Storyboard That — Subprocessors & Service Providers

Clever Prototypes, LLC (DBA Storyboard That) — www.storyboardthat.com

Last updated: July 10, 2026

We believe in being transparent about every third party that may handle personal data in connection with Storyboard That. The vendors below are organized by the role they play. Each is bound by written terms that impose data protection obligations consistent with our commitments to our customers.

We update this page when we add or replace a vendor. Material changes are posted in advance in accordance with our customer agreements.

Core Service Subprocessors

These vendors process personal data on our behalf and on our instructions to deliver, support, and improve the Storyboard That service.

Vendor	Service Provided	Role & Purpose	Location of Processing	Personal Data Processed	More Information
Microsoft Azure	Cloud hosting & infrastructure	Hosts the Storyboard That platform. Stores customer account data, user-generated content, and application data on our instructions.	USA (customer data storage); global edge infrastructure	All platform data	Azure Trust Center
Twilio SendGrid	Email delivery	Sends transactional and marketing email to users on our behalf.	USA	Name, email address, email content	SendGrid Privacy
Iterable	Customer messaging & lifecycle marketing	Sends and personalizes email to account holders on our behalf.	Global (US-based)	Contact details, user attributes, subscription status, engagement events (opens, clicks, purchases)	Iterable GDPR
Zendesk	Customer support platform	Manages support tickets and phone support on our behalf.	Global	Name, email, phone number, communication content (tickets, call recordings), customer ID	Zendesk Trust Center
Google Analytics (GA4)	Website & application analytics	Measures site and app usage to improve the service. Runs subject to users' cookie preferences.	Global (regional collection; processing locations vary)	Usage data (pages, clicks, time on site), device information, approximate location	Google Privacy
VWO	A/B testing & optimization	Tests site variations to improve user experience and conversion. Runs subject to users' cookie preferences.	USA	Usage data, device information, IP address	VWO GDPR
Pipedrive	Customer relationship management (CRM)	Manages contact records and communication history for school and customer accounts to support sales and account management on our behalf.	USA	Name, email, organization, phone number, communication logs, account details	Pipedrive Privacy
Anthropic	AI-assisted data analysis (Claude Team)	Processes customer account, contact, and usage data on our instructions to support account management and customer communications, including outreach to school contacts. No student personal data is provided. Under our Claude Team commercial terms, data is not used to train Anthropic's models.	USA	School staff and customer contact details (name, email, school/organization), account and engagement data. No student personal data.	Anthropic Trust Center
TaxJar	Sales tax calculation	Calculates and manages sales tax on purchases on our behalf.	USA	Billing location (address, ZIP), transaction data (amount, items)	TaxJar Security
Usercentrics (Cookiebot)	Consent management platform (CMP)	Collects and stores users' cookie consent choices (the consent log) as legal proof of compliance, on our behalf.	European Union (Denmark & Ireland)	Anonymized IP, consent date/time & state, user agent, page URL, anonymous consent key (UUID)	Cookiebot
UserWay	Website accessibility widget	Provides on-site accessibility tools (ADA/WCAG).	USA	Accessibility settings, browser/operating system data	UserWay GDPR
NeverBounce (ZoomInfo)	Email verification	Verifies email addresses on our lists to ensure deliverability; processes addresses solely for the verification requested.	USA	Email address	NeverBounce Privacy

Payment Processors

We offer several ways to pay. Depending on the provider and the transaction, a payment company may act as our subprocessor, as an independent data controller under its own privacy terms, or as Merchant of Record (the legal seller of the transaction). We list all of them here for transparency.

Vendor	Service Provided	Role & Purpose	Location of Processing	Personal Data Processed	More Information
Stripe	Payment processing	Processes card payments on our instructions (subprocessor for the transaction). Stripe is also an independent controller for its own fraud-prevention and regulatory compliance purposes.	Global (primarily USA)	Payment method details, transaction data, billing address, name, email, device info, IP address	Stripe Privacy Center
PayPal	Payment processing	Independent data controller. When you pay with PayPal, you transact directly with PayPal under its own terms and privacy policy.	Global (primarily USA)	Payment details, billing info, name, email, device info, IP address	PayPal Privacy
Paddle	Merchant of Record / payments	Merchant of Record for certain transactions — Paddle is the legal seller of the purchase and an independent controller of buyer data under its own terms.	Global (incl. EU data centers)	Payment details, billing info, name, email, device info, IP address	Paddle Legal

School Integrations

These integrations are chosen and enabled by the school. Data flows at the school's direction and can be bi-directional: rostering data (names, classes, teachers) flows in to provision accounts, and user-generated content, grades, and activity events can flow back to the school's own systems. We add integrations at our customers' direct request and can integrate with other LTI 1.3–compatible vendors.

Vendor	Service Provided	Role & Purpose	Location of Processing	Personal Data Processed	More Information
Schoology (PowerSchool)	LMS integration (LTI 1.3)	Optional integration enabled and directed by the school. Supports rostering in and returning student work and grades to the school's LMS.	Global	Inbound: rostering data (names, classes). Outbound: user-generated content, grades, activity events	PowerSchool Privacy
Instructure Canvas	LMS integration (LTI 1.3)	Optional integration enabled and directed by the school. Supports rostering in and returning student work and grades to the school's LMS.	Global	Inbound: rostering data. Outbound: user-generated content, grades, activity events	Instructure Privacy
Google Classroom	LMS integration	Optional integration enabled and directed by the school under its Google Workspace for Education agreement.	Global	Inbound: rostering data. Outbound: user-generated content, grades, activity events	Google for Education
Clever	Rostering & single sign-on	Contracted by the school district; sends rostering data to Storyboard That at the district's direction to provision accounts and enable SSO.	USA	Inbound: student/teacher rostering data (names, classes, teachers)	Clever Privacy
ClassLink	Rostering & single sign-on	Contracted by the school district; sends rostering data to Storyboard That at the district's direction to provision accounts and enable SSO.	USA	Inbound: student/teacher rostering data (names, classes, teachers)	ClassLink Privacy

Internal Productivity & Business Operations Tools

We use standard workplace tools to run our business. Customer-related documentation, communications, scheduling, and billing records may appear in these systems in the ordinary course of operations.

Vendor	Service Provided	Role & Purpose	Location of Processing	Personal Data Processed	More Information
Google Workspace	Productivity & collaboration	Internal email, documents, and collaboration. Customer-related documentation and communications may appear in these systems.	Global	Business contact details and customer-related documents/communications, as applicable	Workspace Security
Atlassian (Jira, Confluence)	Project management & documentation	Internal project tracking and documentation. Customer-related documentation may appear in these systems.	Global	Business contact details and customer-related documentation, as applicable	Atlassian Trust
Slack	Team communication	Internal team communication. Customer-related discussions and files may appear in these systems.	Global	Business contact details and customer-related discussions/files, as applicable	Slack Compliance
JustCall	Business phone system	Phone system for sales and support conversations with customers and prospects.	USA	Call recordings, transcripts, message data, call metadata	JustCall Security
Calendly	Online scheduling	Scheduling for meetings and demos; attendees provide their details to book a time.	USA	Name, email, meeting details	Calendly Security
FreshBooks	Accounting & invoicing	Prepares quotes and invoices for school and business purchases.	Canada, USA	Billing contact names, contact info, quote/invoice details	FreshBooks Privacy
eFax	Online fax	Transmits invoices and purchase documents to schools that require fax.	USA	Name, fax number, purchase details on faxed invoices	eFax Privacy

Advertising & Marketing

We advertise Storyboard That online. Advertising partners operate under their own terms and never receive student data. These tools run subject to users' cookie preferences, which can be managed at any time through our cookie consent banner — opting out of non-essential cookies disables them.

Vendor	Service Provided	Role & Purpose	Location of Processing	Personal Data Processed	More Information
Meta	Advertising & ad measurement (Meta Pixel)	Measures the effectiveness of our advertising. Meta operates as a joint controller for event collection under its own terms. No student data or platform PII is shared.	USA (global)	Hashed email, IP address, browser data (user agent), ad interaction events, Facebook IDs	Meta GDPR

We review our vendor relationships on an ongoing basis to ensure they meet our standards for data protection and compliance. For questions, please refer to our Politica Sulla Riservatezza or contact our support team.