, acts as merchant of record and independent controller for payment data; standard contractual clauses and UK/EU adequacy |
| Google (Gemini models, accessed via the Lovable AI Gateway) | AI-assisted generation of tutorials, explanations and study content, and AI-assisted practice features | Prompts and content submitted to AI features, generated outputs, technical request metadata | EU / United States | Enterprise API terms with no use of submitted content for model training; Standard Contractual Clauses |
| Postmark (ActiveCampaign, LLC) | Transactional and service email delivery (account, security, billing and study notification emails) | Email address, name, email content and delivery metadata | United States | Data Processing Agreement; EU Standard Contractual Clauses |
Professional advisers
We may also disclose limited personal data to accountants, auditors, insurers and legal advisers acting under professional duties of confidentiality. These recipients act as independent controllers rather than subprocessors.
International transfers
Where a subprocessor processes personal data outside the European Economic Area or the United Kingdom, we rely on an adequacy decision or on the European Commission's Standard Contractual Clauses (together with the UK International Data Transfer Addendum where relevant), supported by technical measures such as encryption in transit and at rest and access controls.
Changes to this list
We review this list regularly. If we add or replace a subprocessor that processes personal data of our users, we will update this page and, where required by law or contract, notify affected users in advance so that any objection can be raised.
Questions
Contact us at privacy@examrix.com with any questions about our subprocessors or to request a copy of our data processing terms.