Subprocessors
The data processing agreement of AI-School is leading for the list of subprocessors involved in AI-School's data processing. The summary below is based on the Edu-V processor appendix, version 1.0 dated July 6, 2026. Other suppliers or internal administrative systems are not included here if they fall outside this scope.
Account and student administration data are not automatically added to AI model providers. These providers do receive the content of prompts, necessary chat context, and any additional context chosen by the user. If these contain personal data, the providers may process it.
Google Cloud
We use Google Cloud for hosting the virtual environment of AI-School.
Google Cloud processes name, student number, email address, and chat history.
Storage and processing take place in the Netherlands and Belgium. Google Cloud is headquartered in the United States.
AI-School uses the Cloud Data Processing Addendum of Google Cloud. Google Cloud is ISO 27001 certified.
Google Identity Toolkit
Google Identity Toolkit is used for user authentication.
Google Identity Toolkit processes email address, IP address, user agent, and user ID.
Storage and processing take place in the Netherlands and Belgium. Google Identity Toolkit is headquartered in the United States.
Google Gemini
We use Google Gemini as an AI model with which users can ask questions, generate texts, and analyze data.
Google Gemini processes input, prompts, and chat history.
Storage takes place in the Netherlands and Belgium. Prompts may be processed in the Netherlands, Belgium, and the United States. Google Gemini is headquartered in the United States. Contractual safeguards are in place for transfers outside the EEA.
OpenAI
We use OpenAI for GPT models.
OpenAI processes input, prompts, and chat history to generate responses.
Processing takes place in Ireland and the United States. A signed data processing agreement with OpenAI is in place. Contractual safeguards are in place for transfers outside the EEA.
Anthropic
We use Anthropic for Claude models.
Anthropic processes input, prompts, and chat history to generate responses.
Processing takes place in the United States. Anthropic is headquartered in San Francisco, United States. A Data Processing Addendum with Anthropic is in place. Contractual safeguards are in place for transfers outside the EEA.
Mistral AI
We use Mistral AI for Mistral models.
Mistral AI processes input, prompts, and chat history to generate responses.
Processing takes place in France. Mistral AI is headquartered in France.
Model Training and Retention Periods at Providers
AI-School does not make API input available for model training. For the regular commercial API services used by AI-School, the providers' terms specify that input is not used for model training without explicit consent. Technical retention periods vary per provider, model, endpoint, and function. Some providers may temporarily retain input and output for abuse detection unless a supported zero-data-retention setting applies. Therefore, AI-School does not make a general promise that every provider deletes all data exactly after 30 days.
The retention periods in the AI-School application are separate from temporary processing by model providers. Read more about this at Retention Periods.
No Subprocessors: BFL and Stability AI
Black Forest Labs (BFL/FLUX) and Stability AI are not subprocessors of AI-School. The image links are technically limited so that these providers cannot receive personal data of users or images from the application.
