Draft template. This document is a placeholder prepared for demonstration and has not been reviewed by a lawyer. It must be reviewed and completed by qualified counsel before use with customers. Bracketed items need to be filled in.

Subprocessors

Last updated: 2026-10-05 · Version: 2026-10-05

Devo Productions LLC uses the following third parties to help provide Scriptorium. We will update this page, and notify School administrators at least 30 days ahead, before adding or replacing one that handles School data.

Subprocessor Purpose Data involved Location
Cloudflare, Inc. Network edge: DNS, TLS termination, DDoS and bot protection, secure tunnel to our servers Traffic metadata and encrypted request content in transit Global edge network
Devo Productions LLC (own hardware) Application and database hosting All School data (encrypted backups) United States
Sendinblue SAS (Brevo) Sending account emails Recipient name and email, message content European Union / global
Cloudflare, Inc. (R2) — not yet enabled Encrypted backup copies Encrypted database backups (we hold the keys) United States / global
Google LLC (only if a School connects Google) Optional Google Docs / Classroom integration Data the School authorizes via OAuth United States / global