Lurnnet Sub-Processor list

Last updated: 13 August 2026 · List version 1.4.0

These are the third parties (“Sub-Processors”) that process class data on Lurnnet’s behalf under the Data Processing Agreement. Class and account records stay in the European Union. Website delivery may be global. Lurnnet gives controllers at least 30 calendar days’ prior notice (in-app and by email) of any addition or replacement of a Sub-Processor, and controllers may object or terminate for cause under DPA §5.3.

Cross-border transfers use contracts and any approvals required by applicable law, including Egypt’s PDPL. This page is updated when the list changes.

Sub-ProcessorPurposeCountry
RailwayApplication hostingNetherlands (European Union)
NeonDatabaseGermany (European Union)
CloudflareSecurity, content delivery, and file storageFiles in the European Union; edge is transit
VercelWebsite and web-app delivery (class records stay in the EU)Global edge
Bunny StreamClass video hosting and playbackEuropean Union
SentryError monitoringEuropean Union
PostHogProduct analytics (teachers and TAs; not students)European Union
GoogleAI features and abuse prevention at sign-upUnited States
ResendTransactional emailEuropean Union
Expo PushMobile push notificationsUnited States
PayTabsPayment processing (Egypt, GCC and international)Egypt / GCC
Tap PaymentsPayment processing (GCC and international)GCC
PaymobPayment processing (Egypt)Egypt

Questions or objections: privacy@lurnnet.com.