This website uses cookies to improve your experience. Please select whether you would like to accept our decline tracking technologies and cookies. https://getbiggerbrains.com/privacy-policy/ Read More
Subprocessor List
Third parties engaged by Bigger Brains (Triple Tech LLC) to process customer personal data in connection with the BrainStation LMS, BrainBot, and EmailCheck.
Bigger Brains acts as a Data Processor for customer personal data; the customer (or their MSP) acts as the Data Controller. To deliver our services we engage the subprocessors listed below. Each is bound by a written agreement containing data protection terms no less protective than those in our customer Data Processing Addendum (DPA), including, where applicable, Standard Contractual Clauses (SCCs) and the UK International Data Transfer Addendum.
Current subprocessors
| Subprocessor | Purpose | Data processed | Processing location |
|---|---|---|---|
| Microsoft Azure |
Hosting and application services; course and progress data | Account identifiers, course and progress data, EmailCheck submissions in transit | United States (Azure US East) |
| Amazon Web Services |
User management and e-commerce platform hosting | User account and financial data (encrypted at rest) | United States |
| Anthropic |
AI analysis of user-submitted emails (EmailCheck) | Content of the individual email message explicitly submitted by the user for analysis | United States |
| SendGrid |
Transactional email and notifications | Recipient name and email address, message content | United States |
| Amazon SES |
Transactional email and notifications | Recipient name and email address, message content | United States |
| Stripe |
Payment processing and billing | Billing contact details and payment information | United States |
EmailCheck — data minimization
EmailCheck processes only the individual email message a user explicitly submits for analysis. There is no mailbox-wide access, no indexing or scanning of the user’s mailbox, and no ongoing or background monitoring. Only the data necessary to perform phishing analysis is transmitted to our AI subprocessor, and customer email content is never used for AI model training.
- The original submitted message is not stored after analysis is complete.
- Only the sender, date, time, and subject line are retained, alongside the results (pass / uncertain / fail across the five SLURP checkpoints and the overall verdict), for reporting purposes.
- Analysis results are retained for 12 months.
- No other message content, AI prompt, or AI response is retained by Bigger Brains.
International data transfers
Where personal data of individuals in the EU/EEA, the UK, or Switzerland is transferred to the United States, those transfers are governed by the European Commission’s Standard Contractual Clauses and, for UK data, the UK International Data Transfer Addendum, flowed down through our processor chain. Transfers are recorded in our records of processing activities, and a Transfer Impact Assessment (TIA) is available to enterprise and public-sector customers on request.
Changes to this list
Bigger Brains maintains this page as the authoritative list of subprocessors and updates it whenever a subprocessor is added, replaced, or removed. Customers may subscribe to notification of changes, and may raise a reasonable objection to a new subprocessor as provided in their Data Processing Addendum.
Contact
To request a Data Processing Addendum, a Transfer Impact Assessment, or notification of subprocessor changes, or to submit a data subject request (access, correction, deletion, restriction, objection, or export), contact privacy@bigger-brains.com.